
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/C3CAF2B45FA411F1BEAC166C6447A888.roa
File: C3CAF2B45FA411F1BEAC166C6447A888.roa (raw, json)
Hash identifier: eWIo7kbVQkKc0K9IfxrOFYr5X4owiTYv5hYN6CSCNfY=
Subject key identifier: B4:97:DB:B2:0C:D3:38:E9:6D:52:40:C6:14:09:A4:6E:7A:AC:54:95
Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial: 035E
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/C3CAF2B45FA411F1BEAC166C6447A888.roa
Signing time: Wed 03 Jun 2026 23:34:29 +0000
ROA not before: Wed 03 Jun 2026 23:34:29 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4771
IP address blocks: 202.27.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 01:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Validity
Not Before: Jun 3 23:34:29 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a20ba05-edf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:8f:0e:d9:aa:ab:44:6a:f6:18:9a:52:7f:
6f:1c:6b:20:12:69:41:f0:3c:e6:cb:2d:b5:6f:c2:
55:e4:24:08:0b:14:2b:cc:c2:1e:31:4e:d2:ab:cc:
72:28:9f:67:71:1c:5e:01:91:d8:ed:f9:41:a5:34:
ca:0d:ea:fb:26:ea:f8:6e:fd:ea:97:9e:12:d4:ae:
4e:70:7d:b9:b0:3f:15:99:26:ee:43:e9:d8:19:d2:
55:dd:e3:af:93:53:63:65:4c:72:8d:3f:fe:87:73:
c0:49:af:d1:10:14:97:61:55:57:fb:33:12:46:96:
73:0d:0b:d0:0c:d6:8c:b2:7f:0a:d1:7f:b2:e4:52:
a9:56:f8:0e:cf:4d:28:0f:dd:37:21:e7:c0:03:1b:
80:db:4c:64:f4:19:36:f6:2c:fc:3b:5f:f9:0b:eb:
15:5b:ee:df:86:ce:1d:a4:20:90:ef:63:b2:4c:3f:
3f:5d:c9:0a:06:3a:f6:b7:28:9f:ee:f9:6f:ef:b6:
86:34:42:62:ac:7a:72:5a:43:57:27:63:a3:c5:ee:
c5:a3:c2:2b:de:57:cc:11:ad:5c:cf:17:50:f2:2a:
c9:71:71:8b:2a:9b:35:3d:3a:17:eb:dc:f3:3c:af:
9b:d1:5c:6b:7f:e5:98:2a:f6:58:5d:fd:e0:c1:99:
e7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:DB:B2:0C:D3:38:E9:6D:52:40:C6:14:09:A4:6E:7A:AC:54:95
X509v3 Authority Key Identifier:
keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/C3CAF2B45FA411F1BEAC166C6447A888.roa
sbgp-ipAddrBlock: critical
IPv4:
202.27.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:54:71:75:44:a3:44:9b:36:7c:40:d3:18:84:f3:91:02:0f:
e7:60:3d:b4:5b:65:31:e7:ab:e3:a8:3c:6a:b6:03:e0:95:5c:
89:03:4c:3d:a6:7b:05:9b:1f:9c:41:f3:23:2f:3f:e2:d0:60:
d4:54:cd:34:69:e0:c1:85:cf:14:2d:2c:98:0b:78:21:fc:b3:
a9:87:af:24:01:7d:85:2e:41:75:b1:8d:f4:54:b9:b6:9e:ac:
65:9c:ce:7e:3c:9e:4b:55:30:3b:7c:0e:7e:71:af:5a:d7:84:
1d:4a:f6:05:13:27:9f:78:83:93:2c:e9:0b:f8:47:0b:ed:d8:
63:a6:fb:73:5d:d5:ab:a4:f4:3c:e8:f6:26:63:05:dc:28:c3:
37:8d:c5:5c:41:6d:7e:76:39:aa:a7:31:b4:fe:53:cf:0d:e5:
52:4f:b6:ac:dd:d0:1b:0a:4c:78:31:29:1a:b4:94:66:67:5b:
a9:d9:5c:73:f0:bd:c1:95:65:e7:2e:dd:18:fe:91:b4:10:47:
fb:14:e4:74:00:ce:75:58:30:1f:83:ff:f7:17:c4:91:9e:ff:
f5:f6:a8:ea:5b:a9:08:0d:c5:f1:fe:5d:c6:01:e4:5c:da:06:
ec:4c:b3:8a:8f:43:95:c6:c0:68:d7:09:98:0d:79:60:dc:31:
e5:82:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:23 2026 by rpki-client