
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
File: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (raw, json)
Hash identifier: Q5D67jNmugqmuZx6Mln1BqBj64RHtIaLCMbnVw/ZKoU=
Subject key identifier: B3:75:69:4A:87:DF:27:18:DF:14:FB:57:BB:94:43:36:C2:80:ED:27
Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial: C9
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
Signing time: Sat 25 Apr 2026 07:43:17 +0000
ROA not before: Sat 25 Apr 2026 07:43:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138985
IP address blocks: 202.63.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 07:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Validity
Not Before: Apr 25 07:43:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ec7095-92dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:a3:91:34:b2:3d:10:cc:65:aa:62:12:0d:
e7:92:ec:a8:36:61:92:42:bf:c5:a2:e8:54:31:9f:
db:3a:96:31:6a:86:32:47:eb:ba:b0:b4:70:02:8a:
40:4e:df:e3:4a:9d:46:48:4d:25:a5:c9:44:ec:c6:
14:2d:86:58:f3:34:a5:ac:51:65:4d:69:4e:68:b6:
94:4d:48:43:70:c6:db:9f:62:34:af:fd:f7:e2:1c:
69:26:75:46:b5:7e:02:45:5c:e4:35:c1:1b:35:fa:
97:6c:27:68:3f:40:f4:79:14:c6:16:a3:92:66:21:
fb:f0:df:9d:88:9e:3a:ab:11:d4:c7:e0:9f:bd:ce:
c1:17:8b:f9:82:ee:e6:7a:68:35:8f:05:94:d3:4f:
53:c1:a0:e9:17:b2:34:15:55:aa:49:c5:3c:fd:5c:
67:45:db:af:b2:94:ee:b7:c8:77:46:90:df:b0:00:
9d:d9:dd:f5:19:9a:e7:30:35:b2:6c:72:bc:51:89:
5d:4c:fc:02:29:72:49:76:43:74:38:df:5f:d7:03:
cc:b1:54:d1:cc:38:7a:ed:26:b8:11:2c:2e:b2:32:
2d:b9:cb:55:76:6a:7c:35:61:7b:b6:16:5f:3a:c1:
34:5e:a0:89:f0:f6:34:0e:bd:d2:ce:b7:90:b0:d7:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:69:4A:87:DF:27:18:DF:14:FB:57:BB:94:43:36:C2:80:ED:27
X509v3 Authority Key Identifier:
keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.63.211.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4d:40:76:47:42:0e:19:2d:9f:30:24:0b:1c:0c:4b:c6:82:
22:55:fa:e7:3f:db:32:64:8d:81:72:47:cf:1a:63:48:01:dd:
81:a8:55:c8:a9:f3:97:35:11:9d:bc:71:fe:68:d9:16:0d:b9:
19:67:b1:29:f5:42:0d:4f:7f:05:68:7b:3b:ba:e1:47:29:ac:
17:00:83:a5:8e:4a:b0:63:cd:8b:8c:35:80:4b:47:f5:18:0e:
6d:b6:7b:16:36:d8:15:32:75:12:14:21:14:96:cc:b1:64:0b:
12:5d:15:94:7d:90:ad:52:e9:a6:18:0f:61:c7:35:5d:ee:fe:
f7:71:84:ec:cd:75:80:56:04:cb:b7:12:ca:d6:0a:33:fb:b4:
11:9e:46:ef:5d:13:c4:be:d4:3f:5f:e9:6d:53:75:8e:66:c3:
f8:97:32:ba:8b:cd:27:b5:17:16:f6:1d:97:41:0b:42:ed:95:
40:31:4c:7b:aa:ed:a2:16:6f:a5:11:7a:60:76:1e:76:20:7c:
35:c1:ac:67:70:fe:73:1d:7c:39:cc:66:63:8a:a0:99:58:44:
7d:81:a6:df:78:ce:d3:ef:ea:72:4a:5d:c6:b6:3b:25:df:58:
76:97:0f:7e:52:b6:70:bd:04:4c:95:ac:68:6b:9e:ee:35:2f:
04:05:05:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 02:56:05 2026 by rpki-client