
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/2701A0D8769611F09C8ABC22C4F9AE02.roa
File: 2701A0D8769611F09C8ABC22C4F9AE02.roa (raw, json)
Hash identifier: ylX1gvF03kyHjRbbXfFHvaoFBE86ZYkEYG19AFvwdz8=
Subject key identifier: DC:25:5F:0C:C9:F8:34:76:89:33:39:9D:98:22:E6:A5:8E:93:16:F6
Certificate issuer: /CN=A9165588/serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Certificate serial: D9
Authority key identifier: EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/2701A0D8769611F09C8ABC22C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:18:04 +0000
ROA not before: Fri 07 Nov 2025 02:12:07 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 14114
IP address blocks: 203.13.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl
rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Mar 2026 05:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 217 (0xd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165588, serialNumber=EF9F97CEB2927651D64FAA02E39DBE0DA3B71F95
Validity
Not Before: Nov 7 02:12:07 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a58e0c-697b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:c8:fc:71:c8:d7:5e:c0:47:eb:e2:75:bc:
1f:8f:02:13:ab:31:1b:f5:bc:9a:c1:6a:08:ff:44:
2d:40:9c:01:0b:68:79:72:4c:69:df:ea:f7:b6:b0:
b1:83:86:98:44:c3:a7:d3:1b:f5:64:e4:e2:51:61:
8d:bc:9a:37:50:c6:a4:c2:30:63:dd:af:67:38:da:
d1:fb:38:03:da:a4:c8:2b:ca:f4:38:4d:27:d4:3e:
91:48:d6:7a:f2:ee:8d:91:c6:b8:33:13:c7:01:2b:
b5:a1:8d:d7:42:c6:40:dd:ce:a5:73:cc:2a:86:45:
bd:02:96:fb:65:46:9a:b6:ba:95:6c:0f:59:eb:ed:
6e:97:91:08:85:d7:4f:ab:ba:ca:f1:4e:31:12:30:
d4:1f:2b:e6:65:d1:ab:e3:e3:5b:4c:d9:bf:b9:36:
b9:b7:05:96:9e:0d:43:98:8e:e3:cc:5e:59:53:ae:
af:f6:fa:89:6d:15:30:b5:f3:0f:78:ac:c6:d8:33:
c2:b4:2d:64:37:17:19:7c:6e:7a:e8:8d:47:b7:f2:
51:76:0f:fd:12:b6:3c:f9:a8:5d:f6:0b:c7:26:33:
fc:80:62:28:db:6a:fa:32:05:3d:2b:1d:c8:84:9e:
7c:58:c9:d1:44:c9:ed:db:b6:3f:88:25:f7:9b:d0:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:25:5F:0C:C9:F8:34:76:89:33:39:9D:98:22:E6:A5:8E:93:16:F6
X509v3 Authority Key Identifier:
keyid:EF:9F:97:CE:B2:92:76:51:D6:4F:AA:02:E3:9D:BE:0D:A3:B7:1F:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/75-XzrKSdlHWT6oC452-DaO3H5U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75-XzrKSdlHWT6oC452-DaO3H5U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165588/694531F2FA8711EF83EDEC2DC4F9AE02/2701A0D8769611F09C8ABC22C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.13.156.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0a:4d:3b:58:3b:62:63:99:3d:d6:67:63:9a:e9:fc:22:1a:
b5:fc:f4:e9:93:e7:69:5d:2d:8c:eb:74:2e:98:b0:a3:18:2d:
7b:22:1b:cb:da:a6:d7:ee:1f:ca:11:7f:dd:8d:25:23:83:7a:
02:c0:12:29:2b:b4:3d:f2:ff:5c:fe:f5:eb:fc:b3:10:0d:85:
85:15:12:dd:ad:01:6a:eb:1b:a7:46:3e:2d:95:8d:5b:d9:ab:
24:51:20:0d:2d:12:51:4f:35:f4:47:92:88:ea:33:7d:e3:83:
98:e4:97:00:35:05:6b:96:ef:6f:19:e4:86:84:33:c9:68:43:
02:2c:24:9e:21:64:ac:d8:72:a9:a9:66:71:d7:05:c9:de:b9:
53:39:90:ca:c8:4e:09:7f:5e:06:e3:d1:89:4d:f6:a1:e1:02:
21:db:30:60:44:18:20:8c:78:78:83:71:ed:34:16:52:46:e6:
77:f0:ea:68:26:b1:e0:d2:5e:2a:73:05:00:78:81:5a:6f:19:
56:bf:cf:4d:3e:b3:6b:a8:39:3d:71:c4:b5:22:5c:ba:cc:b9:
7c:6a:3d:68:83:41:de:ad:75:29:81:33:f1:66:09:02:16:e4:
f1:1a:5e:d2:51:98:bf:36:53:13:28:38:67:c1:16:74:66:e8:
36:0d:fd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 07:22:12 2026 by rpki-client