
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E88B9F0C778511F0A4E72535C4F9AE02.roa
File: E88B9F0C778511F0A4E72535C4F9AE02.roa (raw, json)
Hash identifier: 6RR8hojN4BYLC4ewJR9unFkzvRqXihDkv5aevV0kEr0=
Subject key identifier: 34:98:F1:ED:7E:20:3D:47:F2:62:9E:E0:BE:8A:4B:33:08:61:86:43
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 02C6
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E88B9F0C778511F0A4E72535C4F9AE02.roa
Signing time: Wed 22 Oct 2025 02:46:12 +0000
ROA not before: Wed 22 Oct 2025 02:46:12 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 834
IP address blocks: 202.155.80.0/21 maxlen: 24
202.155.104.0/21 maxlen: 24
202.155.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Oct 2025 03:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: Oct 22 02:46:12 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=68f84574-2801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:9f:aa:f2:ac:1d:2d:8b:a9:f0:3e:b9:e2:
4f:83:89:6c:a4:a2:ab:c1:99:20:0b:00:a8:5a:14:
71:10:f1:6a:bc:c5:5f:cb:52:2f:b8:da:c8:eb:da:
3b:71:8c:01:30:94:f1:0a:e4:6f:e4:c5:26:ab:8b:
f8:58:62:8d:14:e7:9d:ca:a2:ec:c2:88:ad:bd:cf:
6e:50:21:cc:c4:7e:e7:0d:ba:95:c1:27:f8:e9:8a:
26:9a:73:ae:e9:55:e8:b2:0f:bc:45:f1:44:42:6d:
2d:85:95:09:3c:2d:fc:04:48:dd:14:85:e1:1a:b9:
96:ee:b5:28:89:c4:ba:a7:99:fe:95:f2:ca:eb:eb:
95:d9:57:25:57:d8:71:6a:b6:02:8b:b0:ea:30:71:
56:10:ce:83:ca:8a:c4:1a:7f:4a:ee:da:f7:8a:fa:
57:a5:90:ba:ec:98:cd:3c:81:e9:80:b3:73:11:78:
37:94:1f:e0:72:1a:05:07:13:6f:f0:41:f6:93:95:
5d:43:f0:60:f6:fc:ab:18:d8:48:90:8b:40:09:7a:
45:6a:6a:5e:9e:f7:d0:19:c7:3f:94:14:4f:54:e6:
ed:29:63:4b:91:bb:11:ba:d7:17:bd:96:cc:d8:99:
36:c4:df:3c:c3:c2:94:25:ad:1e:97:79:b3:65:2e:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:98:F1:ED:7E:20:3D:47:F2:62:9E:E0:BE:8A:4B:33:08:61:86:43
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/E88B9F0C778511F0A4E72535C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.155.80.0/21
202.155.104.0/21
202.155.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b2:b9:34:7f:64:e0:3b:49:84:3c:64:40:2e:a7:75:69:df:
9c:53:e4:91:ac:a6:47:dd:a3:1c:b5:a8:f0:e2:5e:89:84:d8:
7e:8c:6f:de:4c:0b:c5:21:23:6c:28:03:24:b4:e4:42:ea:89:
14:19:f1:dc:f5:24:8c:f6:e8:cf:88:c6:3f:3e:24:c6:f6:04:
7a:e4:7b:a9:b7:30:3f:45:eb:9f:53:0d:2a:f6:38:fb:02:74:
0a:e8:52:75:28:8b:46:42:05:69:c3:81:87:ec:6c:79:42:3b:
c7:9f:54:8d:9f:f0:22:3c:08:15:1b:e4:fd:c9:b6:db:b3:eb:
3a:62:dc:75:9a:b1:04:0f:3c:e9:d0:a1:9e:f6:6b:93:04:22:
6e:f9:92:e7:bc:ee:2b:fb:0d:aa:c2:44:25:9c:54:66:1e:b5:
02:4f:38:b0:5e:69:f8:be:e4:79:5b:19:dd:e2:e1:8d:35:b2:
15:f2:61:70:df:bb:cf:d6:e0:e5:a8:7f:46:38:eb:60:a0:ac:
4f:57:fa:04:c9:bb:2f:90:66:2a:e6:b8:12:31:f7:fe:45:7e:
81:29:46:a9:75:be:38:48:e1:4b:42:2c:ba:2d:e0:6b:d7:6e:
42:30:54:20:61:b9:14:3d:4e:d7:91:a1:dd:9f:ea:ea:f6:a5:
3d:c8:64:c1
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjUxMDIyMDI0NjEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGY4NDU3NC0yODAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy06fqvKsHS2LqfA+ueJPg4lspKKrwZkgCwCoWhRxEPFqvMVfy1IvuNrI69o7
cYwBMJTxCuRv5MUmq4v4WGKNFOedyqLswoitvc9uUCHMxH7nDbqVwSf46YommnOu
6VXosg+8RfFEQm0thZUJPC38BEjdFIXhGrmW7rUoicS6p5n+lfLK6+uV2VclV9hx
arYCi7DqMHFWEM6DyorEGn9K7tr3ivpXpZC67JjNPIHpgLNzEXg3lB/gchoFBxNv
8EH2k5VdQ/Bg9vyrGNhIkItACXpFampenvfQGcc/lBRPVObtKWNLkbsRutcXvZbM
2Jk2xN88w8KUJa0el3mzZS4piQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDSY8e1+
ID1H8mKe4L6KSzMIYYZDMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvRTg4QjlGMEM3
Nzg1MTFGMEE0RTcyNTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAPKm1ADBAPKm2gDBALKm3QwDQYJKoZIhvcNAQELBQADggEB
AB+yuTR/ZOA7SYQ8ZEAup3Vp35xT5JGspkfdoxy1qPDiXomE2H6Mb95MC8UhI2wo
AyS05ELqiRQZ8dz1JIz26M+Ixj8+JMb2BHrke6m3MD9F659TDSr2OPsCdAroUnUo
i0ZCBWnDgYfsbHlCO8efVI2f8CI8CBUb5P3Jttuz6zpi3HWasQQPPOnQoZ72a5ME
Im75kue87iv7DarCRCWcVGYetQJPOLBeafi+5HlbGd3i4Y01shXyYXDfu8/W4OWo
f0Y462CgrE9X+gTJuy+QZirmuBIx9/5FfoEpRql1vjhI4UtCLLot4GvXbkIwVCBh
uRQ9TteRod2f6ur2pT3IZME=
-----END CERTIFICATE-----
Generated at Fri Oct 24 09:17:10 2025 by rpki-client