
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0515DA4721511EF9D7B9F3DC4F9AE02.roa
File: C0515DA4721511EF9D7B9F3DC4F9AE02.roa (raw, json)
Hash identifier: rxVDSur5xI8TBJMFe/wdnb0HJIU44EGvbneAX9SUCyQ=
Subject key identifier: 67:D3:54:17:0F:A2:63:A0:5E:DF:29:75:41:FE:F7:B5:CD:67:4A:43
Certificate issuer: /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial: 0249
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0515DA4721511EF9D7B9F3DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:16:46 +0000
ROA not before: Wed 31 Dec 2025 04:24:12 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 134064
IP address blocks: 202.29.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 04:45:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Validity
Not Before: Dec 31 04:24:12 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4909e-97c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:00:83:18:61:59:04:f6:8a:c4:b1:85:3d:
e2:d3:65:0f:71:80:c5:22:66:6e:6d:11:3c:ab:78:
cf:c3:b6:36:d2:2f:83:91:5e:a0:96:86:80:2d:8a:
d7:66:3f:6c:6c:d3:76:db:3b:6d:fb:d5:1f:70:5d:
49:8f:5b:2b:8f:06:85:3d:63:e3:58:15:ed:7a:64:
82:ff:a2:e3:7c:ac:6d:fd:b5:aa:2f:00:a1:3a:93:
0c:79:45:8f:34:10:1d:2e:b7:9f:0a:c0:ef:81:b9:
fe:9b:3f:83:3e:d9:de:c8:9b:a4:25:33:a3:cb:b2:
d4:bd:ab:05:91:db:10:5d:10:3a:dc:c2:2d:fb:21:
c1:57:d6:14:ca:cb:66:7d:f7:de:da:d6:5e:a2:b7:
21:78:b9:00:b1:3d:61:c9:5a:39:ac:a8:59:26:e2:
80:c4:6c:c6:c5:98:64:45:0a:1b:0c:9a:b4:f6:97:
d4:28:5b:01:3f:b4:e3:1f:36:b1:19:6d:65:1b:d3:
e2:01:97:2a:72:1e:0f:0e:11:d0:7c:2d:f0:6e:73:
26:8d:40:35:16:53:96:80:87:6e:9c:a4:bb:bc:fd:
57:07:3d:2e:3a:9c:5c:fd:bb:36:0c:86:29:1e:cc:
82:a3:76:e2:7b:8f:25:b9:84:7e:c7:21:58:ae:15:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D3:54:17:0F:A2:63:A0:5E:DF:29:75:41:FE:F7:B5:CD:67:4A:43
X509v3 Authority Key Identifier:
keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/C0515DA4721511EF9D7B9F3DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.29.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e7:19:9d:08:36:cd:dd:f9:dd:65:b5:f0:98:6b:a6:c8:0a:
dd:24:07:30:14:8b:e6:ba:41:71:79:be:b9:89:60:35:51:e0:
d2:cc:da:9d:5c:16:e2:1e:f0:52:c0:b8:40:cf:c9:93:12:f9:
1f:b6:4f:c7:34:21:87:da:70:be:6d:22:e8:6c:fd:10:2e:81:
8f:c7:89:90:13:a4:13:e9:5a:cc:ec:57:b5:4b:9c:bf:ef:98:
21:91:01:bf:ef:b7:f1:53:74:ae:98:3b:c2:60:55:c3:9d:17:
6e:87:25:62:48:99:76:5b:61:9b:a3:94:d7:f9:e6:32:70:d4:
1e:cc:44:4d:8b:71:c6:d4:c8:1e:5d:4a:25:ad:63:5c:da:aa:
e0:eb:ba:02:08:1d:f1:52:f8:8c:17:c8:b3:72:b8:78:53:f5:
dc:bd:30:8a:e6:70:f1:53:a3:17:b8:a9:60:8d:e1:cc:32:65:
18:66:f7:c0:7a:16:5f:84:7a:48:81:47:c6:2a:c2:00:da:cf:
ce:13:b5:3d:7c:03:c6:c9:3b:17:3b:e6:b0:c2:32:5d:09:5c:
76:3e:d1:2e:25:fe:8e:92:7d:30:ad:7c:a1:c0:a2:4d:28:9a:
6b:f5:8a:7c:fe:99:e0:1f:8b:3e:f2:1b:56:d2:1c:a3:c5:53:
f1:f3:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 03:25:34 2026 by rpki-client