
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CC56497C347711F1AFE4A57EA7833773.roa
File: CC56497C347711F1AFE4A57EA7833773.roa (raw, json)
Hash identifier: WJJ2s6RsilevV2adi1ZbulPicjZZEHwgNLi+m4Zs1Ig=
Subject key identifier: 3E:C4:8A:1D:BF:4B:C3:0B:50:9A:BE:B9:F4:7A:8D:D9:CB:86:55:87
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 0958
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CC56497C347711F1AFE4A57EA7833773.roa
Signing time: Mon 14 Sep 2026 20:41:20 +0000
ROA not before: Mon 14 Sep 2026 20:41:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 131609
IP address blocks: 43.225.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392 (0x958)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Sep 14 20:41:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa85bf0-9b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:06:54:05:45:6d:b1:2c:82:ec:d1:c6:80:
a9:8c:58:2d:fd:df:fb:ff:64:97:8a:c0:21:c7:d1:
8d:a1:99:e7:5c:cf:2d:22:c3:49:84:e8:d4:3a:ce:
cd:d2:55:9b:34:79:59:34:5d:76:0a:87:0a:f9:a6:
7e:90:9f:e0:5f:98:61:53:dc:3b:fa:f6:db:14:03:
d1:41:79:fe:d2:14:85:b4:63:ca:66:8c:54:58:9d:
e9:44:60:92:02:53:20:ec:d8:23:27:cb:c6:78:78:
f5:91:99:6b:fe:17:8c:bb:45:89:5d:16:b1:c8:d2:
d9:69:14:14:e9:c0:f1:43:c0:a4:c7:0f:8e:53:9d:
e9:c6:92:f5:93:d1:b1:d3:d5:f0:84:10:71:4c:19:
17:06:1b:68:dc:49:4d:23:fb:45:dc:72:d5:ff:8b:
90:38:6a:56:c1:c1:97:2d:d9:fe:36:9e:8c:78:be:
5e:c7:55:3c:64:05:f0:3f:34:8f:b6:4e:a5:0d:9e:
de:94:4e:51:eb:16:d8:3c:1a:94:3a:ce:37:de:83:
1c:b0:06:89:e8:b4:63:43:a1:b5:98:3c:0c:2c:85:
62:5e:5f:74:d9:12:ee:8e:d4:a4:4f:56:41:16:96:
f5:68:41:a7:fa:ff:d4:7f:b4:0d:02:86:28:fb:55:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C4:8A:1D:BF:4B:C3:0B:50:9A:BE:B9:F4:7A:8D:D9:CB:86:55:87
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/CC56497C347711F1AFE4A57EA7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.36.0/24
Signature Algorithm: sha256WithRSAEncryption
29:96:07:df:73:0f:77:89:aa:a5:58:0f:d2:2f:cf:d0:37:69:
ca:ac:ba:40:28:e1:62:84:62:94:08:e6:00:0f:e3:da:d4:a5:
1b:8c:a9:34:a2:c8:ab:0e:a3:c0:3e:56:7b:d5:48:c1:b7:28:
6a:bd:cc:b7:f1:92:15:53:b3:dd:09:12:5f:80:19:f7:9c:81:
81:5b:b4:be:ce:e1:9c:cf:0a:c1:f4:7a:10:2b:a2:57:02:f1:
44:74:15:7a:51:bd:bd:fb:e0:a0:3b:0e:9d:83:cc:eb:8a:cc:
10:67:14:9c:65:e2:95:fe:63:f1:bc:36:66:be:07:cc:21:df:
8b:8e:1c:c9:49:ac:e7:85:83:2c:7b:78:69:a8:f2:d7:12:f0:
4b:c3:ba:ac:70:c1:16:53:f8:b5:f6:ee:08:b8:9d:1e:c8:3d:
7a:19:3f:ec:26:0e:ed:11:db:05:07:9a:e7:d9:83:e6:19:9c:
c4:72:33:26:3a:04:f5:bc:04:d7:5c:e7:7f:06:34:e4:52:ed:
7f:08:3a:1a:06:1c:0e:0a:7b:93:cd:b5:46:9b:67:ad:0d:00:
4e:d8:08:47:a1:40:a0:b3:b3:b1:6d:f9:5d:42:80:44:70:4a:
35:c2:85:33:d7:83:c1:87:78:63:ef:54:fd:65:fe:9c:14:98:
e7:a9:2b:ec
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1
MzIzM0U1OTUwHhcNMjYwOTE0MjA0MTIwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE4NWJmMC05YjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzW8GVAVFbbEsguzRxoCpjFgt/d/7/2SXisAhx9GNoZnnXM8tIsNJhOjUOs7N
0lWbNHlZNF12CocK+aZ+kJ/gX5hhU9w7+vbbFAPRQXn+0hSFtGPKZoxUWJ3pRGCS
AlMg7NgjJ8vGeHj1kZlr/heMu0WJXRaxyNLZaRQU6cDxQ8Ckxw+OU53pxpL1k9Gx
09XwhBBxTBkXBhto3ElNI/tF3HLV/4uQOGpWwcGXLdn+Np6MeL5ex1U8ZAXwPzSP
tk6lDZ7elE5R6xbYPBqUOs433oMcsAaJ6LRjQ6G1mDwMLIViXl902RLujtSkT1ZB
Fpb1aEGn+v/Uf7QNAoYo+1VmEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD7Eih2/
S8MLUJq+ufR6jdnLhlWHMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2
QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvQ0M1NjQ5N0Mz
NDc3MTFGMUFGRTRBNTdFQTc4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK+EkMA0GCSqGSIb3DQEBCwUAA4IBAQAplgffcw93iaqlWA/SL8/Q
N2nKrLpAKOFihGKUCOYAD+Pa1KUbjKk0osirDqPAPlZ71UjBtyhqvcy38ZIVU7Pd
CRJfgBn3nIGBW7S+zuGczwrB9HoQK6JXAvFEdBV6Ub29++CgOw6dg8zriswQZxSc
ZeKV/mPxvDZmvgfMId+LjhzJSaznhYMse3hpqPLXEvBLw7qscMEWU/i19u4IuJ0e
yD16GT/sJg7tEdsFB5rn2YPmGZzEcjMmOgT1vATXXOd/BjTkUu1/CDoaBhwOCnuT
zbVGm2etDQBO2AhHoUCgs7OxbfldQoBEcEo1woUz14PBh3hj71T9Zf6cFJjnqSvs
-----END CERTIFICATE-----
Generated at Fri Oct 9 11:50:58 2026 by rpki-client