
$ rpki-client -vvf rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/DE2E716626DE11F18929E99D92833773.roa
File: DE2E716626DE11F18929E99D92833773.roa (raw, json)
Hash identifier: M2tO02HFUs50RonBzNe9MwYdR9Tkq6+PZdU5UbshAKM=
Subject key identifier: 8E:43:85:BC:53:18:7D:40:3D:FC:08:62:09:8F:0E:4B:76:D9:08:51
Certificate issuer: /CN=A912559E/serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Certificate serial: 01BA
Authority key identifier: 09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/DE2E716626DE11F18929E99D92833773.roa
Signing time: Mon 23 Mar 2026 17:36:48 +0000
ROA not before: Mon 23 Mar 2026 17:36:48 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 0
IP address blocks: 36.50.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 442 (0x1ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912559E, serialNumber=09407F70F9771600F4FBAA75C0FE9690D8C65A30
Validity
Not Before: Mar 23 17:36:48 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69c17a30-1587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:92:95:d6:d3:1f:0b:97:28:0b:29:5b:f5:83:
14:14:54:0a:88:57:2d:f0:57:70:e8:ee:dd:99:b9:
c6:31:88:f0:b6:65:c2:fb:fc:69:b6:9b:a4:db:ba:
df:e7:a2:6c:68:f1:d8:83:d1:3d:15:37:5f:bd:22:
a1:41:b8:e1:18:37:7c:bb:b2:dd:79:85:77:c0:ce:
52:6a:b1:8d:d3:ef:01:e6:76:ea:69:b8:60:b9:af:
6e:cd:a4:a0:b4:c8:5b:d9:cb:c0:db:08:63:1a:6f:
3d:e9:5d:d0:ee:73:1a:11:48:b8:ed:eb:bb:30:54:
e2:4e:1a:f4:f8:69:bc:d7:9b:38:cd:eb:05:b7:e1:
cb:ff:0a:76:61:8e:1c:ac:93:80:74:f0:50:64:cb:
0e:07:58:bc:05:3c:12:d0:a7:2f:9d:fa:72:31:11:
4e:fc:94:9b:96:1c:0a:6f:f8:80:9c:fd:46:55:25:
cc:5d:2e:79:cd:bb:74:c5:e1:a6:1a:dc:c8:70:79:
5b:e4:58:8a:39:be:b1:5a:32:d1:ab:bf:65:b7:06:
2a:9d:2e:ec:16:01:24:b5:40:a9:85:9d:ee:a4:9c:
0b:8e:0a:60:2e:a1:c9:6b:18:8c:1f:30:57:63:a5:
de:d3:2f:8f:66:ab:98:0e:50:ae:92:f7:aa:29:95:
e6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:43:85:BC:53:18:7D:40:3D:FC:08:62:09:8F:0E:4B:76:D9:08:51
X509v3 Authority Key Identifier:
keyid:09:40:7F:70:F9:77:16:00:F4:FB:AA:75:C0:FE:96:90:D8:C6:5A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/CUB_cPl3FgD0-6p1wP6WkNjGWjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUB_cPl3FgD0-6p1wP6WkNjGWjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912559E/350AFEBEA47311EEBDFBB759C4F9AE02/DE2E716626DE11F18929E99D92833773.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.238.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:c1:ff:65:a1:c7:6b:90:f0:05:57:43:8d:cc:ef:b4:f7:67:
ec:8b:d9:e8:9d:a1:10:3a:3e:1e:37:a5:1f:da:35:4c:ff:e2:
89:d6:19:76:f4:ab:59:4f:57:b5:a8:8d:1c:f5:43:44:36:6a:
7c:dd:e4:d0:99:a1:0e:3b:56:ad:85:38:f7:d1:d1:2b:fb:0c:
ba:a6:a5:dd:5a:d0:88:f9:10:e6:ae:45:b9:74:bf:47:9f:fa:
6a:ee:78:18:39:a2:c9:96:81:29:ff:c7:83:9a:d8:23:35:bd:
d9:76:51:79:f5:34:07:3c:c0:72:26:4b:2e:6f:44:94:9e:2e:
56:ef:bc:16:e9:58:54:35:4c:0f:49:c9:2f:e9:d1:62:5e:0d:
7f:8d:7c:bb:01:64:19:54:3b:81:ff:74:b2:af:18:6a:ef:46:
28:e9:98:33:cd:50:b2:ac:5c:88:50:91:66:1a:51:0c:07:0d:
c7:d2:f1:33:5a:af:c3:fa:24:d1:1b:c2:4b:fa:14:70:0e:15:
71:b4:bb:d4:cf:d1:d4:84:0d:ef:b7:21:6d:b3:1f:b7:4c:da:
59:25:cd:78:d3:f5:0c:ca:fc:e4:39:82:e3:3b:0d:64:5e:80:
96:26:21:fc:4b:5f:98:d8:0f:c0:2a:5c:82:46:84:60:3c:0f:
c1:c0:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:00:06 2026 by rpki-client