
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5BAE030A275B11F19E227EF4BC833773.roa
File: 5BAE030A275B11F19E227EF4BC833773.roa (raw, json)
Hash identifier: bBgqO9rWr9YMkTxYRxwlYeP/srvBn8X9wnQYhhfy9Xw=
Subject key identifier: 12:C6:ED:B5:A9:42:00:E2:CE:93:0D:FA:3A:BF:4F:77:5E:A9:82:B9
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0BE5
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5BAE030A275B11F19E227EF4BC833773.roa
Signing time: Tue 24 Mar 2026 08:27:56 +0000
ROA not before: Tue 24 Mar 2026 08:27:56 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 151206
IP address blocks: 203.168.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:40:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3045 (0xbe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Mar 24 08:27:56 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69c24b0c-c626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:fa:d0:93:bf:1f:a3:28:5d:f2:bc:95:e7:
9c:66:49:a0:78:52:10:00:78:58:b8:de:1a:c1:8f:
65:81:3c:88:de:02:c4:13:52:7e:f7:a4:47:a5:76:
c3:91:b2:ba:f0:82:16:77:b6:23:06:c1:67:78:58:
f3:61:10:c2:08:0e:ef:aa:6d:91:9d:20:f9:43:5e:
70:05:7f:7c:e3:30:4c:35:31:83:a0:d7:75:25:bb:
f3:1c:d7:a1:59:1a:76:69:0d:d8:0f:13:a9:a0:45:
6b:3c:57:19:1e:ab:a7:9a:39:dd:1d:d4:b1:d5:f3:
cb:d8:b1:ec:ac:ff:07:6b:82:79:fa:47:a7:e7:7f:
d1:77:7c:68:60:3a:6a:9b:5d:20:51:c9:e8:03:00:
4c:d4:35:8a:c3:7b:f3:9c:36:3e:4f:32:33:8a:a4:
6f:c0:6c:9a:1a:b1:00:60:eb:84:4d:58:e3:cc:c3:
cd:de:80:4c:18:df:60:56:d9:a4:07:c1:4c:31:8c:
02:7c:32:3e:6a:d5:fc:3a:f8:43:a3:90:52:93:90:
06:c8:e6:93:d1:76:20:1d:98:ec:86:ea:bb:6b:8f:
68:fb:e4:7e:79:20:03:ac:0d:3b:5a:8b:e3:3a:10:
81:b3:11:ea:32:d5:8b:37:4d:4f:4e:a6:8b:a3:01:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C6:ED:B5:A9:42:00:E2:CE:93:0D:FA:3A:BF:4F:77:5E:A9:82:B9
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5BAE030A275B11F19E227EF4BC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
203.168.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:52:6e:f8:20:61:f3:74:44:f2:14:35:76:fe:63:40:27:db:
9b:ba:3e:a6:a3:db:c0:ba:e8:05:72:3c:66:dc:b9:e5:45:b6:
fa:bd:16:21:82:98:b4:0e:d8:d4:a5:36:4e:34:14:e6:43:34:
93:77:ca:44:31:c3:96:1e:bf:bc:58:41:0e:d1:bb:47:83:bd:
a2:a7:26:01:e2:af:3a:27:59:56:ed:38:da:81:6f:ba:fd:41:
79:f8:cb:32:31:34:79:7e:c4:fe:19:34:03:5a:86:73:17:c5:
19:b7:35:d2:22:df:8a:19:fb:9a:dd:5e:33:4e:fc:75:a8:f5:
24:43:1e:81:b5:fd:0d:b7:81:0c:d2:6c:d1:e3:11:13:cb:7f:
df:62:2d:fc:12:14:8d:45:9d:78:cc:e3:88:c8:56:9f:a1:30:
06:c3:b8:7b:98:ad:c2:fa:08:9a:81:4a:27:d1:8b:f9:c2:14:
ac:fb:0e:1d:fe:14:5a:b6:9b:dc:1d:3f:19:97:ad:d5:26:a5:
d1:48:96:df:ae:e2:b7:a5:b6:9b:e6:ce:84:36:96:88:0a:bf:
8e:72:09:68:d7:d5:c6:7d:ce:cf:fb:e5:41:ec:34:5c:9a:00:
b4:58:7e:2f:50:3a:6e:72:11:34:8d:6a:df:ef:92:a3:87:66:
5f:93:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:59 2026 by rpki-client