
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/43DADDD0A6BB11ED9D458785C4F9AE02.roa
File: 43DADDD0A6BB11ED9D458785C4F9AE02.roa (raw, json)
Hash identifier: KI0oK487s7wSSjOCMfIRVu0m+Nax6IYTlrWQcONrqMQ=
Subject key identifier: DE:DD:E0:8F:13:4F:FA:76:F2:FB:AC:8C:7F:22:D6:42:32:9B:B4:6B
Certificate issuer: /CN=A913B1DA/serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Certificate serial: 3113
Authority key identifier: 50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/43DADDD0A6BB11ED9D458785C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:22:55 +0000
ROA not before: Sat 02 Aug 2025 15:52:06 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 14618
IP address blocks: 202.6.115.0/24 maxlen: 24
203.56.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:23:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12563 (0x3113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B1DA, serialNumber=50E6683A6AF4644B68A11C22DA7F3A65B312C06F
Validity
Not Before: Aug 2 15:52:06 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a467df-53a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:66:98:b4:29:09:0d:d5:4b:58:c0:34:0e:
c6:8a:06:7d:57:fa:72:e8:21:3e:f0:09:46:a1:62:
15:c5:7c:27:3f:fc:5b:8d:d7:af:4c:64:df:48:3e:
2f:6a:d3:28:cd:3e:b0:fa:4e:89:c8:b9:33:70:79:
93:74:b7:cc:c3:19:97:cf:d3:6e:43:6e:fa:7b:53:
f4:e7:b8:7d:b1:fe:d2:d4:1b:5d:8a:9e:c6:48:d6:
f8:4c:e8:59:7a:67:a6:1d:23:25:4a:42:4b:1c:7e:
5d:59:cc:ef:d5:42:d7:49:5e:79:a3:e2:67:6c:af:
63:08:16:44:e2:6d:4b:68:2f:f2:78:2b:c6:d9:5d:
27:bc:cd:62:0e:b8:c8:33:e8:2b:97:cd:c9:61:20:
89:11:e8:11:06:b1:04:3c:67:07:e7:f7:88:1f:a0:
68:83:7c:af:69:45:89:19:4c:fe:2c:cd:24:e3:4e:
57:df:6a:e9:b4:4a:ac:05:43:86:ac:b8:b7:41:a7:
c2:76:2d:39:b1:d3:3a:aa:0f:3e:ff:47:03:3c:eb:
90:75:32:93:79:55:54:3a:b0:78:e1:ee:bd:c3:0c:
7c:40:9c:61:b1:a6:9f:50:c1:05:e6:60:d6:e8:54:
c5:82:d5:59:d4:80:d0:50:6a:05:e1:61:b0:4e:93:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:E0:8F:13:4F:FA:76:F2:FB:AC:8C:7F:22:D6:42:32:9B:B4:6B
X509v3 Authority Key Identifier:
keyid:50:E6:68:3A:6A:F4:64:4B:68:A1:1C:22:DA:7F:3A:65:B3:12:C0:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/UOZoOmr0ZEtooRwi2n86ZbMSwG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOZoOmr0ZEtooRwi2n86ZbMSwG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/14B76BC8ED0B11E2A35DC6485911EA32/43DADDD0A6BB11ED9D458785C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.6.115.0/24
203.56.176.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a7:b6:20:2a:5b:f6:09:be:c8:f1:03:11:2c:9a:11:ab:23:
bc:32:02:a3:5c:52:b8:82:c8:a5:7a:b9:92:c9:57:d5:d7:ae:
58:e8:5f:b4:19:35:df:bc:c1:95:4a:9f:eb:5d:99:55:2a:b3:
2c:2e:e8:a3:29:41:ff:0c:a8:6e:14:d3:25:ff:fd:25:fa:12:
f0:eb:d0:c5:e3:ff:9c:3f:4b:b6:78:2b:43:e0:3d:41:86:c7:
17:8f:fe:cd:7b:8e:fc:12:07:8b:88:02:c3:7b:82:5e:c4:6e:
1c:81:6e:13:b8:94:f2:82:95:4c:73:02:74:bd:73:0c:39:f9:
e5:7d:e0:7c:00:76:1f:31:e9:4a:dc:18:5b:ff:68:4f:24:77:
4c:07:04:a5:a7:88:5d:e4:dd:08:6c:cd:ee:1e:0b:fc:81:28:
70:7b:0b:9e:6d:49:e8:76:d8:f0:a0:01:f2:ac:ab:b0:25:52:
b9:bd:89:c0:d0:41:73:14:a1:ec:44:44:3c:e8:39:e0:4c:de:
f3:05:b8:21:85:49:e2:59:f9:a3:fb:c9:cd:0b:f9:2d:57:44:
9c:9b:dc:60:13:03:7c:8f:af:44:40:77:94:48:f8:56:74:a7:
e5:d6:da:19:43:58:64:cc:fa:c5:14:f2:b4:ad:c6:c3:82:a8:
f9:31:63:33
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICMRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0IxREExMTAvBgNVBAUTKDUwRTY2ODNBNkFGNDY0NEI2OEExMUMyMkRBN0YzQTY1
QjMxMkMwNkYwHhcNMjUwODAyMTU1MjA2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjdkZi01M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkIRmmLQpCQ3VS1jANA7GigZ9V/py6CE+8AlGoWIVxXwnP/xbjdevTGTfSD4v
atMozT6w+k6JyLkzcHmTdLfMwxmXz9NuQ276e1P057h9sf7S1Btdip7GSNb4TOhZ
ememHSMlSkJLHH5dWczv1ULXSV55o+JnbK9jCBZE4m1LaC/yeCvG2V0nvM1iDrjI
M+grl83JYSCJEegRBrEEPGcH5/eIH6Bog3yvaUWJGUz+LM0k405X32rptEqsBUOG
rLi3QafCdi05sdM6qg8+/0cDPOuQdTKTeVVUOrB44e69wwx8QJxhsaafUMEF5mDW
6FTFgtVZ1IDQUGoF4WGwTpNI7QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFN7d4I8T
T/p28vusjH8i1kIym7RrMB8GA1UdIwQYMBaAFFDmaDpq9GRLaKEcItp/OmWzEsBv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjFEQS8xNEI3NkJDOEVE
MEIxMUUyQTM1REM2NDg1OTExRUEzMi9VT1pvT21yMFpFdG9vUndpMm44NlpiTVN3
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPWm9PbXIwWkV0b29Sd2kybjg2WmJNU3dHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0IxREEvMTRCNzZCQzhFRDBCMTFFMkEzNURDNjQ4NTkxMUVBMzIvNDNEQURERDBB
NkJCMTFFRDlENDU4Nzg1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAygZzAwQAyziwMA0GCSqGSIb3DQEBCwUAA4IBAQCVp7YgKlv2Cb7I
8QMRLJoRqyO8MgKjXFK4gsilermSyVfV165Y6F+0GTXfvMGVSp/rXZlVKrMsLuij
KUH/DKhuFNMl//0l+hLw69DF4/+cP0u2eCtD4D1BhscXj/7Ne478EgeLiALDe4Je
xG4cgW4TuJTygpVMcwJ0vXMMOfnlfeB8AHYfMelK3Bhb/2hPJHdMBwSlp4hd5N0I
bM3uHgv8gShwewuebUnodtjwoAHyrKuwJVK5vYnA0EFzFKHsREQ86DngTN7zBbgh
hUniWfmj+8nNC/ktV0Scm9xgEwN8j69EQHeUSPhWdKfl1toZQ1hkzPrFFPK0rcbD
gqj5MWMz
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:03:04 2026 by rpki-client