
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
File: 52040BECDCBF11F0B2EC67DA4A6F56BC.roa (raw, json)
Hash identifier: 8GUCnWGwQKv7AVc43/CF2Tf/opw5Si0JDT9fOcD5AfE=
Subject key identifier: 69:6C:6F:43:CC:D6:3A:82:44:EB:47:52:40:1A:21:2F:91:F0:D2:43
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: F7
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
Signing time: Sun 01 Mar 2026 18:35:14 +0000
ROA not before: Mon 09 Feb 2026 11:24:17 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9304
IP address blocks: 202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: Feb 9 11:24:17 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a486e2-81b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:59:2d:9a:c3:54:1f:e2:10:a7:8b:7f:77:4a:
24:ab:ef:fe:32:f6:0c:8d:3b:a9:2e:86:0b:ea:86:
13:df:7f:53:e0:e4:70:85:ab:ba:78:99:00:ac:89:
24:4e:98:f3:6d:bb:f2:1a:e3:34:89:ea:9f:83:3f:
03:55:a0:4c:26:97:9e:77:1f:28:c3:00:36:6f:19:
95:2b:0d:4d:1b:fe:85:9d:50:c6:fd:d1:71:00:17:
21:9b:e6:91:ca:b1:f1:44:e5:0f:2d:ca:7b:ef:dd:
f5:8f:50:02:2e:4f:53:77:b7:4d:45:d7:c4:69:97:
b5:eb:9c:44:b1:01:2d:06:63:48:18:8c:d4:8d:36:
9b:0b:20:aa:45:7f:11:43:82:a7:2d:03:fd:94:eb:
9f:76:ac:ac:69:b0:6a:59:d3:cf:d7:0a:e9:f8:a9:
ff:58:8d:13:25:f1:6c:35:93:35:32:c4:22:b0:42:
fb:ff:f9:6f:8b:02:1e:e8:f5:7a:ab:af:d3:8e:63:
af:39:65:74:33:b6:19:bb:eb:10:9a:d2:00:61:95:
0e:bc:e9:e2:92:70:20:53:c6:f6:f3:e5:9c:05:2b:
3f:17:37:ad:ab:b1:94:c4:d8:1a:d7:ba:6b:c1:9a:
50:16:c5:b8:48:79:11:f8:5b:4f:d6:a7:84:1e:50:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:6F:43:CC:D6:3A:82:44:EB:47:52:40:1A:21:2F:91:F0:D2:43
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/52040BECDCBF11F0B2EC67DA4A6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.181.180.0/23
202.181.183.0/24
Signature Algorithm: sha256WithRSAEncryption
96:03:e9:67:fb:54:4b:37:8f:9a:4b:a1:58:d9:a8:1b:b4:ad:
a6:09:b7:de:92:23:87:dd:e1:d5:90:62:be:9e:3e:d1:36:6a:
98:4a:9d:c5:f7:81:a8:3c:6b:6a:d8:5c:9a:44:b3:d8:ff:0f:
bf:ba:75:3e:db:e1:4f:64:93:48:b7:32:fd:27:9b:8e:cb:ac:
af:ca:3f:9f:65:94:4b:7e:45:15:eb:93:76:4a:6e:29:9a:47:
43:a6:dc:13:92:8f:b0:45:80:4c:36:55:a0:03:bf:36:3c:97:
43:3e:97:08:0d:9e:76:35:be:90:c6:94:52:e9:86:9d:30:a1:
56:f4:d8:d3:7e:b5:83:29:9f:13:12:6d:a1:82:bc:2e:66:ba:
4f:6f:86:0a:ae:0b:3c:b9:6c:32:f2:f8:bc:5c:18:13:f1:77:
6e:60:5b:31:6d:3e:2b:6d:0a:14:eb:3e:a0:d9:7c:f6:38:1e:
bc:16:08:7c:fb:d6:d4:04:2c:2f:51:7b:ce:b3:ec:60:8b:a8:
31:b9:ac:47:0a:f0:f2:a2:0f:44:48:5e:44:51:cf:05:77:9a:
87:0b:90:35:b8:45:3b:38:e2:e4:de:e6:cb:41:7d:f5:1d:56:
db:37:fe:5b:fe:88:8c:6e:8b:17:8c:f3:a1:50:bc:20:c7:a2:
0e:0d:30:77
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMzRkIxMTAvBgNVBAUTKDRGNUY3NUE2QzI5ODhGNThCNjAzMDEyQThEQjQ0NUEx
RjM3RDVENzIwHhcNMjYwMjA5MTEyNDE3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODZlMi04MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8VktmsNUH+IQp4t/d0okq+/+MvYMjTupLoYL6oYT339T4ORwhau6eJkArIkk
TpjzbbvyGuM0ieqfgz8DVaBMJpeedx8owwA2bxmVKw1NG/6FnVDG/dFxABchm+aR
yrHxROUPLcp77931j1ACLk9Td7dNRdfEaZe165xEsQEtBmNIGIzUjTabCyCqRX8R
Q4KnLQP9lOufdqysabBqWdPP1wrp+Kn/WI0TJfFsNZM1MsQisEL7//lviwIe6PV6
q6/TjmOvOWV0M7YZu+sQmtIAYZUOvOniknAgU8b28+WcBSs/Fzetq7GUxNga17pr
wZpQFsW4SHkR+FtP1qeEHlDujQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGlsb0PM
1jqCROtHUkAaIS+R8NJDMB8GA1UdIwQYMBaAFE9fdabCmI9YtgMBKo20RaHzfV1y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzNGQi83MDE3ODIxNjBC
QTExMUYwOEVGRUQyMTlDNEY5QUUwMi9UMTkxcHNLWWoxaTJBd0VxamJSRm9mTjlY
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1QxOTFwc0tZajFpMkF3RXFqYlJGb2ZOOVhYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEMzRkIvNzAxNzgyMTYwQkExMTFGMDhFRkVEMjE5QzRGOUFFMDIvNTIwNDBCRUNE
Q0JGMTFGMEIyRUM2N0RBNEE2RjU2QkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQByrW0AwQAyrW3MA0GCSqGSIb3DQEBCwUAA4IBAQCWA+ln+1RLN4+a
S6FY2agbtK2mCbfekiOH3eHVkGK+nj7RNmqYSp3F94GoPGtq2FyaRLPY/w+/unU+
2+FPZJNItzL9J5uOy6yvyj+fZZRLfkUV65N2Sm4pmkdDptwTko+wRYBMNlWgA782
PJdDPpcIDZ52Nb6QxpRS6YadMKFW9NjTfrWDKZ8TEm2hgrwuZrpPb4YKrgs8uWwy
8vi8XBgT8XduYFsxbT4rbQoU6z6g2Xz2OB68Fgh8+9bUBCwvUXvOs+xgi6gxuaxH
CvDyog9ESF5EUc8Fd5qHC5A1uEU7OOLk3ubLQX31HVbbN/5b/oiMbosXjPOhULwg
x6IODTB3
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:15 2026 by rpki-client