
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa
File: 0333AD1461FE11ECBD833921C4F9AE02.roa (raw, json)
Hash identifier: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=
Subject key identifier: E0:36:9B:33:30:E7:7C:E3:DA:73:DC:1E:20:46:FA:06:3D:AD:EF:1A
Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Certificate serial: 19B5
Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa
Signing time: Mon 02 Mar 2026 22:44:27 +0000
ROA not before: Thu 02 Oct 2025 16:44:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 16625
IP address blocks: 126.147.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6581 (0x19b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E
Validity
Not Before: Oct 2 16:44:52 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a612cb-2e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:53:f1:b3:09:eb:6c:7c:67:03:00:9f:02:
82:78:49:df:ca:f2:b2:48:15:17:20:70:3c:f8:d3:
e7:16:f1:36:1a:fe:48:dc:2a:b1:26:09:24:6e:a1:
dd:50:03:14:06:5d:63:2f:07:8c:cd:d3:2f:fd:2b:
b4:ac:ab:42:84:38:ef:b0:db:de:cd:c3:67:55:59:
8c:f3:cf:2b:ef:e8:01:28:e5:2e:2e:f1:e9:09:84:
2a:55:cd:3b:dd:b3:a6:e7:eb:9d:2e:05:de:80:30:
5e:43:a9:89:14:28:45:4e:51:68:5d:c0:66:25:14:
88:50:ba:f8:35:47:e6:cd:ec:59:f5:1d:1c:a5:22:
1d:80:7b:67:9e:5f:79:a4:e8:8b:03:ae:5b:9c:84:
de:c5:34:8e:97:74:d7:38:87:ed:77:71:e1:0e:59:
9a:73:1b:91:f3:41:b2:4c:2c:47:21:d8:87:9d:53:
02:38:49:cc:38:13:a5:1d:0d:a1:4c:75:9e:61:e2:
82:ad:95:c0:21:6a:4c:f2:43:af:f1:6e:d9:28:65:
66:f2:e4:95:33:82:c4:5e:34:5a:de:f1:99:2c:4c:
12:43:6d:57:55:67:69:62:a2:81:a3:aa:0a:2f:c6:
bc:7c:45:f8:61:e4:21:6a:5b:89:b5:24:3a:ea:9a:
65:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:9B:33:30:E7:7C:E3:DA:73:DC:1E:20:46:FA:06:3D:AD:EF:1A
X509v3 Authority Key Identifier:
keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/0333AD1461FE11ECBD833921C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
126.147.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:2c:1c:f5:65:34:9b:62:7d:dd:22:87:f2:5f:f3:60:a3:44:
48:28:d3:18:58:c4:27:ae:18:cf:5e:0e:9a:8e:10:45:f8:11:
90:32:51:6e:90:44:b0:7c:e8:5f:1e:4b:57:47:af:65:9d:d0:
fd:0b:20:2c:4a:b7:37:55:88:69:03:01:6f:a0:2b:5d:dc:b9:
39:2e:23:ca:fb:ed:1f:ed:2b:ca:e0:9d:54:44:9f:98:92:00:
e5:c1:fa:96:6b:18:ae:87:b5:b0:38:29:b0:8e:78:4b:97:40:
7f:a7:e8:52:2b:9d:ce:99:c2:a5:c3:3e:10:33:9d:cd:9f:30:
47:6e:fc:94:e6:df:a0:82:8f:5c:f9:20:41:90:b1:cb:62:38:
68:ec:cb:ee:84:1e:6c:50:1e:ab:ac:36:f4:04:f0:aa:c1:7a:
d3:37:d6:b4:bb:38:6e:96:2e:1b:87:d9:73:1d:51:e4:1f:fa:
76:62:b2:a3:c3:59:41:99:51:61:31:7d:a5:57:e2:7b:5c:09:
66:4b:d4:a4:cd:3e:b2:79:87:c3:07:84:03:39:aa:b0:c0:f8:
d4:1b:a0:30:57:34:a4:b2:39:09:9a:e9:70:69:24:d8:27:a7:
fa:ea:3f:a9:88:2c:0d:c9:e5:d5:e5:c5:b4:39:55:0d:c4:e4:
00:52:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:34 2026 by rpki-client