
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/A562D2B20C4111F1A1A27D5E0E3D8C67.roa
File: A562D2B20C4111F1A1A27D5E0E3D8C67.roa (raw, json)
Hash identifier: VQhZgOQPriWRYMgMvVif5slfnGGWce5qBIKL9jfU4zw=
Subject key identifier: 68:AE:A9:91:47:3B:3A:A7:3A:23:C2:A9:2A:5C:42:77:F6:72:F5:9E
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 0225
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/A562D2B20C4111F1A1A27D5E0E3D8C67.roa
Signing time: Sun 01 Mar 2026 18:14:01 +0000
ROA not before: Tue 17 Feb 2026 20:45:51 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136902
IP address blocks: 43.231.205.0/24 maxlen: 24
43.231.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Feb 17 20:45:51 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a481e9-4417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:d0:ba:84:b2:c0:62:97:9f:5d:ba:68:05:
8f:c0:08:21:f1:39:34:84:fc:45:b0:28:1e:a0:d5:
db:7e:f1:58:f5:c6:c7:b1:5a:ad:c6:be:3b:24:27:
79:4b:ac:1b:09:64:ac:28:ad:83:e3:25:47:18:0b:
2f:08:93:e5:53:39:05:87:04:4a:f6:81:41:7f:22:
38:23:42:5e:44:e2:ae:d8:97:64:94:38:8e:02:07:
70:87:c5:0b:a2:2d:58:03:11:31:01:34:d7:98:57:
95:12:9d:cb:e8:37:ab:28:52:f6:e3:e9:74:92:74:
fa:8f:47:b1:02:29:2e:62:68:23:2b:82:d8:92:c8:
96:16:f9:d5:c9:40:19:1f:f5:f6:e6:3f:b6:e0:12:
6c:5e:22:98:51:20:02:0c:7a:43:c3:4c:fc:da:0a:
8e:36:6e:a6:14:7d:a4:e6:2d:ae:a2:00:bc:91:8e:
be:26:ed:9d:d9:6d:fe:9c:13:9d:2f:21:ef:fa:d5:
d6:ea:57:27:19:19:7a:04:32:84:ee:6c:1e:cd:24:
4e:7c:9c:b1:bc:60:67:c1:bd:8e:53:ac:bd:3f:0d:
ca:e3:f4:b2:09:f5:fb:64:84:af:cc:f2:07:26:da:
eb:7a:05:b4:c1:f8:76:fe:be:29:39:bc:e1:f4:7b:
e9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AE:A9:91:47:3B:3A:A7:3A:23:C2:A9:2A:5C:42:77:F6:72:F5:9E
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/A562D2B20C4111F1A1A27D5E0E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
43.231.205.0-43.231.206.255
Signature Algorithm: sha256WithRSAEncryption
7e:54:ea:66:74:10:a9:a9:6a:6d:b1:e8:d8:b2:c1:16:21:06:
02:56:f4:01:d0:87:d8:d7:e5:95:cc:53:df:f4:5a:03:82:71:
ab:72:b4:d7:fb:6d:56:fe:d3:a3:00:a2:27:36:73:00:fe:31:
80:e7:9c:f4:45:e2:73:b4:4d:fb:83:07:4e:37:f9:83:3e:5b:
c4:72:e0:8a:66:75:7e:64:2b:54:c2:91:02:cf:6d:70:9e:e4:
c5:48:d5:17:26:84:41:73:b1:13:8c:ac:5c:0a:54:48:e1:63:
d9:65:1d:5a:6f:77:f7:1c:9a:80:c6:8c:76:c5:3c:7f:54:61:
8a:3e:78:84:55:28:cb:d6:ae:38:a8:6c:39:f4:6a:c9:be:b2:
21:0d:b3:83:f8:ca:b6:84:ec:94:5e:db:61:ba:72:e3:22:09:
75:40:97:ef:88:95:6d:d6:44:b3:2d:e5:59:47:c6:4f:f3:96:
7d:8d:14:ff:cb:17:61:b0:e2:ca:09:36:40:2c:08:81:0f:17:
47:96:58:db:8f:79:fd:42:45:91:78:6d:b6:6a:be:3f:2b:ce:
4e:6a:f4:48:6f:ed:b4:12:aa:43:fe:f6:e8:29:23:9e:ba:05:
e7:f1:56:50:35:ae:ca:d4:8e:16:c8:b6:c0:da:f5:b0:ad:10:
70:67:29:76
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw
MEQ3ODhCRkIwHhcNMjYwMjE3MjA0NTUxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODFlOS00NDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHvQuoSywGKXn126aAWPwAgh8Tk0hPxFsCgeoNXbfvFY9cbHsVqtxr47JCd5
S6wbCWSsKK2D4yVHGAsvCJPlUzkFhwRK9oFBfyI4I0JeROKu2JdklDiOAgdwh8UL
oi1YAxExATTXmFeVEp3L6DerKFL24+l0knT6j0exAikuYmgjK4LYksiWFvnVyUAZ
H/X25j+24BJsXiKYUSACDHpDw0z82gqONm6mFH2k5i2uogC8kY6+Ju2d2W3+nBOd
LyHv+tXW6lcnGRl6BDKE7mwezSROfJyxvGBnwb2OU6y9Pw3K4/SyCfX7ZISvzPIH
JtrregW0wfh2/r4pObzh9HvpAQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFGiuqZFH
OzqnOiPCqSpcQnf2cvWeMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz
NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvQTU2MkQyQjIw
QzQxMTFGMUExQTI3RDVFMEUzRDhDNjcucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBAAr580DBAAr584wDQYJKoZIhvcNAQELBQADggEBAH5U6mZ0EKmp
am2x6NiywRYhBgJW9AHQh9jX5ZXMU9/0WgOCcatytNf7bVb+06MAoic2cwD+MYDn
nPRF4nO0TfuDB043+YM+W8Ry4IpmdX5kK1TCkQLPbXCe5MVI1RcmhEFzsROMrFwK
VEjhY9llHVpvd/ccmoDGjHbFPH9UYYo+eIRVKMvWrjiobDn0asm+siENs4P4yraE
7JRe22G6cuMiCXVAl++IlW3WRLMt5VlHxk/zln2NFP/LF2Gw4soJNkAsCIEPF0eW
WNuPef1CRZF4bbZqvj8rzk5q9Ehv7bQSqkP+9ugpI566BefxVlA1rsrUjhbItsDa
9bCtEHBnKXY=
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:25:30 2026 by rpki-client