
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/ED947C26088911EDA7D9A84AC4F9AE02.roa
File: ED947C26088911EDA7D9A84AC4F9AE02.roa (raw, json)
Hash identifier: xk01nK+OBQA+N9iJTJFyOHUIgnyXzK+MKBhb3bDCqGA=
Subject key identifier: 36:AC:4A:83:00:40:84:89:61:A4:E2:4F:B3:4A:E6:B8:B8:EB:54:72
Certificate issuer: /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
Certificate serial: 0316
Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/ED947C26088911EDA7D9A84AC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:00:21 +0000
ROA not before: Sat 21 Jun 2025 01:19:47 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 18255
IP address blocks: 202.86.32.0/24 maxlen: 24
202.86.33.0/24 maxlen: 24
202.86.34.0/24 maxlen: 24
202.86.36.0/24 maxlen: 24
203.56.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl
rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:51:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 790 (0x316)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
Validity
Not Before: Jun 21 01:19:47 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5a605-08b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:8a:2c:a6:aa:6c:50:aa:8a:3c:0e:17:6c:
3c:37:b0:5e:e8:a5:5b:eb:ae:a3:71:57:27:e5:cd:
a7:f5:be:f9:08:66:ff:c3:9d:c5:3d:0a:e1:36:88:
e0:e5:a5:25:f5:8a:3a:a4:4c:4f:f6:a7:93:73:2f:
81:22:b0:01:9e:56:43:0e:be:e8:ce:a4:a1:64:0e:
e5:0f:b9:22:eb:51:49:cf:9b:c4:b0:f3:f0:7c:96:
8f:53:38:9c:8f:0a:1e:e3:9c:4b:c5:22:30:56:03:
11:fd:c4:5d:bb:ec:f0:59:76:a6:7c:3f:a8:6c:d1:
ca:91:97:be:09:fa:37:6f:87:87:40:66:3d:2a:48:
58:53:40:89:5f:c3:20:5c:e8:ff:16:52:5a:62:5d:
d9:77:34:5f:5c:82:13:25:5f:97:be:a4:2a:61:a8:
6d:87:dd:fc:b2:c7:5e:2f:cc:70:49:9f:c8:9b:70:
d7:3e:8e:23:ac:ea:cb:4e:1d:15:50:13:b5:69:d8:
ce:fc:c2:a0:e1:d9:5d:69:9e:76:94:dd:df:e6:dd:
0a:f2:a6:e2:d4:f4:86:54:47:84:13:d9:b4:e9:16:
38:3f:55:99:aa:67:be:10:e9:81:00:29:cd:e1:e8:
d5:b8:50:d1:63:8c:90:f8:41:d9:c4:8d:53:cf:ed:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AC:4A:83:00:40:84:89:61:A4:E2:4F:B3:4A:E6:B8:B8:EB:54:72
X509v3 Authority Key Identifier:
keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/ED947C26088911EDA7D9A84AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.86.32.0-202.86.34.255
202.86.36.0/24
203.56.233.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ec:f7:cc:d0:58:e1:ef:f1:c1:ad:2c:a8:d2:0c:4e:66:30:
ed:95:7a:c1:f3:0c:8a:1a:10:4c:b2:40:7b:5d:ec:1e:ce:e3:
8e:b6:db:d9:36:fe:2f:3d:a0:9e:d3:3c:fc:21:c9:fe:ad:49:
40:2c:c1:67:b7:37:ba:7c:f2:d2:d2:65:d7:92:ed:15:10:83:
6e:5c:f8:77:31:39:37:a0:81:4d:38:63:7c:0a:49:6c:88:a8:
b4:60:e0:ea:ca:3d:d9:5b:77:19:d6:8b:54:22:b2:b6:4a:0a:
aa:1f:e4:d8:9d:84:4e:dc:70:7e:88:6a:18:35:7d:0f:b4:98:
e6:c4:50:6d:fb:61:3e:01:ea:ca:ca:78:a1:f6:5c:56:36:50:
a6:2a:67:d6:f1:2e:6d:12:bf:a7:4a:2b:05:b9:f8:83:69:cd:
e8:c2:08:fa:44:fe:1e:97:ce:69:e7:9f:3a:09:f1:7a:2d:67:
c5:88:c4:16:2c:43:db:a0:7e:a1:c3:67:ff:0f:26:3e:05:f9:
d6:9e:35:4f:85:9f:e4:dd:65:50:07:7e:5c:1f:e6:96:ff:96:
c8:2b:03:ad:b0:b3:76:b9:e1:54:49:36:71:3f:b5:27:72:fe:
42:bf:50:e4:09:93:a6:be:3c:21:fe:51:f3:c8:37:83:e6:2b:
81:29:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:53 2026 by rpki-client