
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa
File: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (raw, json)
Hash identifier: pXbpkuqiutX+PAfcE6/HkNxLhVyYjefCmA1YJyvlDKU=
Subject key identifier: 66:8A:4E:2B:0B:73:2B:02:84:34:F2:47:3F:B3:4D:43:39:89:13:C6
Certificate issuer: /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial: 0328
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:56:54 +0000
ROA not before: Thu 25 Sep 2025 02:20:13 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4648
IP address blocks: 202.27.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 808 (0x328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Validity
Not Before: Sep 25 02:20:13 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a51896-68a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:2e:bc:f9:ac:76:af:b7:eb:fa:24:09:28:
88:1e:5e:c9:23:08:42:78:7f:da:a1:73:8e:95:69:
ac:a0:d9:7d:43:ce:cd:32:bc:03:e1:ba:0c:f3:5f:
32:66:f9:2f:61:6d:89:0d:83:ca:60:e6:12:e4:c6:
05:3c:b4:d8:21:b1:c9:65:98:2c:2b:0a:a9:f2:f0:
16:a6:8a:5b:80:b4:88:a8:a2:58:e7:01:e2:93:f4:
e6:b3:45:b2:f6:84:4b:fb:db:18:bd:59:3f:97:13:
12:5a:ba:a4:d7:a7:95:15:1e:64:87:06:60:09:8a:
c4:85:15:e3:17:47:91:74:7e:9f:62:78:b0:35:6d:
44:b8:17:3e:6c:0f:e8:31:f6:6e:3b:3b:84:4f:6e:
29:95:60:02:12:e5:47:4f:db:0b:2b:16:7f:77:1e:
5e:cc:22:e9:53:2a:94:c0:cb:be:5d:49:d6:65:11:
f8:89:e4:57:87:88:30:22:ff:a8:f8:19:68:2d:20:
3a:88:fa:6e:54:fe:43:7a:41:b7:d6:49:7d:6d:02:
2d:32:d6:8c:34:fc:8f:6f:a2:fe:a7:41:0b:bf:16:
db:65:3a:ce:bc:b9:71:6d:ff:ce:9f:c9:1a:51:c8:
22:21:e5:56:3a:83:69:ba:57:a5:22:62:21:09:b9:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:4E:2B:0B:73:2B:02:84:34:F2:47:3F:B3:4D:43:39:89:13:C6
X509v3 Authority Key Identifier:
keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/BBF0DD5216CD11EDBB046C79C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.27.146.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:9c:a0:04:d1:d9:ba:23:d3:31:01:88:c8:2d:d7:fd:4c:d7:
cd:06:46:d2:8d:fc:d5:7c:8b:b4:27:62:f0:3e:74:53:ad:9a:
c3:fb:a1:d4:c4:3c:0d:d1:c7:11:84:31:c3:f7:14:e3:b8:14:
91:ab:36:03:14:56:36:93:62:2d:05:4f:cd:2a:ea:c1:c7:c1:
54:2b:95:cc:70:b3:a4:59:20:62:bb:de:67:47:d5:8b:cf:a6:
52:70:6a:68:15:d9:16:8a:07:d6:68:4d:03:3e:f8:b7:74:eb:
2c:af:39:a7:4e:6b:94:fc:79:11:cb:ea:31:b5:24:ea:46:ee:
99:6c:26:c5:f3:e9:00:64:3a:f1:c3:b8:fa:6a:7e:d7:12:9e:
ca:84:16:c5:bc:6f:e4:cc:79:ca:39:cd:f5:f1:f1:b0:c6:c1:
50:04:7a:62:1c:fc:c9:e7:03:30:a7:fd:11:99:08:60:c3:f7:
55:d4:f9:65:35:d3:a1:d0:1e:1d:d2:a4:cc:90:03:53:78:4c:
a4:13:56:fa:b1:e9:11:89:fc:e8:77:51:5b:c6:bc:cd:46:6e:
f8:b6:cf:8a:ff:42:9b:a0:ee:be:f7:69:42:6e:2e:50:e3:69:
3b:59:80:ac:c3:9f:b6:0c:7a:5c:10:99:7a:f4:f2:f5:35:46:
bb:e0:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:48 2026 by rpki-client