
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa
File: 33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa (raw, json)
Hash identifier: AbvhoyivAgNrkploh2fNOK5QOfQrTca6ewzAjtdPii4=
Subject key identifier: DC:71:7C:74:26:C2:43:6A:8F:F7:BE:2A:61:3B:2C:DA:5B:F7:B0:85
Certificate issuer: /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Certificate serial: 3517
Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa
Signing time: Sun 01 Mar 2026 14:30:38 +0000
ROA not before: Fri 02 Jan 2026 08:16:27 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 17554
IP address blocks: 203.160.45.0/24 maxlen: 24
203.160.46.0/24 maxlen: 24
203.160.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13591 (0x3517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF
Validity
Not Before: Jan 2 08:16:27 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a44d8e-378d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:76:a2:49:78:eb:49:e0:e2:d2:03:60:80:a6:
3f:63:dd:53:78:f3:cb:59:16:c8:ce:e8:cb:92:40:
6f:2d:15:90:18:25:b0:19:da:9b:37:ee:4b:bb:bc:
e7:44:c9:43:fa:8e:8f:84:93:43:79:1b:4e:15:fe:
f3:c7:ca:6a:02:82:63:1f:7f:33:c0:4c:9f:f2:c2:
d6:b5:ed:fa:bb:2d:13:05:33:fa:5f:52:c6:48:fe:
12:66:e0:bf:c5:bd:bd:c8:fc:df:4a:bd:ef:ad:0b:
fb:13:63:05:f2:50:42:6a:60:39:5b:74:b0:15:c5:
7d:da:25:46:99:9c:9e:17:aa:da:b7:43:1a:a9:fb:
33:5b:9e:4c:2d:86:c2:61:fd:42:8a:47:f0:96:73:
c7:83:29:77:bd:f3:5b:be:6c:9a:83:a7:62:b6:cd:
66:66:68:4e:87:4a:d4:2d:da:35:65:a3:0d:51:95:
c8:0a:84:a9:fd:a7:96:b3:11:df:c5:85:b1:c2:76:
90:c4:8d:3a:32:7f:08:24:df:b9:8f:2a:f8:66:73:
d0:81:fb:d2:eb:e4:65:2b:42:83:f0:a3:9b:1f:b9:
1d:07:05:d9:c3:e5:ab:73:cc:bf:4d:bc:72:f3:b4:
08:58:f5:5c:73:15:71:26:9b:7f:3e:6c:aa:03:95:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:71:7C:74:26:C2:43:6A:8F:F7:BE:2A:61:3B:2C:DA:5B:F7:B0:85
X509v3 Authority Key Identifier:
keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/33EEDAE8E5E711F09BCF2E4C5E6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.160.45.0-203.160.47.255
Signature Algorithm: sha256WithRSAEncryption
39:94:39:b1:ef:90:bf:8c:3f:79:af:c3:bd:45:9b:42:44:4d:
d5:7e:be:38:03:cf:b9:3e:58:2f:aa:96:d1:51:d1:56:87:9e:
d5:66:33:bd:7f:fb:b0:ee:74:6d:80:7c:c7:92:7c:18:c3:02:
98:42:e8:0e:62:17:53:3d:bc:ff:80:01:f1:81:f4:ee:e4:4f:
b6:2a:0f:f2:4a:e6:75:25:6b:82:2c:71:fc:68:45:1d:d9:f4:
58:24:a2:95:13:0f:0b:7f:ed:03:de:98:ee:e9:29:ea:8b:c4:
fe:bb:5a:a7:aa:f0:96:48:9c:1c:88:79:b8:d2:ec:63:eb:c2:
06:1a:f0:40:89:bc:94:03:d0:15:a4:28:90:91:59:2b:1a:2e:
a4:27:59:27:82:9c:03:c8:07:82:4e:82:11:6d:ad:45:9a:2f:
36:cc:d3:9a:3e:fa:2c:85:a3:b9:fd:b4:bd:3d:5b:83:9b:d8:
f8:25:85:3a:0c:fd:9b:79:80:27:13:b2:93:96:7a:f2:cb:d5:
17:c7:a4:3a:83:fd:ba:c5:3f:3f:22:2a:15:5e:a3:67:86:dc:
ca:4f:1f:82:02:45:d5:5b:f2:0a:22:d8:29:53:4f:c2:32:2f:
ec:94:92:76:50:78:58:f6:7e:cc:93:45:76:ea:c8:75:ac:9d:
7b:ed:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:41 2026 by rpki-client