
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/554E53D4B0B811EC9BE93E24C4F9AE02.roa
File: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (raw, json)
Hash identifier: 1CMnEpOaVbO0k0JzlWaPtEIAbS4jjRsdEzoixyGeGHw=
Subject key identifier: 6D:47:F9:2C:C9:52:10:D7:A1:82:EA:4F:3E:0A:9B:A3:08:7C:F1:06
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 25CA
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/554E53D4B0B811EC9BE93E24C4F9AE02.roa
Signing time: Tue 18 Aug 2026 16:23:57 +0000
ROA not before: Tue 18 Aug 2026 16:23:57 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 3758
IP address blocks: 202.189.129.0/24 maxlen: 24
203.208.128.0/24 maxlen: 24
203.208.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9674 (0x25ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Aug 18 16:23:57 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a84871d-1a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1f:fd:26:88:8b:d5:d6:72:e4:06:c0:de:5a:
a2:42:4f:4f:5a:7a:41:ce:92:e1:c0:d6:82:6e:71:
55:2f:b2:5b:75:bf:20:ad:17:20:93:1c:fc:a8:99:
03:62:d8:1c:d9:42:e4:e0:71:85:11:a9:6a:e9:f8:
50:16:a3:ff:a8:fc:c9:e6:1f:7b:ef:03:43:1c:92:
33:0d:90:7a:73:c3:19:26:43:86:03:a8:db:7a:fd:
63:0b:7c:96:e5:f8:90:53:42:df:21:19:d8:57:37:
e4:be:8e:0a:03:ed:2f:80:c8:09:b2:0d:bf:b9:f7:
88:cf:ca:91:54:0b:11:43:10:42:75:79:64:c5:3f:
73:ba:36:94:8b:6d:e6:80:f2:81:c5:49:cd:5e:c3:
be:f7:7b:14:bb:13:da:39:17:65:90:70:f6:64:32:
58:e6:6b:85:f8:d8:21:e3:e1:98:00:11:57:35:dc:
30:94:f8:36:cc:4b:9e:5a:65:31:7f:35:70:07:1a:
46:d1:04:49:48:51:06:6a:33:53:35:be:0c:79:6d:
b7:a8:5d:db:5b:5d:21:77:c7:68:76:59:dd:0f:76:
a6:9e:7f:8c:91:be:ae:e5:d7:ce:fb:5b:8b:de:2c:
0b:84:7d:c2:bc:b7:f2:7a:56:41:f5:45:4a:36:46:
95:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:47:F9:2C:C9:52:10:D7:A1:82:EA:4F:3E:0A:9B:A3:08:7C:F1:06
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/554E53D4B0B811EC9BE93E24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.189.129.0/24
203.208.128.0/24
203.208.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:59:1d:7f:0d:cc:b4:d9:09:02:d9:c3:1c:85:bf:52:0d:ea:
f3:9f:8a:77:98:17:8d:4e:f4:d3:3c:46:d7:5c:1e:5b:cd:46:
32:b1:34:04:e2:28:a1:e5:aa:c1:5a:26:09:9f:f4:fe:2d:8f:
48:3c:39:f8:0a:dd:5b:45:db:8a:c6:4c:fc:d5:f2:43:91:1b:
f8:3c:a8:96:11:cc:00:33:55:f1:e8:7b:74:ba:83:74:1f:92:
09:16:04:7a:50:f7:74:d7:6c:61:c3:60:94:f1:1c:51:76:6a:
91:4f:3c:b3:13:9b:c4:19:8e:12:23:9c:64:f5:36:23:2c:90:
35:e0:42:55:da:0b:26:42:26:fd:eb:c5:89:86:a4:a9:ef:40:
e2:3f:e7:34:24:b3:df:6b:6d:10:9a:ca:32:0f:fc:4d:09:17:
f4:fd:1f:48:32:21:37:bc:54:02:be:45:6d:66:6b:6f:95:52:
9a:5b:d0:80:29:45:1f:3f:d6:5a:df:ea:c2:fc:28:b8:90:2c:
15:0b:70:75:f5:13:8a:8c:31:0a:6e:91:b2:8e:9b:db:88:b2:
0d:e5:6b:b8:4c:93:08:b8:43:0a:7e:c5:6a:10:10:d6:6f:f7:
c5:44:44:65:c3:f7:2f:92:d0:79:56:54:98:fe:89:c1:f8:13:
ea:c3:5e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:06:46 2026 by rpki-client