
$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
File: 593888C40AB811EE97CC7A32C4F9AE02.roa (raw, json)
Hash identifier: jKf/2MU5Ip9D+4pRX+4cB+cT7JgiaWNbV4ALOM87qH4=
Subject key identifier: CC:95:0F:D8:D6:5E:B9:28:9D:76:2F:E7:A2:A8:D7:B0:E6:4C:82:41
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 020A
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
Signing time: Tue 17 Mar 2026 02:36:57 +0000
ROA not before: Tue 17 Mar 2026 02:36:56 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 53871
IP address blocks: 203.28.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Mar 17 02:36:56 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b8be48-0224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:c6:6c:a5:18:8f:ee:09:07:ea:67:ca:19:
93:66:2f:7d:7e:9a:a5:49:6c:6d:a2:09:51:1e:99:
b7:71:c1:01:08:08:44:d4:ff:be:41:a2:f4:5a:5d:
66:01:53:db:97:4f:94:0c:08:8b:76:de:76:2b:75:
da:37:42:96:c5:c9:cf:67:08:ed:ae:77:33:f3:2b:
70:27:c0:b9:9c:ab:49:5f:77:30:bb:43:5e:04:e6:
1f:66:c3:35:bf:6d:fc:55:20:e2:07:e3:f9:5c:b2:
5a:d9:90:cf:58:82:f3:90:94:11:54:d3:27:cc:53:
19:67:18:a7:3c:e4:b9:1a:73:f1:94:94:d6:16:93:
3d:07:7c:ba:f1:28:2d:ea:8a:e0:32:f1:11:f7:92:
bc:2e:ec:eb:47:94:d4:8c:87:0e:2f:a1:dc:3b:4c:
0d:33:e5:bc:ef:c2:71:b4:f6:5a:df:fc:5f:90:ca:
85:ed:ab:1a:7a:91:21:fa:e0:b3:23:13:3a:50:a8:
4f:e7:a7:e0:cc:34:b0:76:de:b7:f6:6a:8e:53:61:
6d:b4:6b:bc:ef:44:cc:25:99:8c:53:9f:99:d3:58:
ea:6f:30:72:41:61:5c:ad:df:14:46:0b:29:26:28:
32:a1:13:ed:9c:b3:2f:53:ea:d3:eb:7d:36:1e:93:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:0F:D8:D6:5E:B9:28:9D:76:2F:E7:A2:A8:D7:B0:E6:4C:82:41
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.155.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:69:a3:6e:5d:41:79:8c:db:2d:09:45:77:33:a2:f8:59:77:
1c:5a:0d:b3:b7:34:42:f7:82:a4:fd:86:54:c3:e9:f2:08:38:
c0:41:ea:39:4c:ea:a5:6a:6c:95:18:1e:51:7d:07:9c:89:21:
77:88:26:1e:ba:bd:f0:ba:10:c9:1e:09:45:f4:8c:49:58:94:
34:7a:d4:ef:aa:d5:5c:ac:f9:50:b6:f9:ef:20:93:8b:94:7b:
f1:1f:41:27:fd:63:ec:54:b7:e3:91:19:3c:f1:6a:53:76:ed:
3c:cc:17:93:4b:d8:fc:24:cf:bf:eb:56:16:9c:92:e1:85:cd:
6c:33:ce:f9:34:68:66:09:b9:7f:27:22:fa:8b:3c:6e:01:22:
ad:c1:f6:68:b9:dc:c7:00:06:54:b7:72:54:c2:e6:fd:21:da:
61:4b:c4:e0:19:de:39:91:8a:09:e3:3f:33:c2:43:fd:03:01:
5d:0b:73:e0:95:97:a1:a3:37:0d:df:85:2d:6d:73:5b:66:fd:
37:80:e5:1b:be:32:39:48:a3:2b:c7:ff:da:0e:83:73:6f:20:
ca:02:a1:52:58:4b:bd:c5:a8:1d:10:f4:9f:e0:15:a0:e8:16:
32:ef:47:14:07:f6:2c:66:83:17:9c:d0:a4:24:be:12:f0:36:
8b:cd:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:47 2026 by rpki-client