
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/974EDB46ED1311F09DD269343F6F56BC.roa
File: 974EDB46ED1311F09DD269343F6F56BC.roa (raw, json)
Hash identifier: EW0ak1r/n9daM+f8Sf/pSeTkahJsMv7bE6RTquux45U=
Subject key identifier: F1:C3:9F:7A:67:DF:46:9B:12:5B:30:A1:D1:CA:89:11:E7:F0:E3:1B
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 0379
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/974EDB46ED1311F09DD269343F6F56BC.roa
Signing time: Thu 07 May 2026 13:18:59 +0000
ROA not before: Thu 07 May 2026 13:18:59 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138077
IP address blocks: 202.155.66.0/23 maxlen: 24
202.155.68.0/23 maxlen: 23
202.155.104.0/22 maxlen: 24
202.155.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: May 7 13:18:59 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69fc9143-7329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:e8:04:38:e0:f6:8d:29:b5:8e:ec:52:ad:
19:3e:21:44:d9:c1:79:1b:37:cf:e3:b8:bb:06:4d:
76:65:d1:e8:83:b1:a7:1c:e8:c1:11:b4:54:62:28:
ab:a4:4e:98:9c:73:c6:7d:a5:ab:cd:64:d8:6c:59:
de:d2:35:e6:60:40:8b:0a:af:b5:8d:29:50:41:c7:
53:da:c6:bd:2f:93:fd:f0:1f:59:89:8c:ec:d7:34:
84:bb:53:7f:eb:58:c3:4d:62:91:ac:9f:9f:18:d3:
fb:33:e5:dc:88:00:5a:bd:cd:4e:82:2d:67:9d:6f:
9f:d8:b2:1e:47:97:f3:41:ea:43:20:1d:d2:86:ee:
59:43:1b:e2:6c:27:d0:c4:ce:d4:56:ae:cd:12:56:
d7:fc:aa:ab:11:f0:ef:89:e7:51:e0:4b:a1:9a:7a:
67:6f:7d:52:be:2b:4b:93:a9:17:db:38:d9:a3:88:
63:40:c9:c6:ef:03:c2:6f:5f:36:95:d7:cd:64:eb:
55:40:78:5a:3e:0d:ff:9d:60:24:45:51:0e:23:2e:
0e:b6:46:09:5f:36:81:ce:36:f6:c7:eb:82:61:40:
84:fb:7c:f4:f9:27:50:fb:8e:27:df:a6:f8:2b:34:
e2:1a:2c:4b:5c:18:cd:44:90:e2:cc:75:52:c8:90:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C3:9F:7A:67:DF:46:9B:12:5B:30:A1:D1:CA:89:11:E7:F0:E3:1B
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/974EDB46ED1311F09DD269343F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
202.155.66.0-202.155.69.255
202.155.104.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:a1:65:1c:c8:42:f0:ef:5f:81:d4:71:87:0c:9d:c4:3a:e3:
18:eb:bc:9e:2b:fb:7f:7b:59:55:02:fc:60:11:48:82:bc:53:
aa:34:5c:f1:69:36:a5:ec:11:09:35:c2:7f:e9:57:b3:a3:0e:
b5:6d:19:a3:f8:49:59:6e:0e:6f:bd:a4:f8:32:f9:75:6f:62:
b5:b0:6c:cb:72:48:a1:00:79:46:5c:eb:11:9e:8a:c4:e5:c9:
59:c5:0b:30:23:b5:22:56:0d:ca:f4:70:7e:e5:ea:15:a3:e9:
55:43:fa:8c:33:87:33:74:0c:f0:8a:f5:0c:99:2f:ea:bb:7f:
dd:ce:fd:d9:83:21:20:41:65:c1:7e:96:72:0d:8e:ac:14:19:
8a:99:f7:9a:ec:b0:b8:19:75:08:71:1f:00:61:6e:eb:b4:17:
71:58:59:89:ef:fa:36:07:33:f8:17:e1:6b:2f:ef:82:cd:94:
68:0a:4d:8e:e1:67:e4:9b:d5:ec:45:12:39:b2:6f:28:51:a0:
52:85:fb:d6:93:1b:60:47:de:7b:82:51:34:2b:1f:3f:7f:a5:
81:1a:b3:a7:30:9b:7e:55:97:20:35:2e:9f:c7:af:f1:da:4e:
56:b1:74:ea:9d:69:b9:1e:c7:0a:6a:c5:64:b0:31:5c:d4:88:
7d:78:28:c0
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjYwNTA3MTMxODU5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZjOTE0My03MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBfoBDjg9o0ptY7sUq0ZPiFE2cF5GzfP47i7Bk12ZdHog7GnHOjBEbRUYiir
pE6YnHPGfaWrzWTYbFne0jXmYECLCq+1jSlQQcdT2sa9L5P98B9ZiYzs1zSEu1N/
61jDTWKRrJ+fGNP7M+XciABavc1Ogi1nnW+f2LIeR5fzQepDIB3Shu5ZQxvibCfQ
xM7UVq7NElbX/KqrEfDviedR4Euhmnpnb31SvitLk6kX2zjZo4hjQMnG7wPCb182
ldfNZOtVQHhaPg3/nWAkRVEOIy4OtkYJXzaBzjb2x+uCYUCE+3z0+SdQ+44n36b4
KzTiGixLXBjNRJDizHVSyJDzIwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFPHDn3pn
30abElswodHKiRHn8OMbMB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvOTc0RURCNDZF
RDEzMTFGMDlERDI2OTM0M0Y2RjU2QkMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUMAwDBAHKm0IDBAHKm0QDBAPKm2gwDQYJKoZIhvcNAQELBQADggEBAB2h
ZRzIQvDvX4HUcYcMncQ64xjrvJ4r+397WVUC/GARSIK8U6o0XPFpNqXsEQk1wn/p
V7OjDrVtGaP4SVluDm+9pPgy+XVvYrWwbMtySKEAeUZc6xGeisTlyVnFCzAjtSJW
Dcr0cH7l6hWj6VVD+owzhzN0DPCK9QyZL+q7f93O/dmDISBBZcF+lnINjqwUGYqZ
95rssLgZdQhxHwBhbuu0F3FYWYnv+jYHM/gX4Wsv74LNlGgKTY7hZ+Sb1exFEjmy
byhRoFKF+9aTG2BH3nuCUTQrHz9/pYEas6cwm35VlyA1Lp/Hr/HaTlaxdOqdabke
xwpqxWSwMVzUiH14KMA=
-----END CERTIFICATE-----
Generated at Wed May 13 04:33:45 2026 by rpki-client