
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/55A4C5C004AA11E8935B7021C4F9AE02.roa
File: 55A4C5C004AA11E8935B7021C4F9AE02.roa (raw, json)
Hash identifier: qfvcgZVUflsdf2vdMxE8qxvPQTjGmtT1vRqCh+Z14oM=
Subject key identifier: B3:02:FC:50:96:8D:4D:A0:F9:6C:FC:0E:8A:8E:A8:E4:72:65:CD:6E
Certificate issuer: /CN=A9112CEC/serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Certificate serial: 3554
Authority key identifier: 03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/55A4C5C004AA11E8935B7021C4F9AE02.roa
Signing time: Thu 28 May 2026 15:13:19 +0000
ROA not before: Thu 28 May 2026 15:13:19 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55508
IP address blocks: 103.1.232.0/22 maxlen: 22
103.1.233.0/24 maxlen: 24
157.119.180.0/22 maxlen: 22
157.119.180.0/24 maxlen: 24
157.119.181.0/24 maxlen: 24
157.119.182.0/24 maxlen: 24
157.119.183.0/24 maxlen: 24
202.9.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13652 (0x3554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112CEC, serialNumber=038CF2E28077DF2CADA45756FB5D99A6E240FD09
Validity
Not Before: May 28 15:13:19 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a185b8f-0f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:6b:2a:49:3d:fb:8e:3c:9f:49:ce:a8:1e:
e1:d5:bf:8a:01:df:a3:63:8d:3b:21:39:f2:cf:7c:
a9:1d:4c:a7:46:a9:19:78:36:61:df:06:d0:ac:88:
cb:97:b6:98:ac:97:c0:03:34:7b:45:db:4a:68:63:
ae:22:ed:ac:bb:b1:b1:80:bc:85:2b:ed:fd:e6:16:
9d:9b:03:a1:65:e0:3f:26:5b:f5:9e:4f:5f:6d:1d:
79:4b:8e:d1:32:34:99:7a:97:ef:bd:a5:02:aa:08:
3b:9c:e8:a7:68:9c:1b:b8:ef:69:dd:9b:f3:28:d5:
56:17:1d:62:6e:ea:b3:26:03:50:4a:b2:0f:02:9f:
d6:7b:20:dc:d6:21:71:8a:fc:95:8c:25:b5:c4:42:
ad:23:46:0a:aa:2e:27:dd:67:e3:60:6e:7c:6f:04:
60:83:59:cf:89:75:bf:ce:db:2c:01:9c:85:1a:84:
c7:f0:20:a4:aa:6e:30:86:a5:d9:2f:a4:6e:66:22:
cb:42:8d:2c:d8:e6:a5:ad:1a:8d:39:2d:b3:10:e4:
14:21:09:70:08:da:03:bc:ad:a9:3b:71:0a:57:45:
46:63:8c:7f:a8:32:b8:69:82:0f:4e:45:cb:a9:38:
63:25:79:c1:f9:5b:7c:11:cc:d0:2a:47:d1:a5:c5:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:FC:50:96:8D:4D:A0:F9:6C:FC:0E:8A:8E:A8:E4:72:65:CD:6E
X509v3 Authority Key Identifier:
keyid:03:8C:F2:E2:80:77:DF:2C:AD:A4:57:56:FB:5D:99:A6:E2:40:FD:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/A4zy4oB33yytpFdW-12ZpuJA_Qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4zy4oB33yytpFdW-12ZpuJA_Qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112CEC/B8B0C7881DA411E28C93E79A08B02CD2/55A4C5C004AA11E8935B7021C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.232.0/22
157.119.180.0/22
202.9.76.0/23
Signature Algorithm: sha256WithRSAEncryption
56:70:81:3a:b0:b7:f1:4c:3a:ca:56:93:ee:f7:81:45:39:5a:
03:b0:ce:fb:24:9e:d6:c7:df:71:79:6f:cf:a2:78:81:6b:12:
c0:d7:35:fd:ea:d5:de:a8:26:8c:aa:24:6a:67:ed:ee:d5:7b:
dc:68:cf:e4:28:cb:a0:8f:47:be:df:53:cc:3b:bf:14:30:b5:
19:38:c2:4b:be:70:a7:24:0e:40:9b:45:e7:5a:90:69:03:cb:
fc:21:6a:9f:93:d0:87:31:03:f8:b5:03:2f:57:66:82:a6:26:
2f:cc:25:f2:50:e9:78:5c:a9:be:5c:ab:d9:60:b7:30:f0:ca:
ac:9d:41:2e:c5:c3:ab:ae:03:7d:ef:a0:7e:f6:cc:0e:98:3f:
09:8d:c8:f6:4d:63:ea:1b:b9:97:51:18:ed:ff:6b:98:71:3c:
15:02:f7:d3:ce:3d:73:cc:79:84:8b:e5:a7:f2:7c:63:49:54:
34:05:79:33:e1:0a:17:a4:34:6e:8b:af:da:7e:d8:06:6a:16:
e9:18:58:b0:3f:7d:13:5c:ce:77:9f:9c:1b:83:c2:55:33:e0:
3a:2c:79:9a:bc:cc:bc:05:1d:c0:c5:81:2a:4d:dd:0c:98:7c:
1a:a4:21:c6:1d:f9:df:87:df:d5:36:94:1c:61:9f:70:0b:f6:
5d:c1:a1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:19:08 2026 by rpki-client