
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa
File: A0000D2CC91A11F08D74C673C4F9AE02.roa (raw, json)
Hash identifier: sY76HWNe2DtCJtYS74CJx7prfOKVaNPpOF+PUbbT4H0=
Subject key identifier: 99:26:3E:7F:1C:A4:DE:CD:03:4B:51:7C:EF:AD:A7:AB:CB:8E:DE:40
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: D6
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:11:20 +0000
ROA not before: Mon 24 Nov 2025 09:47:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4652
IP address blocks: 122.155.252.0/24 maxlen: 24
122.155.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Nov 24 09:47:44 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48f58-8a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:28:20:b4:5f:96:7a:53:0b:22:2d:ef:c1:
24:d6:ac:76:66:bf:f6:00:40:21:7e:d0:3c:90:81:
e8:91:d3:c8:8d:c2:78:bd:c6:ce:17:42:40:29:b9:
54:55:ca:5a:02:d3:ea:48:39:bf:e0:32:93:87:95:
a1:f1:bc:7e:15:f4:a4:f3:03:30:7f:2e:d7:77:a7:
61:7b:bb:68:37:f5:3e:e2:bd:c1:bc:55:9d:58:5b:
33:48:51:54:71:6e:2a:b0:5e:fd:03:eb:bc:1a:73:
3b:8c:67:db:b7:15:60:a8:3d:9a:0a:40:d0:06:67:
3a:20:21:a5:d0:c1:cf:a5:e4:69:95:cc:5c:f3:11:
cd:ee:af:2a:c3:ab:e1:de:0f:6c:9f:ef:c6:f3:83:
04:57:61:e4:cb:64:35:29:a5:96:06:6b:e9:64:81:
1f:be:ff:70:3c:fd:25:8d:d9:8b:fe:0d:d3:8c:ca:
2f:69:39:9e:fa:f8:aa:69:e8:78:86:16:f9:88:96:
93:83:70:25:ce:22:e6:47:7c:aa:90:1d:9d:93:00:
7f:bf:c2:a8:a4:00:e3:75:e7:b7:8c:3d:9d:83:a3:
6a:ab:b9:a0:ec:d8:15:8d:54:8e:84:1c:8c:09:28:
a9:fe:c6:5c:42:c9:ee:ec:83:15:e3:c0:3e:64:0a:
c7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:3E:7F:1C:A4:DE:CD:03:4B:51:7C:EF:AD:A7:AB:CB:8E:DE:40
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/A0000D2CC91A11F08D74C673C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.155.252.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:63:fb:23:c1:d0:39:92:77:80:77:5a:65:57:44:77:fa:5c:
87:87:92:1f:6a:3c:40:5e:48:6e:0e:f9:85:3f:1e:33:19:d6:
86:af:61:fc:91:01:cb:74:d5:00:ff:39:ab:18:b9:21:ea:19:
71:92:32:10:75:76:fe:4f:ec:b7:db:a5:75:5d:37:db:64:42:
ec:b1:ef:4d:a3:eb:fa:77:7a:38:5e:54:cf:8e:d8:83:22:70:
86:04:4b:74:d7:a3:21:09:b1:34:8c:b9:4f:6b:05:d3:4e:0b:
45:51:84:f3:2b:e6:1c:a6:e3:03:9b:76:c4:be:a6:2e:26:fa:
69:67:60:95:2c:4a:37:12:a3:57:3a:0e:29:a9:2c:05:a3:98:
93:6e:e2:e4:37:06:77:80:4d:ad:f6:57:fc:08:92:99:ab:4e:
60:7b:ae:b5:a4:41:8a:49:79:8d:1d:e0:eb:27:32:ab:05:ee:
cc:35:b6:88:0d:54:8f:0d:5b:1b:ef:c4:86:f8:68:9e:43:a1:
7a:73:83:d2:79:e2:50:62:1d:95:51:e1:5d:30:75:19:9d:51:
8d:5e:09:29:1f:aa:aa:f8:21:36:27:81:02:45:3e:09:cd:f9:
e0:48:fa:46:43:0e:16:a9:4f:a3:64:c1:2f:68:5a:b5:b0:2d:
67:3a:c0:b1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx
MDBDODUzOTEwHhcNMjUxMTI0MDk0NzQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGY1OC04YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3GkoILRflnpTCyIt78Ek1qx2Zr/2AEAhftA8kIHokdPIjcJ4vcbOF0JAKblU
VcpaAtPqSDm/4DKTh5Wh8bx+FfSk8wMwfy7Xd6dhe7toN/U+4r3BvFWdWFszSFFU
cW4qsF79A+u8GnM7jGfbtxVgqD2aCkDQBmc6ICGl0MHPpeRplcxc8xHN7q8qw6vh
3g9sn+/G84MEV2Hky2Q1KaWWBmvpZIEfvv9wPP0ljdmL/g3TjMovaTme+viqaeh4
hhb5iJaTg3AlziLmR3yqkB2dkwB/v8KopADjdee3jD2dg6Nqq7mg7NgVjVSOhByM
CSip/sZcQsnu7IMV48A+ZArHWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJkmPn8c
pN7NA0tRfO+tp6vLjt5AMB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4
RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvQTAwMDBEMkND
OTFBMTFGMDhENzRDNjczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBepv8MA0GCSqGSIb3DQEBCwUAA4IBAQCoY/sjwdA5kneAd1plV0R3
+lyHh5IfajxAXkhuDvmFPx4zGdaGr2H8kQHLdNUA/zmrGLkh6hlxkjIQdXb+T+y3
26V1XTfbZELsse9No+v6d3o4XlTPjtiDInCGBEt016MhCbE0jLlPawXTTgtFUYTz
K+YcpuMDm3bEvqYuJvppZ2CVLEo3EqNXOg4pqSwFo5iTbuLkNwZ3gE2t9lf8CJKZ
q05ge661pEGKSXmNHeDrJzKrBe7MNbaIDVSPDVsb78SG+GieQ6F6c4PSeeJQYh2V
UeFdMHUZnVGNXgkpH6qq+CE2J4ECRT4JzfngSPpGQw4WqU+jZMEvaFq1sC1nOsCx
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:44 2026 by rpki-client