
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa
File: C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa (raw, json)
Hash identifier: AgB/Lpuse8T/z5cV67IzFShDTNVxyKAZ8KwUvRhawFQ=
Subject key identifier: 14:58:13:4A:EC:66:A1:CA:BD:55:BB:5F:82:45:95:38:84:DB:33:37
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: E8
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:11:35 +0000
ROA not before: Sat 17 Jan 2026 08:38:46 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 134565
IP address blocks: 122.155.135.0/24 maxlen: 24
2001:c38:9151::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Jan 17 08:38:46 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48f67-2fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:91:3d:ed:4a:17:9f:e3:78:60:7e:53:92:eb:
f7:4b:8e:06:02:43:c1:eb:95:34:76:87:e6:6a:0b:
ee:b4:fb:c5:b9:3a:a2:a9:2b:10:6a:e4:8f:51:67:
f9:96:65:ae:e7:45:bd:1c:22:61:c2:ad:a4:10:c7:
5a:22:bf:6f:b4:fe:47:01:c1:22:3b:46:14:01:b7:
f0:ed:9b:b5:80:a6:55:94:e7:73:27:7d:17:b7:f0:
da:4a:56:71:f0:5c:3d:77:38:64:e1:32:62:f0:75:
dc:ac:de:7d:07:76:39:6f:d0:13:7c:d7:e6:50:1b:
ab:f2:13:5a:51:bd:3d:8a:89:ad:44:5b:4d:86:e0:
5e:ea:2f:89:8b:11:28:f1:45:12:a1:93:36:19:62:
c5:df:2d:8c:eb:cb:57:44:f3:11:6c:e5:02:f6:9d:
3a:6e:de:cd:f2:7b:9a:1c:bd:01:3a:20:1d:c3:9f:
0c:a6:95:03:87:11:61:e1:84:0e:24:50:9d:3d:19:
58:48:1a:3c:86:0d:14:b2:d8:b6:9b:60:41:f0:1b:
ee:55:5c:26:ad:8b:04:4a:a1:82:77:09:e1:91:8b:
01:70:3b:13:b4:62:36:d7:75:13:1a:1a:77:86:ce:
4c:ec:48:16:e8:7c:a6:1f:0a:a5:1f:ae:60:60:ae:
95:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:13:4A:EC:66:A1:CA:BD:55:BB:5F:82:45:95:38:84:DB:33:37
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/C4EC2A8ED4AB11F08EA0FC57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.155.135.0/24
IPv6:
2001:c38:9151::/48
Signature Algorithm: sha256WithRSAEncryption
22:c8:85:e0:9c:9a:7e:79:dc:ed:51:14:be:84:bc:fc:0f:cf:
2b:97:05:2e:ee:6b:61:ab:e1:0f:45:19:83:34:cf:44:09:2d:
79:ba:8e:e9:91:fb:57:6f:55:c1:23:c8:e1:17:90:95:d5:92:
b1:12:27:8c:d6:33:ad:ff:b3:e2:24:64:46:f0:9d:83:b9:05:
a7:70:d6:9f:25:b4:22:a1:18:88:d7:ad:8a:90:83:0c:32:7d:
c5:eb:3f:6f:a0:96:c0:01:bc:f2:d6:77:c3:49:aa:91:17:cc:
6b:29:bf:c1:ba:74:b3:11:f9:5c:d3:3a:5a:7f:08:aa:6b:fd:
6a:a4:03:1b:9d:93:e9:4c:5f:7c:1f:ac:8c:89:72:b8:15:40:
d1:02:c5:66:15:50:5a:9a:cb:93:b3:39:96:a4:2c:65:25:f2:
72:1c:e6:b4:32:0a:4d:b7:21:69:dc:84:73:16:81:0c:04:dc:
c3:b9:42:17:9b:61:17:51:42:2d:9f:a2:6e:7e:72:0f:7e:8a:
27:d4:44:da:17:f3:0b:9c:ad:60:e8:26:9b:a4:86:4c:13:9f:
3b:16:aa:f0:65:2e:cb:f5:fd:63:1f:7d:d9:fc:2a:46:bc:c8:
81:1e:cd:f2:42:54:cf:30:cd:4a:5b:1e:46:fd:1c:b4:ff:99:
fc:49:56:79
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU5OEQxMTAvBgNVBAUTKDlBM0E2N0VERENEMDk3NzUzM0E5QTBCOEM0OUY0QzAx
MDBDODUzOTEwHhcNMjYwMTE3MDgzODQ2WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGY2Ny0yZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvJE97UoXn+N4YH5Tkuv3S44GAkPB65U0dofmagvutPvFuTqiqSsQauSPUWf5
lmWu50W9HCJhwq2kEMdaIr9vtP5HAcEiO0YUAbfw7Zu1gKZVlOdzJ30Xt/DaSlZx
8Fw9dzhk4TJi8HXcrN59B3Y5b9ATfNfmUBur8hNaUb09iomtRFtNhuBe6i+JixEo
8UUSoZM2GWLF3y2M68tXRPMRbOUC9p06bt7N8nuaHL0BOiAdw58MppUDhxFh4YQO
JFCdPRlYSBo8hg0Usti2m2BB8BvuVVwmrYsESqGCdwnhkYsBcDsTtGI213UTGhp3
hs5M7EgW6HymHwqlH65gYK6VuwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBRYE0rs
ZqHKvVW7X4JFlTiE2zM3MB8GA1UdIwQYMBaAFJo6Z+3c0Jd1M6mguMSfTAEAyFOR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9CODg1MzFDQUM4
RUMxMUYwQTM0NEFCNDVDNEY5QUUwMi9tanBuN2R6UWwzVXpxYUM0eEo5TUFRRElV
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qcG43ZHpRbDNVenFhQzR4SjlNQVFESVU1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU5OEQvQjg4NTMxQ0FDOEVDMTFGMEEzNDRBQjQ1QzRGOUFFMDIvQzRFQzJBOEVE
NEFCMTFGMDhFQTBGQzU3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAepuHMA8EAgACMAkDBwAgAQw4kVEwDQYJKoZIhvcNAQELBQADggEB
ACLIheCcmn553O1RFL6EvPwPzyuXBS7ua2Gr4Q9FGYM0z0QJLXm6jumR+1dvVcEj
yOEXkJXVkrESJ4zWM63/s+IkZEbwnYO5Badw1p8ltCKhGIjXrYqQgwwyfcXrP2+g
lsABvPLWd8NJqpEXzGspv8G6dLMR+VzTOlp/CKpr/WqkAxudk+lMX3wfrIyJcrgV
QNECxWYVUFqay5OzOZakLGUl8nIc5rQyCk23IWnchHMWgQwE3MO5QhebYRdRQi2f
om5+cg9+iifURNoX8wucrWDoJpukhkwTnzsWqvBlLsv1/WMffdn8Kka8yIEezfJC
VM8wzUpbHkb9HLT/mfxJVnk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:33 2026 by rpki-client