
$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa
File: 502A4A36AAA611EE998EEF3AC4F9AE02.roa (raw, json)
Hash identifier: rJcH7U56XuZEecskwbJvsdvGpT+jiKhjpWcLXzO0cjk=
Subject key identifier: BD:23:B0:8A:47:57:21:4B:2D:DD:A7:79:FA:CE:EE:11:14:FF:87:32
Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Certificate serial: 3604
Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:56:22 +0000
ROA not before: Mon 02 Feb 2026 15:11:33 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 24378
IP address blocks: 203.156.106.0/24 maxlen: 24
203.156.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13828 (0x3604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914781A, serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D
Validity
Not Before: Feb 2 15:11:33 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a48bd6-8acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:f2:b5:12:e2:e6:ff:ce:52:0b:4b:eb:ec:
f6:d9:1a:5c:7b:51:6b:17:0c:bd:1c:5c:8b:7f:71:
5e:8f:e1:43:95:c9:a0:bf:21:aa:41:ab:07:9c:3c:
aa:fc:2e:d7:4f:0f:69:7c:2d:ca:14:8d:c7:d5:97:
bf:12:ed:c6:83:67:c3:6b:aa:b9:a4:44:9e:6c:36:
5c:b0:22:37:f1:c6:19:b8:e2:68:24:be:7d:94:62:
33:90:af:0c:e2:0a:2e:0c:cd:3d:56:5c:89:4d:18:
d7:70:00:ea:b1:d0:fa:ce:d3:77:8f:bb:44:eb:2b:
9e:76:8b:9e:5b:0b:5a:fc:7c:45:f5:63:ec:28:38:
f2:e2:2f:f5:69:0a:69:90:68:48:5e:74:27:31:1b:
69:cd:7f:4a:03:22:e9:2c:c3:60:22:fe:04:ee:4a:
5b:f6:d8:13:32:58:47:b7:01:f5:99:15:df:88:8d:
ce:65:22:48:af:7d:ef:5e:d4:1e:f8:4c:57:4c:8a:
33:41:8a:9f:90:60:f8:f8:34:b8:3a:00:e1:c4:85:
3c:38:45:68:64:98:1a:90:80:60:e7:b0:86:0d:56:
ba:34:0e:41:a2:48:33:c4:6a:ff:b9:6b:c1:19:74:
75:ce:0b:cc:6d:d8:e8:df:5e:28:58:5e:ff:3d:6c:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:23:B0:8A:47:57:21:4B:2D:DD:A7:79:FA:CE:EE:11:14:FF:87:32
X509v3 Authority Key Identifier:
keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/502A4A36AAA611EE998EEF3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.156.106.0/23
Signature Algorithm: sha256WithRSAEncryption
19:2c:18:24:40:8a:e6:00:5c:a7:91:cb:f2:b9:b1:13:26:9c:
aa:b2:25:2a:11:d6:32:66:73:a4:62:67:23:c4:22:e1:8c:91:
94:c2:7f:e0:38:b6:fb:dd:b4:74:88:f2:a7:db:a8:34:96:35:
0d:eb:9a:1e:4f:8c:37:4c:c7:e6:10:e9:1a:96:0b:e5:e6:e6:
6e:a5:e4:d3:e2:eb:8c:a5:68:fa:b9:16:b2:8a:f7:90:96:f3:
e2:66:69:11:e8:9b:ef:0d:03:97:86:26:dc:16:bf:fa:5e:48:
4e:0a:ab:96:e9:d6:c7:ad:3c:62:90:62:8e:c3:a8:4f:0c:ee:
42:0d:54:0b:06:de:a5:68:aa:f8:08:af:99:60:30:dd:a0:ba:
d4:43:02:44:03:d1:14:8a:7e:a0:fd:6b:3c:9c:bc:e0:c1:f9:
ec:10:87:37:c1:d3:ba:86:5a:37:99:27:99:3a:1e:a1:1e:df:
d6:c0:77:c8:d6:5f:73:59:f6:be:62:97:44:f1:94:46:1c:b3:
e4:90:f8:2a:02:4b:a8:e9:8f:43:c3:71:67:da:32:52:f5:da:
b8:5e:9d:d9:c7:c2:39:0e:d9:1b:ff:60:9b:84:39:c4:d3:a3:
e2:94:07:c4:f4:19:59:99:ec:b5:d1:e1:80:a4:5e:6c:e9:34:
c8:d7:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:29 2026 by rpki-client