
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/0198539E94F311EA9429BF86C4F9AE02.roa
File: 0198539E94F311EA9429BF86C4F9AE02.roa (raw, json)
Hash identifier: DwDMBzTdLVQ0ELyjY5S8is56cxQg9X2S+eZse3Y+xqE=
Subject key identifier: 15:A3:E0:70:EF:70:6B:B3:A9:EF:14:CE:60:E9:36:F0:CD:B7:BE:13
Certificate issuer: /CN=A9148D52/serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Certificate serial: 0DB7
Authority key identifier: 68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/0198539E94F311EA9429BF86C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:39:29 +0000
ROA not before: Sat 14 Feb 2026 18:15:24 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133111
IP address blocks: 2400:a980::/29 maxlen: 29
2400:a980:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl
rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3511 (0xdb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D52, serialNumber=68874254547B34B3AF89DDB5B48D02023F57AE17
Validity
Not Before: Feb 14 18:15:24 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44fa1-8fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b9:de:23:68:d8:f5:19:e2:eb:43:d1:c9:e2:
b3:91:3d:f0:56:76:27:cb:25:04:f2:6d:fc:b4:a5:
af:76:b7:19:bf:34:09:f9:67:88:a6:70:ad:b1:27:
65:df:8c:f2:7b:b0:bf:fd:22:3b:38:af:07:ea:df:
39:7a:23:59:e8:7b:18:5d:b3:1f:ac:5b:cd:e3:7d:
90:24:53:8e:0a:73:07:a2:3e:b8:01:77:69:46:67:
e8:f6:8d:9d:da:35:80:31:81:4f:21:de:9b:05:b4:
4b:d3:4b:c3:1a:b0:59:9a:07:73:0f:a6:47:12:9e:
00:e4:c1:c2:86:38:d1:15:8a:67:52:bb:65:42:98:
51:75:6d:a3:14:62:26:4b:c8:e2:9d:f9:fd:7b:90:
b1:9e:e0:64:47:5d:87:25:4d:32:f5:42:f4:06:08:
cf:12:d2:7a:9a:76:36:09:6e:8d:ba:1a:5b:91:86:
b5:f9:44:52:ba:1b:41:d5:d1:d0:04:a6:a2:43:df:
93:55:be:0e:09:01:21:21:1c:64:20:a2:5d:54:02:
a6:da:31:76:aa:c9:70:38:e9:a9:11:e6:2e:b3:66:
05:1b:95:63:70:0b:71:2e:95:77:2c:4b:53:30:ba:
bc:90:dd:92:43:58:60:f5:d4:33:de:81:8c:68:38:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A3:E0:70:EF:70:6B:B3:A9:EF:14:CE:60:E9:36:F0:CD:B7:BE:13
X509v3 Authority Key Identifier:
keyid:68:87:42:54:54:7B:34:B3:AF:89:DD:B5:B4:8D:02:02:3F:57:AE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/aIdCVFR7NLOvid21tI0CAj9Xrhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIdCVFR7NLOvid21tI0CAj9Xrhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D52/1D4B44EEDB6B11E992987F41C4F9AE02/0198539E94F311EA9429BF86C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:a980::/29
Signature Algorithm: sha256WithRSAEncryption
86:9b:50:20:0d:95:12:df:eb:94:eb:fe:de:99:10:a6:b0:09:
99:60:d2:80:3a:c7:67:e0:65:cd:f0:c7:c6:de:ad:ae:91:9a:
cd:2d:a4:5b:c0:dd:29:0b:d7:82:6a:b1:40:e1:16:ae:26:63:
5e:5c:21:41:8d:d4:78:db:a0:35:ba:75:2a:8d:98:f5:27:b3:
88:9e:8d:6c:3c:09:e4:9c:15:cd:31:09:00:68:37:c2:b7:2a:
58:96:f3:a8:ff:c7:72:f8:73:2a:8a:c3:0b:2f:2a:4e:1c:7d:
84:b0:9b:3e:c3:1e:88:2a:1c:b2:6f:e3:52:fc:e6:4a:24:0d:
fb:b6:ff:07:d5:d8:02:20:54:b8:71:22:5a:8c:bd:61:5e:a0:
b2:6a:b6:f6:5c:a8:1f:87:63:81:60:1a:99:44:02:4f:9b:0c:
86:ae:ee:ba:61:23:2e:28:7e:0d:00:26:2c:c6:63:46:d4:d6:
9a:62:31:ec:9b:13:ec:a8:73:6a:07:c6:72:3a:80:ac:61:db:
50:15:77:e7:3b:8b:14:eb:02:5d:c8:62:4c:35:db:17:e1:bf:
85:7f:6d:7d:51:85:de:d2:1e:12:fb:4e:47:43:da:b4:5c:51:
ee:91:1b:f6:a7:aa:07:c2:af:19:87:00:3f:56:57:b7:32:5a:
be:d1:a8:55
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgICDbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhENTIxMTAvBgNVBAUTKDY4ODc0MjU0NTQ3QjM0QjNBRjg5RERCNUI0OEQwMjAy
M0Y1N0FFMTcwHhcNMjYwMjE0MTgxNTI0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGZhMS04ZmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbneI2jY9Rni60PRyeKzkT3wVnYnyyUE8m38tKWvdrcZvzQJ+WeIpnCtsSdl
34zye7C//SI7OK8H6t85eiNZ6HsYXbMfrFvN432QJFOOCnMHoj64AXdpRmfo9o2d
2jWAMYFPId6bBbRL00vDGrBZmgdzD6ZHEp4A5MHChjjRFYpnUrtlQphRdW2jFGIm
S8jinfn9e5CxnuBkR12HJU0y9UL0BgjPEtJ6mnY2CW6NuhpbkYa1+URSuhtB1dHQ
BKaiQ9+TVb4OCQEhIRxkIKJdVAKm2jF2qslwOOmpEeYus2YFG5VjcAtxLpV3LEtT
MLq8kN2SQ1hg9dQz3oGMaDhJywIDAQABo4ICYTCCAl0wHQYDVR0OBBYEFBWj4HDv
cGuzqe8UzmDpNvDNt74TMB8GA1UdIwQYMBaAFGiHQlRUezSzr4ndtbSNAgI/V64X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1Mi8xRDRCNDRFRURC
NkIxMUU5OTI5ODdGNDFDNEY5QUUwMi9hSWRDVkZSN05MT3ZpZDIxdEkwQ0FqOVhy
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJZENWRlI3TkxPdmlkMjF0STBDQWo5WHJoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhENTIvMUQ0QjQ0RUVEQjZCMTFFOTkyOTg3RjQxQzRGOUFFMDIvMDE5ODUzOUU5
NEYzMTFFQTk0MjlCRjg2QzRGOUFFMDIucm9hMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAAjAHAwUDJACpgDANBgkqhkiG9w0BAQsFAAOCAQEAhptQIA2VEt/rlOv+3pkQ
prAJmWDSgDrHZ+BlzfDHxt6trpGazS2kW8DdKQvXgmqxQOEWriZjXlwhQY3UeNug
Nbp1Ko2Y9SeziJ6NbDwJ5JwVzTEJAGg3wrcqWJbzqP/HcvhzKorDCy8qThx9hLCb
PsMeiCocsm/jUvzmSiQN+7b/B9XYAiBUuHEiWoy9YV6gsmq29lyoH4djgWAamUQC
T5sMhq7uumEjLih+DQAmLMZjRtTWmmIx7JsT7KhzagfGcjqArGHbUBV35zuLFOsC
XchiTDXbF+G/hX9tfVGF3tIeEvtOR0PatFxR7pEb9qeqB8KvGYcAP1ZXtzJavtGo
VQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:50 2026 by rpki-client