
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/CAD5365E090C11EBA5412411C4F9AE02.roa
File: CAD5365E090C11EBA5412411C4F9AE02.roa (raw, json)
Hash identifier: L2aIEqBSeSUdaq+Bbb2xJ0ME7DhBpMPkQlADmeK4jKI=
Subject key identifier: 1E:29:6F:7D:40:B6:28:92:B7:B8:70:76:C4:AD:DE:60:AE:3F:4F:69
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3C22
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/CAD5365E090C11EBA5412411C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:26:34 +0000
ROA not before: Fri 04 Jul 2025 14:50:46 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 6507
IP address blocks: 45.250.208.0/22 maxlen: 24
103.219.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15394 (0x3c22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Jul 4 14:50:46 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4af0a-0525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:1f:ac:52:3d:97:5b:04:7c:09:dd:02:92:
b7:83:c1:f2:1d:2c:7c:26:56:cd:1c:ab:1d:8c:2a:
5b:c9:ba:19:52:67:40:1e:65:30:20:66:ae:e3:07:
07:a4:82:84:66:bf:65:6d:36:3c:41:fa:cb:18:fa:
1c:95:cc:e3:42:77:1e:2e:e6:4c:7b:d4:c3:cc:3e:
ac:dc:64:d5:ec:1d:16:a0:4a:78:fb:72:59:41:63:
ed:3c:da:e2:45:0f:2e:a3:cd:4d:26:57:a0:a5:45:
88:c1:00:93:d8:81:b3:06:14:06:b0:d4:b8:5d:8d:
c9:fd:45:1d:d3:bc:43:ea:41:b1:f4:f2:b0:07:68:
f3:03:f5:cb:07:e4:c5:d5:2b:cd:fc:d5:ed:ba:0f:
b2:e0:5a:b1:51:50:5d:30:48:26:92:f1:c4:16:48:
c7:0a:b4:53:d0:af:00:df:52:af:94:b5:6c:74:46:
fa:94:6a:ac:b1:f7:11:fd:f1:41:98:11:81:08:79:
f7:69:00:91:49:f6:81:50:67:93:88:07:19:33:bb:
c7:04:bb:5e:79:92:07:c2:7f:95:45:de:42:94:7d:
37:0a:71:d6:11:d0:9d:8b:e2:90:01:8a:93:d8:7b:
17:7e:d2:4b:c8:40:b0:d6:c7:d8:92:f7:5d:4d:85:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:6F:7D:40:B6:28:92:B7:B8:70:76:C4:AD:DE:60:AE:3F:4F:69
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/CAD5365E090C11EBA5412411C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.250.208.0/22
103.219.128.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:a3:2e:89:09:47:03:09:10:c1:f8:1a:6f:18:87:b6:30:58:
f8:1d:f6:c9:13:9b:69:62:67:96:ad:e3:f3:0b:81:0d:42:76:
5c:df:bd:ae:9b:43:24:23:21:d1:53:6b:65:45:a6:7f:5e:9d:
35:68:c8:b7:98:9c:64:f0:8b:39:70:0a:91:e4:69:fe:e8:3e:
ba:d8:98:43:b1:44:18:4a:2e:78:1c:d7:3d:15:82:67:28:49:
f5:9d:19:70:0c:d3:76:90:69:dc:6e:eb:06:58:fe:24:17:02:
bc:1b:98:92:63:3c:55:9d:c9:07:e2:60:9c:fe:3b:ed:db:cc:
cb:1c:3e:8d:a2:9f:03:3d:a4:fb:ee:cd:1a:c9:a3:b2:2e:12:
bd:eb:fa:d5:31:c4:88:8f:9d:4a:77:90:83:f5:86:e7:95:df:
12:2d:60:27:26:ca:0e:8a:65:56:c9:10:ac:e6:ca:fb:8d:f7:
36:5b:e9:a7:99:b2:aa:cc:d2:ac:cb:dd:b6:66:dd:db:a8:9b:
2e:cd:11:ad:1f:8e:e9:b6:58:b1:f4:8d:24:fa:84:0f:e8:ab:
cc:60:39:01:b7:46:ff:8a:dd:a6:bd:f9:d4:5e:22:7b:26:06:
4e:95:aa:ba:c5:66:48:93:fd:96:d4:87:4b:2f:18:25:a3:1a:
0b:17:5d:d6
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICPCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUwNzA0MTQ1MDQ2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWYwYS0wNTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGgfrFI9l1sEfAndApK3g8HyHSx8JlbNHKsdjCpbyboZUmdAHmUwIGau4wcH
pIKEZr9lbTY8QfrLGPoclczjQnceLuZMe9TDzD6s3GTV7B0WoEp4+3JZQWPtPNri
RQ8uo81NJlegpUWIwQCT2IGzBhQGsNS4XY3J/UUd07xD6kGx9PKwB2jzA/XLB+TF
1SvN/NXtug+y4FqxUVBdMEgmkvHEFkjHCrRT0K8A31KvlLVsdEb6lGqssfcR/fFB
mBGBCHn3aQCRSfaBUGeTiAcZM7vHBLteeZIHwn+VRd5ClH03CnHWEdCdi+KQAYqT
2HsXftJLyECw1sfYkvddTYWobwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB4pb31A
tiiSt7hwdsSt3mCuP09pMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvQ0FENTM2NUUw
OTBDMTFFQkE1NDEyNDExQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLfrQAwQCZ9uAMA0GCSqGSIb3DQEBCwUAA4IBAQDDoy6JCUcDCRDB
+BpvGIe2MFj4HfbJE5tpYmeWrePzC4ENQnZc372um0MkIyHRU2tlRaZ/Xp01aMi3
mJxk8Is5cAqR5Gn+6D662JhDsUQYSi54HNc9FYJnKEn1nRlwDNN2kGncbusGWP4k
FwK8G5iSYzxVnckH4mCc/jvt28zLHD6Nop8DPaT77s0ayaOyLhK96/rVMcSIj51K
d5CD9Ybnld8SLWAnJsoOimVWyRCs5sr7jfc2W+mnmbKqzNKsy922Zt3bqJsuzRGt
H47ptlix9I0k+oQP6KvMYDkBt0b/it2mvfnUXiJ7JgZOlaq6xWZIk/2W1IdLLxgl
oxoLF13W
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:42 2026 by rpki-client