
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/A5C01D6ED15511EA904EF30BC4F9AE02.roa
File: A5C01D6ED15511EA904EF30BC4F9AE02.roa (raw, json)
Hash identifier: TPYIIy7giECCiyhkn2zqAxX7e1+jAVNc9TByU391IOU=
Subject key identifier: 85:5F:F9:2B:A8:7E:C8:6C:31:69:41:AB:1D:BE:ED:C9:12:79:D4:3A
Certificate issuer: /CN=A914A47A/serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Certificate serial: 351C
Authority key identifier: E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/A5C01D6ED15511EA904EF30BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:11:05 +0000
ROA not before: Wed 14 May 2025 15:10:51 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 23731
IP address blocks: 203.175.120.0/24 maxlen: 24
203.175.121.0/24 maxlen: 24
203.175.122.0/24 maxlen: 24
203.175.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13596 (0x351c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A47A, serialNumber=E52D7F7FBAAC1F75AFFA762EDB3F28160BCFBD25
Validity
Not Before: May 14 15:10:51 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a402a9-4f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:79:6f:0c:23:c0:78:07:0f:a9:58:be:4c:
1c:e2:94:53:3c:70:8d:76:92:41:20:d2:8e:d6:79:
77:18:89:b4:68:e6:a1:2b:2c:fa:74:10:7c:bc:eb:
64:48:b9:55:48:70:b7:38:2e:e8:ec:0b:e3:f1:86:
2d:de:42:da:46:a7:8f:1f:76:82:8e:59:bc:a2:69:
05:87:eb:5b:23:a6:da:d0:0c:00:49:e2:fb:69:a9:
21:30:4b:a6:02:e9:7f:e1:9e:be:95:7f:12:e5:bf:
bf:e9:df:7d:e9:bb:76:32:35:ab:bf:09:83:45:47:
3e:ae:41:53:c8:ad:0b:4f:4d:90:06:0f:77:4e:b2:
05:08:d6:2a:41:7c:48:f9:5e:d3:d7:1c:14:08:c3:
98:f1:57:b1:ca:74:16:d7:c5:88:30:55:0f:6b:08:
08:c5:28:8d:fa:62:43:fe:03:ba:88:36:5c:67:9c:
a3:3b:54:13:c4:cc:ac:97:f7:87:74:a3:c7:f8:44:
df:c6:e4:67:ea:05:ef:12:dd:e6:f0:ed:42:bf:0c:
cb:8e:e6:60:40:94:e0:2b:0d:a0:c6:1c:37:88:7d:
81:b3:d1:8e:94:f4:f9:34:33:8b:50:c9:3c:5f:bf:
ba:b2:4a:c3:ff:a3:67:b1:3f:b6:28:b7:d8:a7:c2:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5F:F9:2B:A8:7E:C8:6C:31:69:41:AB:1D:BE:ED:C9:12:79:D4:3A
X509v3 Authority Key Identifier:
keyid:E5:2D:7F:7F:BA:AC:1F:75:AF:FA:76:2E:DB:3F:28:16:0B:CF:BD:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5S1_f7qsH3Wv-nYu2z8oFgvPvSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A47A/4AF221DA1D9811E2AD2B398208B02CD2/A5C01D6ED15511EA904EF30BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.175.120.0/22
Signature Algorithm: sha256WithRSAEncryption
56:56:ab:79:d6:67:64:cf:81:06:d4:8f:e2:7b:98:cc:f0:5c:
61:dd:9c:37:4c:6e:28:47:4b:bf:8c:ad:0e:0d:0d:92:96:2e:
bc:e1:d3:53:cf:7c:c0:cf:2d:0a:98:d7:c5:02:2e:b3:6e:39:
6a:97:1f:cf:70:bd:14:1e:63:04:59:98:c9:32:38:80:fa:90:
fa:1b:64:8e:2d:9b:97:e4:ac:59:25:c5:84:97:86:1c:c9:ff:
3a:5f:46:5a:fd:55:1e:83:62:0e:07:6d:49:5d:19:33:ee:fd:
3c:1f:73:a1:1b:a9:cb:63:3c:69:95:09:e9:67:f1:a2:f0:1c:
a6:b6:b9:91:03:11:5e:56:66:5a:5a:e1:a2:c0:7f:b9:d1:97:
3b:bd:bf:cd:4c:5e:d4:b0:db:e2:01:ad:f0:15:41:ad:b4:68:
72:48:f1:21:b1:e8:e2:4a:ca:3f:8c:de:5c:a8:7f:6e:da:9e:
77:a0:42:75:70:70:28:aa:c8:bb:1b:5a:eb:fd:12:73:ee:cc:
a0:51:fd:52:07:2c:2d:61:12:32:04:e1:2d:d6:14:3e:ce:a0:
d4:a1:43:5a:fc:5b:75:22:c0:4a:c5:39:e3:d3:2f:00:84:e6:
79:77:f4:94:4e:e2:b1:d3:11:0c:16:9d:bc:ac:54:a8:a8:e2:
15:42:58:ed
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICNRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE0N0ExMTAvBgNVBAUTKEU1MkQ3RjdGQkFBQzFGNzVBRkZBNzYyRURCM0YyODE2
MEJDRkJEMjUwHhcNMjUwNTE0MTUxMDUxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDJhOS00ZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFF5bwwjwHgHD6lYvkwc4pRTPHCNdpJBINKO1nl3GIm0aOahKyz6dBB8vOtk
SLlVSHC3OC7o7Avj8YYt3kLaRqePH3aCjlm8omkFh+tbI6ba0AwASeL7aakhMEum
Aul/4Z6+lX8S5b+/6d996bt2MjWrvwmDRUc+rkFTyK0LT02QBg93TrIFCNYqQXxI
+V7T1xwUCMOY8VexynQW18WIMFUPawgIxSiN+mJD/gO6iDZcZ5yjO1QTxMysl/eH
dKPH+ETfxuRn6gXvEt3m8O1CvwzLjuZgQJTgKw2gxhw3iH2Bs9GOlPT5NDOLUMk8
X7+6skrD/6NnsT+2KLfYp8I9PwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIVf+Suo
fshsMWlBqx2+7ckSedQ6MB8GA1UdIwQYMBaAFOUtf3+6rB91r/p2Lts/KBYLz70l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTQ3QS80QUYyMjFEQTFE
OTgxMUUyQUQyQjM5ODIwOEIwMkNEMi81UzFfZjdxc0gzV3Ytbll1Mno4b0ZndlB2
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVTMV9mN3FzSDNXdi1uWXUyejhvRmd2UHZTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEE0N0EvNEFGMjIxREExRDk4MTFFMkFEMkIzOTgyMDhCMDJDRDIvQTVDMDFENkVE
MTU1MTFFQTkwNEVGMzBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCy694MA0GCSqGSIb3DQEBCwUAA4IBAQBWVqt51mdkz4EG1I/ie5jM
8Fxh3Zw3TG4oR0u/jK0ODQ2Sli684dNTz3zAzy0KmNfFAi6zbjlqlx/PcL0UHmME
WZjJMjiA+pD6G2SOLZuX5KxZJcWEl4Ycyf86X0Za/VUeg2IOB21JXRkz7v08H3Oh
G6nLYzxplQnpZ/Gi8BymtrmRAxFeVmZaWuGiwH+50Zc7vb/NTF7UsNviAa3wFUGt
tGhySPEhsejiSso/jN5cqH9u2p53oEJ1cHAoqsi7G1rr/RJz7sygUf1SBywtYRIy
BOEt1hQ+zqDUoUNa/Ft1IsBKxTnj0y8AhOZ5d/SUTuKx0xEMFp28rFSoqOIVQljt
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:01 2026 by rpki-client