
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
File: 682125602A4311EBBD69BE46C4F9AE02.roa (raw, json)
Hash identifier: Q0sreTOCeSUhlAzjf4yXDHqHl5NVQ4QsOwOLV34E2to=
Subject key identifier: 63:B7:DD:B4:60:10:89:C8:A4:48:81:72:14:30:D5:7B:12:E5:E8:DE
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 09B4
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:13:40 +0000
ROA not before: Tue 20 May 2025 21:51:00 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55932
IP address blocks: 203.151.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: May 20 21:51:00 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48fe3-dc5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:0a:c1:ea:02:26:f5:6f:23:9b:af:59:db:
88:66:57:83:d4:21:ab:d0:d3:18:63:5c:20:81:d1:
a5:09:ed:da:69:72:7a:ec:09:ae:9c:e9:d2:fb:35:
44:07:3e:32:f3:de:32:66:b5:99:f1:e7:d3:a3:02:
d2:81:64:73:fc:03:af:55:e2:b3:df:ac:9a:77:c1:
4d:29:6b:99:bc:35:9b:25:2d:cf:cf:42:08:a6:e2:
4f:63:43:a5:c5:63:52:d7:d3:85:27:a1:5b:b7:9e:
b2:ea:de:c6:46:23:b2:e2:57:a5:bb:50:9b:d7:d0:
60:cb:de:c0:ac:d9:4c:1d:2c:a7:95:58:58:df:ec:
4e:fb:b9:f7:aa:c5:12:2a:ad:12:fa:8d:bb:7e:48:
42:51:da:f9:e2:c5:d4:da:28:11:87:08:2d:ea:c5:
19:f2:10:16:42:31:3c:e2:b4:90:ae:41:c5:62:18:
78:e6:91:8b:ee:df:47:75:2b:42:b4:df:1d:4e:93:
f9:9b:1d:de:63:c3:10:f8:59:d0:03:1b:47:d3:c1:
3a:d7:90:30:72:03:1d:ac:5e:9a:56:66:d7:2a:e7:
9b:3d:2f:0f:77:57:ec:cf:e4:b3:3d:b7:0a:c9:d6:
d9:1e:98:72:da:15:f6:f6:f7:71:06:ea:0e:f2:4b:
0c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B7:DD:B4:60:10:89:C8:A4:48:81:72:14:30:D5:7B:12:E5:E8:DE
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/682125602A4311EBBD69BE46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.151.159.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c0:a3:5b:92:8d:2a:6d:16:82:4f:17:f1:03:ff:ca:e3:ee:
4b:3c:9a:1e:a9:b7:06:b9:f9:aa:3b:d4:6c:98:26:0d:f5:ea:
b9:05:84:68:74:0c:19:87:27:6e:88:71:77:83:9d:11:56:04:
ca:cf:96:8d:49:14:5d:3a:ee:b1:0c:40:10:d3:86:01:ca:40:
44:ba:ba:89:2f:53:61:78:6f:26:4c:1f:0e:e2:74:00:fb:f1:
2e:9c:3c:86:dd:5a:6f:12:b2:0a:ef:67:28:28:16:b7:4a:f5:
a8:b0:0e:32:c7:cd:e0:a5:f6:a9:73:6d:19:fa:b1:e3:db:77:
95:01:23:c0:1e:d6:fe:7c:39:5c:ce:3c:82:28:e7:61:29:fe:
4c:33:15:a1:d7:85:16:c1:36:2a:be:61:5d:4e:a4:0b:a1:54:
f6:60:8a:45:e9:b9:ac:da:6f:3f:ee:b5:3d:15:98:bb:3a:c1:
aa:46:95:16:40:9d:e9:48:62:21:75:48:77:03:3b:1b:8f:d1:
74:3a:dc:56:0e:ac:0b:51:96:16:c6:72:91:2c:70:f4:40:5b:
7a:6b:c4:ac:32:01:96:23:80:35:07:b4:ef:7e:95:47:06:85:
d0:9a:e9:e7:6f:2d:52:b3:9e:13:03:cd:f2:2a:cd:5a:09:9e:
68:c9:55:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:08 2026 by rpki-client