
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/CC4A3EAC0EDF11F0915E3563C4F9AE02.roa
File: CC4A3EAC0EDF11F0915E3563C4F9AE02.roa (raw, json)
Hash identifier: BP9dpnN3TWdDCzh67rIwfbR2WtB49rOYwybU3sKkAtc=
Subject key identifier: 03:79:F0:09:2E:91:47:10:03:6E:59:D3:C7:F1:0F:0A:09:D2:02:3D
Certificate issuer: /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial: 09B3
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/CC4A3EAC0EDF11F0915E3563C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:13:39 +0000
ROA not before: Tue 20 May 2025 21:50:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55925
IP address blocks: 203.150.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2483 (0x9b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Validity
Not Before: May 20 21:50:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48fe3-a5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:20:9d:d6:c8:e5:31:93:ca:4a:1a:59:9d:
3f:e9:8d:63:9c:68:d6:be:d3:e4:49:c5:20:e2:ac:
5b:8b:37:d2:60:3a:01:81:bd:9a:5d:2e:68:04:82:
5d:12:9f:bc:fc:44:76:99:eb:f9:e5:df:54:d5:ef:
46:7c:44:c8:dd:ca:74:ab:3f:3d:11:3d:13:53:41:
8a:9c:dd:4f:fd:f4:63:45:06:7b:1f:d5:78:2e:93:
52:56:1f:89:4d:8f:84:56:62:c2:cf:2c:d9:c7:32:
17:59:58:c4:6a:45:a5:e6:84:10:e3:f0:6e:a5:fd:
8b:3e:6f:e8:37:c7:69:84:57:e4:61:4a:d5:51:2d:
b5:1a:1f:69:04:48:9c:46:cd:37:3b:65:c7:d5:23:
8a:0b:66:f9:8f:e8:e8:4d:bb:68:71:51:37:f8:84:
4d:b4:a2:a5:25:46:cf:81:5a:e5:6e:1e:9e:d7:30:
1a:d9:4e:e0:7c:eb:ac:40:31:d1:db:fa:80:82:09:
69:2a:48:c6:e4:63:6f:77:07:08:4b:fa:91:8f:76:
f1:09:0d:cd:0e:c7:c3:b6:66:bb:fa:82:89:ae:db:
58:29:e1:0b:47:af:41:69:94:22:f4:9c:1e:53:c0:
8c:e3:26:e3:07:89:17:dd:85:1c:38:d3:ee:33:af:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:F0:09:2E:91:47:10:03:6E:59:D3:C7:F1:0F:0A:09:D2:02:3D
X509v3 Authority Key Identifier:
keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/CC4A3EAC0EDF11F0915E3563C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.150.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:21:49:64:9a:42:87:70:32:e9:05:a1:a7:0b:01:87:9b:02:
04:a9:5b:fc:c0:1d:74:46:0f:7b:2e:64:87:0f:bb:6a:3c:0a:
56:00:75:9a:60:9e:67:6e:70:68:74:5f:56:72:f7:9f:b5:6d:
60:5c:0b:a0:43:44:f9:0c:51:79:0d:16:e0:ab:0f:78:a6:d5:
67:a8:c8:e6:e3:e6:2e:39:a2:88:e5:32:ed:91:70:85:81:f5:
8a:2d:cb:2e:78:23:3c:5c:39:80:81:f8:6a:70:16:06:cc:1b:
43:ad:13:3a:52:f3:3c:38:03:6e:14:d8:de:4d:b5:38:1f:5b:
85:c4:2d:f8:77:a8:29:7c:1e:3d:46:3b:9a:90:16:8c:17:8c:
27:7e:bb:40:01:c5:52:5d:2e:2f:12:c4:da:f4:fd:87:0f:91:
fc:6f:94:79:43:39:9a:60:af:8b:b9:63:b5:1c:a9:96:6b:d2:
64:19:14:ed:36:4d:6a:74:ce:68:0e:21:68:50:d3:e9:81:76:
34:99:17:0f:43:4b:99:d4:60:7e:c0:ab:4c:96:b8:e4:a5:e6:
d5:a0:2f:a3:c2:09:2d:74:f9:95:fc:f0:dc:f7:5e:de:ee:58:
91:80:05:60:18:ed:de:48:59:af:56:74:f3:3f:2b:b9:95:8a:
cc:34:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:06 2026 by rpki-client