
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/2F5755A29C5611F183B20B674311F970.roa
File: 2F5755A29C5611F183B20B674311F970.roa (raw, json)
Hash identifier: XoFt6d27uwyJT0/BvhZSIQHqgFAFCPy92uoA6tI+Zz8=
Subject key identifier: A2:ED:FB:E5:6F:98:C4:2D:68:4B:B1:BA:52:80:83:CC:93:5B:AE:C4
Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Certificate serial: 029A
Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/2F5755A29C5611F183B20B674311F970.roa
Signing time: Thu 20 Aug 2026 05:15:40 +0000
ROA not before: Thu 20 Aug 2026 05:15:40 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.231.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB
Validity
Not Before: Aug 20 05:15:40 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a868d7c-de93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:16:29:49:46:fe:0d:ac:7f:2d:ab:a6:5d:
f5:16:b2:f6:9c:a7:d9:ba:f5:bd:1c:c2:21:be:82:
73:8c:28:e2:4d:7a:73:fa:1b:57:54:c6:00:39:d2:
bc:66:40:ce:3e:fc:c8:c5:87:b9:25:61:33:db:11:
e6:7f:de:3a:db:01:cd:4d:58:ab:41:46:29:57:a9:
da:15:38:b5:94:65:17:61:a3:d6:a8:bd:b4:82:96:
39:f2:e4:d1:e9:fa:87:59:89:1d:61:09:7c:a4:c2:
22:5b:15:35:0f:f5:99:eb:f3:9d:76:1e:63:f5:ae:
73:f1:82:f2:f3:08:40:19:95:cf:4c:91:66:6d:73:
96:4f:66:60:63:5a:09:4e:ad:2b:57:2d:f8:14:35:
7a:70:2d:1f:fc:b5:19:9a:bb:31:61:01:d5:7c:a4:
7e:c4:73:c3:43:0e:46:48:60:e3:db:12:02:81:bd:
72:1d:5a:ac:90:6e:02:55:c1:bb:a5:e9:65:88:30:
cc:00:e4:6d:6e:72:d9:46:cc:23:3d:77:b3:e7:5b:
f5:8b:05:bc:51:7f:93:16:f5:1a:e5:cd:53:96:33:
15:74:38:bb:e8:b6:2c:3d:ac:80:70:e0:4b:0d:19:
c4:41:6c:93:dc:34:66:f4:dc:07:82:c1:85:f7:46:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:FB:E5:6F:98:C4:2D:68:4B:B1:BA:52:80:83:CC:93:5B:AE:C4
X509v3 Authority Key Identifier:
keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/2F5755A29C5611F183B20B674311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.231.206.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b0:48:e4:af:98:9b:2d:0c:56:10:6b:f5:a5:3c:ae:a7:39:
97:d6:e4:d5:28:34:09:31:09:ff:46:64:65:0a:2f:d0:58:cc:
93:68:49:3a:a2:cf:e1:29:a1:41:8f:d3:80:23:a2:b3:aa:05:
94:5c:37:41:f7:9f:b2:25:0c:7f:cd:28:e1:c9:69:e3:7c:53:
23:c4:a8:c2:c5:7f:ab:d2:4a:11:0b:67:6d:c9:ea:3b:c8:19:
f9:70:45:a5:3b:c6:4a:2e:58:05:93:85:de:dd:32:b6:14:d8:
7b:10:23:e3:97:58:de:db:99:93:49:4c:7c:c9:4c:eb:3a:95:
a5:01:86:7d:f5:2b:fb:1f:c1:af:6c:bc:64:70:01:39:f8:67:
6b:cd:07:8a:b8:73:fa:6f:69:b7:00:48:48:47:ec:71:2f:44:
99:a2:41:e4:6c:8a:7a:58:45:fd:d8:e6:b9:22:ca:d6:9e:f3:
34:a8:0a:04:ce:10:d3:24:e2:f2:80:b1:82:7d:89:c0:c4:66:
cd:d4:fb:91:07:b3:c9:9c:df:48:9f:14:7a:2d:02:8a:0e:70:
72:a2:70:70:2c:3e:e9:04:08:a6:93:b9:e1:d4:c6:8e:42:8d:
1c:7b:e7:e4:28:ba:c5:24:62:72:46:e4:2d:6f:68:3b:14:e7:
06:65:09:d1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw
MEQ3ODhCRkIwHhcNMjYwODIwMDUxNTQwWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg2OGQ3Yy1kZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArugWKUlG/g2sfy2rpl31FrL2nKfZuvW9HMIhvoJzjCjiTXpz+htXVMYAOdK8
ZkDOPvzIxYe5JWEz2xHmf9462wHNTVirQUYpV6naFTi1lGUXYaPWqL20gpY58uTR
6fqHWYkdYQl8pMIiWxU1D/WZ6/Oddh5j9a5z8YLy8whAGZXPTJFmbXOWT2ZgY1oJ
Tq0rVy34FDV6cC0f/LUZmrsxYQHVfKR+xHPDQw5GSGDj2xICgb1yHVqskG4CVcG7
pelliDDMAORtbnLZRswjPXez51v1iwW8UX+TFvUa5c1TljMVdDi76LYsPayAcOBL
DRnEQWyT3DRm9NwHgsGF90YtaQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKLt++Vv
mMQtaEuxulKAg8yTW67EMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz
NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvMkY1NzU1QTI5
QzU2MTFGMTgzQjIwQjY3NDMxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK+fOMA0GCSqGSIb3DQEBCwUAA4IBAQBBsEjkr5ibLQxWEGv1pTyu
pzmX1uTVKDQJMQn/RmRlCi/QWMyTaEk6os/hKaFBj9OAI6KzqgWUXDdB95+yJQx/
zSjhyWnjfFMjxKjCxX+r0koRC2dtyeo7yBn5cEWlO8ZKLlgFk4Xe3TK2FNh7ECPj
l1je25mTSUx8yUzrOpWlAYZ99Sv7H8GvbLxkcAE5+GdrzQeKuHP6b2m3AEhIR+xx
L0SZokHkbIp6WEX92Oa5IsrWnvM0qAoEzhDTJOLygLGCfYnAxGbN1PuRB7PJnN9I
nxR6LQKKDnByonBwLD7pBAimk7nh1MaOQo0ce+fkKLrFJGJyRuQtb2g7FOcGZQnR
-----END CERTIFICATE-----
Generated at Mon Sep 21 00:04:06 2026 by rpki-client