
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
File: 0B4068BEC55D11F0B9FDE586C4F9AE02.roa (raw, json)
Hash identifier: MpkJnjcMThfx3LCJFdT72z/oCW4Tq8SqMkjTnc2yLCQ=
Subject key identifier: 06:59:9B:4E:69:95:4F:69:09:91:E9:D8:32:B9:59:62:8B:3A:92:F0
Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial: A6
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:14:24 +0000
ROA not before: Wed 19 Nov 2025 15:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138985
IP address blocks: 202.63.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Validity
Not Before: Nov 19 15:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48200-5ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:fc:13:8d:1c:d8:e4:66:4b:e6:d7:76:4f:
99:3e:31:aa:b6:f1:81:f5:4d:b1:aa:d2:1a:1d:36:
21:27:a9:76:b9:86:7c:2b:2d:74:3e:37:02:f4:ea:
84:5a:d0:98:c7:e2:b8:e6:f0:f0:05:0c:c8:56:51:
7f:8e:8b:65:fe:36:e6:72:b5:f3:28:1a:92:88:42:
90:d7:ab:25:e4:2f:6a:52:a6:be:bc:fd:6c:2e:b3:
72:06:45:c8:b5:70:22:99:00:49:a3:39:72:2f:e4:
41:ed:e4:73:2d:8a:9f:d0:42:c6:65:61:f3:8b:41:
c2:81:6e:86:d1:47:f7:28:56:22:56:c4:74:98:8e:
9d:51:a5:76:ca:71:ea:f7:21:f9:99:7f:a6:92:cc:
94:7a:dc:4e:70:bc:2a:50:bd:30:ef:15:ca:d8:a5:
f9:38:1b:33:15:14:93:47:3e:ba:6b:47:a4:cd:6c:
54:ad:20:1c:ac:d6:b0:6b:4f:8d:44:68:8a:bb:6b:
9d:ba:56:87:24:10:ea:a2:bf:44:a9:3f:52:ab:ea:
7d:67:4e:24:67:7d:0a:b5:ae:3c:6f:ea:93:b6:d0:
76:5f:a6:a8:a3:22:4a:94:97:a4:ca:e4:e6:98:ae:
ad:a0:38:e4:78:e2:e9:1d:9f:38:c9:51:59:78:99:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:9B:4E:69:95:4F:69:09:91:E9:D8:32:B9:59:62:8B:3A:92:F0
X509v3 Authority Key Identifier:
keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/0B4068BEC55D11F0B9FDE586C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.63.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:83:4b:80:6a:7d:0c:70:46:69:08:d9:41:bf:4e:1e:f8:54:
db:3e:55:17:fc:b0:ff:f5:e2:20:0e:d8:e2:6e:32:49:f8:4a:
85:08:47:5b:47:2a:6f:15:83:43:0a:79:07:3f:0f:72:5c:d4:
38:ba:03:9a:c9:b0:d2:e1:4b:f9:8e:e0:e0:34:80:de:78:91:
da:e8:b8:b9:c6:d0:ec:dd:4b:4b:84:85:85:d3:3d:cf:db:83:
c9:5f:9e:34:64:2d:a7:ca:45:f7:96:dd:cf:77:8a:91:8c:51:
fd:cb:ee:41:75:62:f1:78:18:3d:4f:95:d2:95:fa:b2:24:15:
25:17:98:e0:7b:6e:1a:36:43:12:ce:23:d8:75:da:fc:07:0f:
70:a6:d6:fa:1c:cb:0d:8b:19:19:7c:3d:53:28:8c:d2:c7:23:
54:36:f3:b2:b0:c6:1f:29:c8:b9:f4:c0:f9:6c:b3:22:7b:24:
79:c3:34:e8:d1:bf:ee:cb:ea:5c:04:5f:ef:cf:c5:d1:55:2f:
89:3d:33:cd:ed:22:d6:73:df:d6:ea:6b:e9:68:8b:57:95:c8:
b7:71:c7:0e:d6:3f:5d:0e:40:dc:77:24:3d:94:49:f4:37:07:
7f:94:4d:12:8e:f1:a3:70:2a:b7:43:c2:ae:22:79:b5:73:5a:
e6:fc:a2:ba
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFDRTIxMTAvBgNVBAUTKERBRTFDRTBBREE2N0I0NDcxM0M2MUIxRkFFQzRGNUQ0
RDY3QTE1OUYwHhcNMjUxMTE5MTUzMzA2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODIwMC01YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA50H8E40c2ORmS+bXdk+ZPjGqtvGB9U2xqtIaHTYhJ6l2uYZ8Ky10PjcC9OqE
WtCYx+K45vDwBQzIVlF/jotl/jbmcrXzKBqSiEKQ16sl5C9qUqa+vP1sLrNyBkXI
tXAimQBJozlyL+RB7eRzLYqf0ELGZWHzi0HCgW6G0Uf3KFYiVsR0mI6dUaV2ynHq
9yH5mX+mksyUetxOcLwqUL0w7xXK2KX5OBszFRSTRz66a0ekzWxUrSAcrNawa0+N
RGiKu2udulaHJBDqor9EqT9Sq+p9Z04kZ30Kta48b+qTttB2X6aooyJKlJekyuTm
mK6toDjkeOLpHZ84yVFZeJmHOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAZZm05p
lU9pCZHp2DK5WWKLOpLwMB8GA1UdIwQYMBaAFNrhzgraZ7RHE8YbH67E9dTWehWf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUNFMi81MUNEN0ZCQTcy
Q0UxMUYwODQyMUFBNDhDNEY5QUUwMi8ydUhPQ3RwbnRFY1R4aHNmcnNUMTFOWjZG
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ1SE9DdHBudEVjVHhoc2Zyc1QxMU5aNkZaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUFDRTIvNTFDRDdGQkE3MkNFMTFGMDg0MjFBQTQ4QzRGOUFFMDIvMEI0MDY4QkVD
NTVEMTFGMEI5RkRFNTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyj/TMA0GCSqGSIb3DQEBCwUAA4IBAQCOg0uAan0McEZpCNlBv04e
+FTbPlUX/LD/9eIgDtjibjJJ+EqFCEdbRypvFYNDCnkHPw9yXNQ4ugOaybDS4Uv5
juDgNIDeeJHa6Li5xtDs3UtLhIWF0z3P24PJX540ZC2nykX3lt3Pd4qRjFH9y+5B
dWLxeBg9T5XSlfqyJBUlF5jge24aNkMSziPYddr8Bw9wptb6HMsNixkZfD1TKIzS
xyNUNvOysMYfKci59MD5bLMieyR5wzTo0b/uy+pcBF/vz8XRVS+JPTPN7SLWc9/W
6mvpaItXlci3cccO1j9dDkDcdyQ9lEn0Nwd/lE0SjvGjcCq3Q8KuInm1c1rm/KK6
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:36:40 2026 by rpki-client