
$ rpki-client -vvf rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/880DD06A13C411F1A59637CD0A3D8C67.roa
File: 880DD06A13C411F1A59637CD0A3D8C67.roa (raw, json)
Hash identifier: 4wnX+wvYDtSWiFQ76g2DxIqbUHqA4rZ+5fRjRHyOCaE=
Subject key identifier: 23:8B:13:BB:6A:8D:5B:A3:F9:CE:BE:69:DB:EF:7A:4F:A7:C3:D0:63
Certificate issuer: /CN=A915ACE2/serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Certificate serial: A9
Authority key identifier: DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/880DD06A13C411F1A59637CD0A3D8C67.roa
Signing time: Sun 01 Mar 2026 18:14:27 +0000
ROA not before: Fri 27 Feb 2026 10:14:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147302
IP address blocks: 202.63.209.0/24 maxlen: 24
202.63.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:34:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915ACE2, serialNumber=DAE1CE0ADA67B44713C61B1FAEC4F5D4D67A159F
Validity
Not Before: Feb 27 10:14:07 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48202-8847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:80:31:d9:c3:83:09:c0:61:90:b7:25:f2:
42:d8:73:bc:a6:a8:37:cd:be:e5:82:2b:f0:0a:4c:
ba:b5:49:b6:61:bd:d4:1b:7c:05:e7:35:e7:cb:45:
38:22:4e:09:f2:c7:20:0c:b2:12:e2:05:1e:da:81:
cc:05:d0:64:f8:2a:94:ff:2e:98:20:d1:35:2a:6c:
e0:ab:bc:a3:80:96:70:16:14:a4:1c:18:3c:1d:4f:
df:19:01:7d:09:81:0f:ed:29:d2:53:b4:ad:7d:85:
3c:42:02:c2:3b:2b:23:34:aa:21:ad:55:74:03:4b:
8c:e6:01:92:5a:a0:ae:ee:fd:10:ad:12:26:9d:a5:
13:ac:de:e7:1c:21:85:3b:54:14:09:6c:ac:95:27:
08:e5:02:21:49:41:21:71:ab:88:28:1b:9b:4c:9c:
81:07:b6:e3:48:71:4e:62:34:31:d8:72:7c:a8:e2:
9f:31:4f:e0:44:55:e9:b8:32:1a:d0:83:72:70:49:
20:3f:37:2a:94:8a:98:6f:25:23:13:1e:7d:68:42:
71:ae:81:68:a8:4f:b1:93:f0:67:dc:87:a0:86:cc:
dd:20:35:a8:fc:ab:97:ef:98:0d:09:09:ff:ad:c2:
ab:21:ae:48:5e:c4:7e:1e:ff:0b:b0:e6:78:2a:17:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:13:BB:6A:8D:5B:A3:F9:CE:BE:69:DB:EF:7A:4F:A7:C3:D0:63
X509v3 Authority Key Identifier:
keyid:DA:E1:CE:0A:DA:67:B4:47:13:C6:1B:1F:AE:C4:F5:D4:D6:7A:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/2uHOCtpntEcTxhsfrsT11NZ6FZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2uHOCtpntEcTxhsfrsT11NZ6FZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ACE2/51CD7FBA72CE11F08421AA48C4F9AE02/880DD06A13C411F1A59637CD0A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.63.209.0-202.63.210.255
Signature Algorithm: sha256WithRSAEncryption
36:31:23:66:13:c8:21:7a:75:20:4c:b1:d0:9e:ab:89:24:94:
46:ee:e3:ca:7d:ef:f4:56:38:bc:c5:a2:c9:9a:38:f7:3d:90:
71:50:50:bc:8e:07:b3:6f:57:ac:25:79:f1:c4:54:fb:79:3e:
83:a5:b9:8a:4b:9c:af:58:57:67:1d:3a:1e:e6:a4:d7:15:99:
2a:e2:2d:3b:68:b7:bb:2d:3e:6f:f5:b3:7c:46:8a:d0:15:47:
00:6b:f7:24:ff:23:3a:2b:86:24:86:16:6f:2f:2e:3f:fd:de:
e2:b5:1b:a5:64:35:c6:d0:2d:71:e4:69:e6:e2:9c:a6:1b:fa:
68:fe:cf:54:3c:8c:01:99:4d:48:e8:44:85:db:af:f4:84:16:
54:b1:1f:98:f9:08:3d:28:74:11:3e:d9:40:ba:e3:8b:e2:18:
41:54:c2:06:b8:ed:0c:35:08:5c:e8:88:fd:84:22:49:18:6d:
d7:33:4f:ea:dd:53:16:5c:d7:84:2d:cc:a6:3f:5a:e7:22:e8:
64:cc:bb:65:60:86:8f:3a:4e:64:7e:23:df:86:6e:2d:3a:c9:
ce:32:ce:ab:9e:ec:c3:4a:93:37:a7:b4:4a:4e:08:e0:47:20:
f6:f2:91:8b:82:23:c5:c2:fb:e5:4e:0e:ad:e4:a8:61:9f:dd:
b5:7f:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:34 2026 by rpki-client