
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/554E53D4B0B811EC9BE93E24C4F9AE02.roa
File: 554E53D4B0B811EC9BE93E24C4F9AE02.roa (raw, json)
Hash identifier: UpHGfUh0kotKwn90fIlxnooF4zogBZjwjsBrsKk+nCk=
Subject key identifier: 8C:36:12:1D:31:07:74:EA:6F:06:F9:D5:F2:54:57:EE:8C:A9:03:D1
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 2563
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/554E53D4B0B811EC9BE93E24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:18:42 +0000
ROA not before: Tue 16 Sep 2025 15:53:45 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 3758
IP address blocks: 202.189.129.0/24 maxlen: 24
203.208.128.0/24 maxlen: 24
203.208.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9571 (0x2563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Validity
Not Before: Sep 16 15:53:45 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48302-bdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:c0:b1:16:e8:d7:9f:eb:10:e5:63:e2:6d:
c4:59:5f:46:5a:e8:09:62:e1:c7:08:2a:a2:41:15:
2c:60:2e:63:ff:20:b4:66:d7:60:4e:34:6a:b0:c3:
58:46:7e:08:49:1a:da:c8:ea:2a:56:3b:80:77:76:
3b:a8:83:b2:1c:e6:e3:55:8a:b7:39:9d:2b:f1:2a:
39:7f:d1:d0:11:68:e4:a4:0e:53:45:6d:6b:97:73:
b0:5d:48:58:50:d6:ec:fc:f0:12:59:99:71:4d:45:
1f:73:51:04:b0:b3:bb:48:ea:d6:ad:8c:ba:40:bc:
1f:1a:62:41:38:2a:69:8c:20:46:4c:78:38:33:f4:
3d:6f:4f:f3:6c:c0:9d:81:1a:c0:58:13:b9:78:99:
ce:f7:ee:cb:1e:37:30:54:f5:7a:bf:bb:db:d3:e4:
0b:98:99:6f:09:46:9a:0c:5f:1c:08:39:b8:10:01:
34:75:50:5a:ed:2b:da:5a:13:33:ec:6b:b4:fa:9d:
d9:dd:83:bf:7e:bb:9d:63:7e:bb:b4:8a:6b:c6:c0:
d6:94:5c:33:34:d0:ce:f5:ec:13:09:0f:70:ac:5a:
7f:29:a8:bf:d8:34:11:e1:ab:d6:7e:d5:5f:ec:3f:
fc:6a:a4:9f:5a:28:8b:15:01:50:6c:09:bd:95:1f:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:12:1D:31:07:74:EA:6F:06:F9:D5:F2:54:57:EE:8C:A9:03:D1
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/554E53D4B0B811EC9BE93E24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.189.129.0/24
203.208.128.0/24
203.208.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:c8:14:cb:c5:ce:25:3b:53:c1:80:25:31:70:79:37:21:02:
f0:34:b6:67:05:ec:b3:91:83:5f:72:92:e5:fa:36:b4:ed:ba:
b5:46:6e:ec:d1:f4:ff:0d:b6:65:34:4b:e7:a6:5d:1b:dd:f7:
57:3a:e0:f5:e3:0e:ab:f8:72:13:cf:5d:a2:e9:1e:e0:09:1f:
9d:22:1e:f8:0c:9d:9f:14:b4:7c:87:4d:11:25:62:51:6e:df:
f6:c2:a8:5b:70:69:76:44:f5:9e:03:83:84:f2:d9:db:1c:3b:
6d:db:8a:18:b6:4d:32:2b:e4:ca:e2:a4:39:01:c0:f5:4d:77:
e3:a4:1e:ea:40:bc:30:52:62:27:8d:a6:2c:77:a5:5e:d5:a9:
d0:bd:57:42:9d:a7:fa:67:03:09:54:b2:2f:32:4c:60:92:6a:
64:e0:72:70:63:c7:5c:9c:d0:9f:81:e3:d4:85:a4:e8:e2:75:
22:6d:b1:b1:03:1e:03:03:9b:07:43:88:e7:db:b3:f1:ce:5b:
9e:06:ab:12:37:60:ef:ca:28:1b:72:a0:23:3c:73:3a:5f:af:
1d:79:0e:e8:9d:4a:16:79:03:f9:3a:bd:80:f3:eb:eb:02:8d:
9e:8d:44:af:99:55:65:a8:60:75:8d:4a:5a:9a:c5:d2:90:4f:
85:66:32:03
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICJWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1
NzAyMTVDOTYwHhcNMjUwOTE2MTU1MzQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODMwMi1iZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAnAsRbo15/rEOVj4m3EWV9GWugJYuHHCCqiQRUsYC5j/yC0ZtdgTjRqsMNY
Rn4ISRrayOoqVjuAd3Y7qIOyHObjVYq3OZ0r8So5f9HQEWjkpA5TRW1rl3OwXUhY
UNbs/PASWZlxTUUfc1EEsLO7SOrWrYy6QLwfGmJBOCppjCBGTHg4M/Q9b0/zbMCd
gRrAWBO5eJnO9+7LHjcwVPV6v7vb0+QLmJlvCUaaDF8cCDm4EAE0dVBa7SvaWhMz
7Gu0+p3Z3YO/frudY367tIprxsDWlFwzNNDO9ewTCQ9wrFp/Kai/2DQR4avWftVf
7D/8aqSfWiiLFQFQbAm9lR8FuwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFIw2Eh0x
B3Tqbwb51fJUV+6MqQPRMB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw
MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUM2MkIvNjRBMDUxNDY2MDEyMTFFNUJFOTI1MDcwQzRGOUFFMDIvNTU0RTUzRDRC
MEI4MTFFQzlCRTkzRTI0QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQAyr2BAwQAy9CAAwQAy9CQMA0GCSqGSIb3DQEBCwUAA4IBAQCNyBTL
xc4lO1PBgCUxcHk3IQLwNLZnBeyzkYNfcpLl+ja07bq1Rm7s0fT/DbZlNEvnpl0b
3fdXOuD14w6r+HITz12i6R7gCR+dIh74DJ2fFLR8h00RJWJRbt/2wqhbcGl2RPWe
A4OE8tnbHDtt24oYtk0yK+TK4qQ5AcD1TXfjpB7qQLwwUmInjaYsd6Ve1anQvVdC
naf6ZwMJVLIvMkxgkmpk4HJwY8dcnNCfgePUhaTo4nUibbGxAx4DA5sHQ4jn27Px
zlueBqsSN2DvyigbcqAjPHM6X68deQ7onUoWeQP5Or2A8+vrAo2ejUSvmVVlqGB1
jUpamsXSkE+FZjID
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:34 2026 by rpki-client