
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/2EC1CE78CDB611ED8E2C0844C4F9AE02.roa
File: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (raw, json)
Hash identifier: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=
Subject key identifier: C7:D5:F1:32:17:CA:E0:82:BE:8C:CB:30:49:F9:56:BE:19:C3:34:CE
Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Certificate serial: 0237
Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/2EC1CE78CDB611ED8E2C0844C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:52:46 +0000
ROA not before: Wed 17 Sep 2025 04:18:35 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 151052
IP address blocks: 203.56.123.0/24 maxlen: 24
2001:df6:20c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:50:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567 (0x237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065
Validity
Not Before: Sep 17 04:18:35 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46ede-e184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9c:26:de:c7:10:13:f4:69:4e:b2:fe:a6:d1:
76:63:dc:c8:8b:44:68:42:fc:fe:5b:07:c7:6a:c4:
35:98:3e:58:be:8c:12:8f:bf:f9:e4:4c:8d:cb:8f:
94:cf:86:79:60:51:90:83:e0:8f:40:09:ce:ac:4f:
63:11:92:ed:04:15:57:30:9b:ec:7a:82:0f:39:41:
8f:9a:b8:99:0d:c2:da:d5:1d:84:9d:11:b1:f2:3f:
95:3a:31:5f:4d:18:11:03:58:9b:90:80:49:1a:bd:
2f:05:0a:ab:11:32:b3:75:70:d3:e8:78:9e:22:d8:
d5:57:7a:ef:d8:20:48:ce:67:8b:68:00:6b:83:d4:
d9:b6:03:2a:09:52:1d:61:db:98:bc:b7:73:59:8b:
44:3a:29:7c:b6:2b:7c:92:7e:2f:af:ab:06:6c:4d:
1a:a6:92:3b:90:29:3e:c8:b2:e7:61:bb:bf:07:7b:
cc:0a:e7:1d:51:8a:61:6e:0b:14:40:0f:a6:53:67:
14:55:bb:b8:83:16:be:3c:54:af:c0:ce:b4:f5:57:
40:ee:fa:60:f5:40:b2:dd:64:7b:bd:1b:d5:b7:f5:
bd:a7:f8:bd:4b:69:26:1b:28:a0:27:19:2c:a3:c6:
7d:55:cf:a3:3a:83:5d:8c:de:3d:a6:72:c2:41:c3:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D5:F1:32:17:CA:E0:82:BE:8C:CB:30:49:F9:56:BE:19:C3:34:CE
X509v3 Authority Key Identifier:
keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/2EC1CE78CDB611ED8E2C0844C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.56.123.0/24
IPv6:
2001:df6:20c0::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c9:d3:cf:89:5a:ac:b4:4c:03:b2:89:88:ca:58:13:ef:74:
7c:22:55:ff:a6:de:fe:b5:24:ae:99:66:8e:92:43:f4:ca:55:
1d:4c:0c:d0:63:fe:89:a7:6b:bb:38:de:43:80:d7:93:49:22:
73:08:cd:0b:83:94:4e:cf:c3:be:30:5d:16:21:b5:f0:c1:6d:
30:fe:e3:59:26:e2:ba:87:cc:84:76:e9:80:cc:31:57:1f:44:
d4:80:c5:02:45:06:fc:3c:ab:79:27:7c:c0:10:af:1c:4b:92:
76:5b:64:4c:de:95:46:0b:6d:e3:65:ee:08:92:0f:d0:33:3a:
86:70:68:cb:68:62:03:bc:92:64:ca:61:83:e9:d6:57:86:8f:
e3:d2:4c:f0:af:55:af:52:de:cc:55:1b:5a:69:9d:ef:bc:84:
38:9c:41:23:8e:1c:51:97:68:24:57:ae:f2:14:80:96:34:16:
12:f7:70:6b:d9:44:00:59:7a:d1:33:b9:8a:1b:ea:65:56:09:
70:a9:85:a2:d5:f4:b5:f5:ed:45:b7:56:40:de:a2:00:a1:ce:
1a:89:57:c6:28:55:27:6e:a7:27:e2:95:22:d2:55:ac:70:a1:
61:46:d6:24:fa:57:d1:ab:40:cb:08:2f:52:5c:fe:05:b0:a4:
53:6c:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:09 2026 by rpki-client