
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa
File: 4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa (raw, json)
Hash identifier: 5PHbUM/X+Td9kzCJHVRsM26TQZj90GItMYtQ/V/nVug=
Subject key identifier: 11:13:34:F7:CD:C2:7E:91:01:23:18:A9:15:88:4A:CC:45:C8:E3:F8
Certificate issuer: /CN=A915E5DF/serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Certificate serial: 01DB
Authority key identifier: 75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa
Signing time: Thu 03 Sep 2026 03:53:52 +0000
ROA not before: Thu 03 Sep 2026 03:53:52 +0000
ROA not after: Fri 01 Jan 2027 00:00:00 +0000
asID: 152634
IP address blocks: 202.36.116.0/23 maxlen: 24
2001:df3:88c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:38:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E5DF, serialNumber=75D31969569B5C0DF0DA53B3D931366334721082
Validity
Not Before: Sep 3 03:53:52 2026 GMT
Not After : Jan 1 00:00:00 2027 GMT
Subject: CN=6a98ef4f-56a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:3f:3d:d6:55:15:91:6b:15:c6:ff:1e:33:
a6:ca:1a:e1:a0:f0:66:54:53:00:a1:75:c0:59:c9:
24:ca:2f:83:73:a2:d8:94:34:0b:71:23:39:92:0d:
86:a0:71:8f:38:69:cc:5a:70:10:9d:bf:e8:50:79:
c8:ee:86:16:85:6c:42:49:fb:ac:61:ce:a2:c8:2f:
5d:d6:e4:27:00:bb:18:8b:8e:3c:d1:f3:db:0b:f8:
4f:57:5f:e3:55:c2:79:89:02:f9:f2:61:2c:ff:f6:
0b:19:fb:7d:59:04:94:cd:a2:04:7c:3a:33:87:dc:
84:3f:17:8c:b5:20:da:c7:83:bf:28:82:8e:7a:41:
24:cb:38:94:df:d3:89:b6:c1:b0:37:ad:73:f3:7d:
10:09:a1:5c:57:d1:00:71:02:47:10:78:57:dd:aa:
92:80:c1:55:50:2e:30:e3:02:4d:f1:9b:c5:3a:e1:
2f:dd:66:e0:01:78:0f:1d:22:89:71:c5:bf:e7:c3:
43:a7:bb:ab:dc:08:6f:27:c3:aa:57:38:ea:32:53:
73:62:e2:9e:9a:23:5a:06:a2:8b:7e:2e:2b:3d:bc:
87:4c:05:e1:1c:51:b1:e9:f3:fc:ad:6f:e9:9b:09:
96:95:f6:6c:93:7a:2d:78:79:52:4c:c2:28:16:47:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:34:F7:CD:C2:7E:91:01:23:18:A9:15:88:4A:CC:45:C8:E3:F8
X509v3 Authority Key Identifier:
keyid:75:D3:19:69:56:9B:5C:0D:F0:DA:53:B3:D9:31:36:63:34:72:10:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/ddMZaVabXA3w2lOz2TE2YzRyEII.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddMZaVabXA3w2lOz2TE2YzRyEII.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E5DF/CBEFCD9CE67111EEB7BCBE29C4F9AE02/4483A1DE5EBD11EFAEB0D27FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.116.0/23
IPv6:
2001:df3:88c0::/48
Signature Algorithm: sha256WithRSAEncryption
17:59:cb:ed:35:bc:41:f6:b8:0a:e9:ef:da:69:9c:54:d6:ca:
da:94:89:9d:37:79:47:53:fd:0f:0e:02:fe:b5:60:2e:99:12:
23:42:06:97:10:f3:f8:ce:e7:09:32:04:9a:4b:25:6d:9e:e7:
fb:1f:3c:44:e4:f1:06:50:81:f0:08:c6:e4:f9:6a:1a:3a:2a:
4a:91:70:d0:21:f5:7e:7f:c0:98:66:e3:00:cd:77:a6:9d:87:
b7:28:25:f2:c2:ac:3e:53:8d:53:09:6c:db:37:c1:04:b0:ba:
da:82:c5:b0:96:6b:f0:56:98:18:d3:d3:6d:bc:15:69:02:3b:
b0:a1:d1:27:d9:7c:48:a4:d7:26:5d:5d:e4:fe:5d:d0:2f:4a:
f5:5b:9f:3b:76:66:13:d5:7c:b6:1c:95:f4:94:e3:86:ed:9d:
eb:d6:6d:ab:56:b5:64:da:85:34:b7:62:f0:e9:01:46:43:28:
c1:e1:4f:13:5f:4a:07:d2:ed:5d:96:1e:6b:51:88:b3:b6:a7:
f0:22:3d:f8:87:8b:12:76:eb:94:ca:3d:45:bc:b9:a2:51:1c:
c6:4f:33:77:92:b7:5e:3f:9c:dd:f0:e2:3b:c4:77:c0:f7:65:
3e:6c:bb:ae:38:0d:c8:b5:a4:33:76:83:b5:f3:69:3b:e9:1b:
68:75:bb:a6
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU1REYxMTAvBgNVBAUTKDc1RDMxOTY5NTY5QjVDMERGMERBNTNCM0Q5MzEzNjYz
MzQ3MjEwODIwHhcNMjYwOTAzMDM1MzUyWhcNMjcwMTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ZWY0Zi01NmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2xQ/PdZVFZFrFcb/HjOmyhrhoPBmVFMAoXXAWckkyi+Dc6LYlDQLcSM5kg2G
oHGPOGnMWnAQnb/oUHnI7oYWhWxCSfusYc6iyC9d1uQnALsYi4480fPbC/hPV1/j
VcJ5iQL58mEs//YLGft9WQSUzaIEfDozh9yEPxeMtSDax4O/KIKOekEkyziU39OJ
tsGwN61z830QCaFcV9EAcQJHEHhX3aqSgMFVUC4w4wJN8ZvFOuEv3WbgAXgPHSKJ
ccW/58NDp7ur3AhvJ8OqVzjqMlNzYuKemiNaBqKLfi4rPbyHTAXhHFGx6fP8rW/p
mwmWlfZsk3oteHlSTMIoFkffjwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBETNPfN
wn6RASMYqRWISsxFyOP4MB8GA1UdIwQYMBaAFHXTGWlWm1wN8NpTs9kxNmM0chCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTVERi9DQkVGQ0Q5Q0U2
NzExMUVFQjdCQ0JFMjlDNEY5QUUwMi9kZE1aYVZhYlhBM3cybE96MlRFMll6UnlF
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RkTVphVmFiWEEzdzJsT3oyVEUyWXpSeUVJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUU1REYvQ0JFRkNEOUNFNjcxMTFFRUI3QkNCRTI5QzRGOUFFMDIvNDQ4M0ExREU1
RUJEMTFFRkFFQjBEMjdGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQByiR0MA8EAgACMAkDBwAgAQ3ziMAwDQYJKoZIhvcNAQELBQADggEB
ABdZy+01vEH2uArp79ppnFTWytqUiZ03eUdT/Q8OAv61YC6ZEiNCBpcQ8/jO5wky
BJpLJW2e5/sfPETk8QZQgfAIxuT5aho6KkqRcNAh9X5/wJhm4wDNd6adh7coJfLC
rD5TjVMJbNs3wQSwutqCxbCWa/BWmBjT0228FWkCO7Ch0SfZfEik1yZdXeT+XdAv
SvVbnzt2ZhPVfLYclfSU44btnevWbatWtWTahTS3YvDpAUZDKMHhTxNfSgfS7V2W
HmtRiLO2p/AiPfiHixJ265TKPUW8uaJRHMZPM3eSt14/nN3w4jvEd8D3ZT5su644
Dci1pDN2g7XzaTvpG2h1u6Y=
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:11:06 2026 by rpki-client