
$ rpki-client -vvf rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
File: 593888C40AB811EE97CC7A32C4F9AE02.roa (raw, json)
Hash identifier: IoJk5p0IF02OsjQ9zljMSjBw2r0WRTNtGydOq25HYLM=
Subject key identifier: 65:DC:78:90:5F:D4:1F:EF:09:FD:D9:83:F7:28:E1:9D:80:3B:92:16
Certificate issuer: /CN=A916423B/serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Certificate serial: 01FE
Authority key identifier: F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:36:48 +0000
ROA not before: Wed 19 Mar 2025 03:19:50 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 53871
IP address blocks: 203.28.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:25:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916423B, serialNumber=F80A17E18E3F3A12F75233672E8AC67F80E52FDF
Validity
Not Before: Mar 19 03:19:50 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3de80-26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:42:ba:37:69:cd:da:ee:7b:7a:90:30:bf:
ac:59:38:80:55:1f:89:8b:f6:26:ad:42:50:26:74:
af:1d:08:c4:f2:b3:b5:0c:72:1c:f2:da:95:8a:9d:
3e:67:5d:4c:86:dd:fb:a8:0f:fc:f9:d4:d9:0f:88:
68:24:ed:2c:c2:83:a0:85:e7:e5:92:b5:e3:35:5b:
1a:fe:54:f1:e9:29:c9:c0:e7:11:09:53:b5:9f:c8:
d4:b8:4f:60:77:5a:bf:91:8e:87:8e:c9:59:ee:99:
1c:0f:dc:a9:9d:0e:56:72:80:b6:0a:79:99:db:26:
22:2b:e3:6d:59:fc:b0:7b:a1:09:7b:c6:ec:30:fb:
af:c5:e7:dd:08:d0:9f:0e:e3:5e:f1:33:ef:d9:0e:
9b:04:06:6c:e0:22:45:15:1b:4c:54:0b:0e:cc:8a:
12:53:c1:d0:aa:27:87:ad:97:ab:67:f8:ea:f0:56:
52:dd:ab:45:85:45:17:c4:77:15:b5:b8:4a:38:00:
68:95:04:8d:33:e1:6d:12:18:79:e4:ee:9a:a8:02:
b4:5c:9e:45:44:6d:0d:a8:6a:7e:4e:a2:57:01:0d:
db:0f:20:6d:44:14:59:11:ed:93:22:c0:06:de:ed:
d2:f4:45:ea:54:73:36:19:30:38:2c:a4:0e:7e:bd:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:78:90:5F:D4:1F:EF:09:FD:D9:83:F7:28:E1:9D:80:3B:92:16
X509v3 Authority Key Identifier:
keyid:F8:0A:17:E1:8E:3F:3A:12:F7:52:33:67:2E:8A:C6:7F:80:E5:2F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/-AoX4Y4_OhL3UjNnLorGf4DlL98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AoX4Y4_OhL3UjNnLorGf4DlL98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916423B/DC49A5FA0AB211EE80B35537C4F9AE02/593888C40AB811EE97CC7A32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.155.0/24
Signature Algorithm: sha256WithRSAEncryption
99:08:84:fd:66:db:fe:83:27:34:e0:86:b4:b9:51:2d:dd:2c:
ce:6f:fa:6f:c7:0f:08:ec:99:b2:56:6e:cf:f4:64:d9:0d:73:
ad:9e:86:96:c3:31:a3:c9:ac:9b:7f:69:a8:1d:d3:69:c2:06:
23:9a:5f:68:ae:9b:24:42:00:57:b9:fc:a9:5e:71:d3:a8:4a:
a6:de:c5:3f:4a:bc:f8:55:18:95:b5:59:ae:3c:86:40:69:16:
64:76:37:5a:58:a4:c5:d9:03:0d:5d:ea:ec:13:97:e1:aa:eb:
69:9d:6c:6a:7d:eb:8f:d4:be:01:a3:75:1b:b7:78:5d:7c:6a:
3b:95:f1:f1:ba:86:b3:41:ed:0b:47:6b:86:50:b4:8a:ed:00:
20:1a:0d:a8:1f:7d:cc:7b:95:97:3c:56:f7:45:e2:06:ba:0e:
dd:f4:c8:4e:cf:06:ca:a9:e6:62:9e:67:cf:5c:97:1a:ce:76:
f1:54:5f:1d:fe:ea:69:6d:c6:c4:2b:05:e7:10:f4:99:b9:8c:
f0:cd:1f:fb:5c:30:79:ba:8d:88:21:ff:d9:e3:00:ca:af:36:
60:ca:26:d3:88:c6:b8:7c:22:9b:24:65:29:1c:96:75:d5:d2:
dd:b6:86:42:d2:9d:e7:c7:20:be:47:89:75:d4:47:df:94:8f:
ce:10:f8:f7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQyM0IxMTAvBgNVBAUTKEY4MEExN0UxOEUzRjNBMTJGNzUyMzM2NzJFOEFDNjdG
ODBFNTJGREYwHhcNMjUwMzE5MDMxOTUwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZGU4MC0yNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqFCujdpzdrue3qQML+sWTiAVR+Ji/YmrUJQJnSvHQjE8rO1DHIc8tqVip0+
Z11Mht37qA/8+dTZD4hoJO0swoOgheflkrXjNVsa/lTx6SnJwOcRCVO1n8jUuE9g
d1q/kY6HjslZ7pkcD9ypnQ5WcoC2CnmZ2yYiK+NtWfywe6EJe8bsMPuvxefdCNCf
DuNe8TPv2Q6bBAZs4CJFFRtMVAsOzIoSU8HQqieHrZerZ/jq8FZS3atFhUUXxHcV
tbhKOABolQSNM+FtEhh55O6aqAK0XJ5FRG0NqGp+TqJXAQ3bDyBtRBRZEe2TIsAG
3u3S9EXqVHM2GTA4LKQOfr029QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGXceJBf
1B/vCf3Zg/co4Z2AO5IWMB8GA1UdIwQYMBaAFPgKF+GOPzoS91IzZy6Kxn+A5S/f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDIzQi9EQzQ5QTVGQTBB
QjIxMUVFODBCMzU1MzdDNEY5QUUwMi8tQW9YNFk0X09oTDNVak5uTG9yR2Y0RGxM
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1Bb1g0WTRfT2hMM1VqTm5Mb3JHZjREbEw5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjQyM0IvREM0OUE1RkEwQUIyMTFFRTgwQjM1NTM3QzRGOUFFMDIvNTkzODg4QzQw
QUI4MTFFRTk3Q0M3QTMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyxybMA0GCSqGSIb3DQEBCwUAA4IBAQCZCIT9Ztv+gyc04Ia0uVEt
3SzOb/pvxw8I7JmyVm7P9GTZDXOtnoaWwzGjyaybf2moHdNpwgYjml9orpskQgBX
ufypXnHTqEqm3sU/Srz4VRiVtVmuPIZAaRZkdjdaWKTF2QMNXersE5fhqutpnWxq
feuP1L4Bo3Ubt3hdfGo7lfHxuoazQe0LR2uGULSK7QAgGg2oH33Me5WXPFb3ReIG
ug7d9MhOzwbKqeZinmfPXJcaznbxVF8d/uppbcbEKwXnEPSZuYzwzR/7XDB5uo2I
If/Z4wDKrzZgyibTiMa4fCKbJGUpHJZ11dLdtoZC0p3nxyC+R4l11EfflI/OEPj3
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:53 2026 by rpki-client