
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/B36E0BFAB8C511EE9C927072C4F9AE02.roa
File: B36E0BFAB8C511EE9C927072C4F9AE02.roa (raw, json)
Hash identifier: wA+tczckO/zrn5MH2HsQzjCssey/VJhgGI0ABCWGh8M=
Subject key identifier: DA:CB:A9:68:8A:17:D9:EC:03:15:9F:08:2D:09:E7:B8:2C:51:49:72
Certificate issuer: /CN=A9168946/serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Certificate serial: 01C7
Authority key identifier: 91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/B36E0BFAB8C511EE9C927072C4F9AE02.roa
Signing time: Sat 13 Jun 2026 04:33:18 +0000
ROA not before: Sat 13 Jun 2026 04:33:18 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 131239
IP address blocks: 202.14.82.0/23 maxlen: 24
202.14.84.0/24 maxlen: 24
202.27.72.0/22 maxlen: 24
202.36.197.0/24 maxlen: 24
202.36.246.0/24 maxlen: 24
202.36.248.0/22 maxlen: 24
202.36.252.0/23 maxlen: 24
202.36.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168946, serialNumber=918CB67A0262238DEF78FF288A45D9281F95D2EB
Validity
Not Before: Jun 13 04:33:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2cdd8e-841b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:d3:71:70:cf:cc:d8:49:a1:bd:2f:93:b0:
51:8d:a8:6f:c7:34:c1:df:86:12:64:db:dd:ca:02:
3b:cc:2b:7c:79:f6:78:5a:51:d0:d7:d5:61:f5:d6:
fe:6d:28:a3:6c:82:7f:6a:9d:92:b5:60:8e:8b:71:
74:ec:f9:18:02:98:24:4d:f7:62:d4:dd:f9:76:ec:
c9:bc:95:e4:d1:bb:38:3f:e4:6c:10:ac:9d:dd:0c:
43:7a:77:15:78:d7:7a:12:3a:ee:36:9f:b3:a7:a3:
15:89:41:a5:d4:1e:b0:d8:23:35:76:d5:af:99:a1:
30:bc:38:10:b7:ec:9b:a7:b1:78:4c:da:21:3b:4e:
c2:62:02:94:4c:91:48:43:ed:78:22:02:a4:93:85:
07:f3:88:56:70:db:8f:b5:6d:ed:26:48:d6:6a:0f:
ef:8c:4d:78:b8:b0:62:9e:86:24:d4:3c:57:cb:9e:
9a:b6:d7:c8:2f:16:08:e5:cb:21:d6:44:84:c6:90:
98:ef:97:23:06:9f:55:e8:18:0f:44:30:d2:c5:ba:
76:9f:4a:d9:bd:0c:67:b9:5a:d9:ec:56:80:21:e7:
e6:62:32:c3:d8:c1:23:de:9d:27:8f:9f:78:2d:e0:
ad:79:07:42:e1:22:6c:76:dd:ce:27:4b:74:d8:a6:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CB:A9:68:8A:17:D9:EC:03:15:9F:08:2D:09:E7:B8:2C:51:49:72
X509v3 Authority Key Identifier:
keyid:91:8C:B6:7A:02:62:23:8D:EF:78:FF:28:8A:45:D9:28:1F:95:D2:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/kYy2egJiI43veP8oikXZKB-V0us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kYy2egJiI43veP8oikXZKB-V0us.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168946/C4006A88B8C211EEB5F72B6DC4F9AE02/B36E0BFAB8C511EE9C927072C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.14.82.0-202.14.84.255
202.27.72.0/22
202.36.197.0/24
202.36.246.0/24
202.36.248.0-202.36.254.255
Signature Algorithm: sha256WithRSAEncryption
2c:94:28:05:32:b2:96:57:93:fa:b9:e7:9f:51:18:e0:41:d4:
84:d7:50:fb:be:d5:48:8c:c5:61:19:65:bb:cf:1d:8d:8c:77:
d0:e4:1c:cc:98:a9:1a:02:2d:fc:ff:3b:29:90:57:0f:7a:e6:
74:9f:0f:fc:26:bb:67:f6:e1:69:1c:9a:12:91:f5:0f:b2:0b:
2d:b2:fe:2e:93:f8:11:bf:64:f8:82:2a:0c:c8:41:2f:70:9a:
c0:6a:6c:cf:a8:52:d1:19:9d:ae:b6:0f:7a:e3:e0:77:62:1a:
9e:78:a0:dc:33:b2:7f:05:4b:c2:40:97:af:7c:1c:a0:d5:38:
35:e0:f1:e0:52:af:b5:06:ea:c0:08:c0:20:8e:f3:db:87:c3:
72:bb:93:d3:1a:18:52:a8:5e:4c:06:66:3b:58:fa:22:4e:33:
55:ef:83:96:09:73:3b:fe:a6:85:a3:e5:da:f9:74:6a:be:c6:
d2:a8:73:b5:3c:a4:97:3d:d2:1b:96:ef:9b:61:ba:f8:97:79:
74:cc:19:e6:1f:a8:ca:f9:ca:3e:6b:06:5f:ef:04:70:eb:75:
25:77:5b:20:4f:3e:c3:e5:2d:f7:03:01:21:cb:7d:16:af:ad:
60:cf:03:b8:a1:7f:19:ad:8d:30:1a:78:d1:cd:c0:ab:92:cc:
9f:e7:5a:d7
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5NDYxMTAvBgNVBAUTKDkxOENCNjdBMDI2MjIzOERFRjc4RkYyODhBNDVEOTI4
MUY5NUQyRUIwHhcNMjYwNjEzMDQzMzE4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJjZGQ4ZS04NDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpTTcXDPzNhJob0vk7BRjahvxzTB34YSZNvdygI7zCt8efZ4WlHQ19Vh9db+
bSijbIJ/ap2StWCOi3F07PkYApgkTfdi1N35duzJvJXk0bs4P+RsEKyd3QxDencV
eNd6EjruNp+zp6MViUGl1B6w2CM1dtWvmaEwvDgQt+ybp7F4TNohO07CYgKUTJFI
Q+14IgKkk4UH84hWcNuPtW3tJkjWag/vjE14uLBinoYk1DxXy56attfILxYI5csh
1kSExpCY75cjBp9V6BgPRDDSxbp2n0rZvQxnuVrZ7FaAIefmYjLD2MEj3p0nj594
LeCteQdC4SJsdt3OJ0t02KaMhwIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFNrLqWiK
F9nsAxWfCC0J57gsUUlyMB8GA1UdIwQYMBaAFJGMtnoCYiON73j/KIpF2SgfldLr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk0Ni9DNDAwNkE4OEI4
QzIxMUVFQjVGNzJCNkRDNEY5QUUwMi9rWXkyZWdKaUk0M3ZlUDhvaWtYWktCLVYw
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tZeTJlZ0ppSTQzdmVQOG9pa1haS0ItVjB1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg5NDYvQzQwMDZBODhCOEMyMTFFRUI1RjcyQjZEQzRGOUFFMDIvQjM2RTBCRkFC
OEM1MTFFRTlDOTI3MDcyQzRGOUFFMDIucm9hMEcGCCsGAQUFBwEHAQH/BDgwNjA0
BAIAATAuMAwDBAHKDlIDBADKDlQDBALKG0gDBADKJMUDBADKJPYwDAMEA8ok+AME
AMok/jANBgkqhkiG9w0BAQsFAAOCAQEALJQoBTKylleT+rnnn1EY4EHUhNdQ+77V
SIzFYRllu88djYx30OQczJipGgIt/P87KZBXD3rmdJ8P/Ca7Z/bhaRyaEpH1D7IL
LbL+LpP4Eb9k+IIqDMhBL3CawGpsz6hS0RmdrrYPeuPgd2Iannig3DOyfwVLwkCX
r3wcoNU4NeDx4FKvtQbqwAjAII7z24fDcruT0xoYUqheTAZmO1j6Ik4zVe+Dlglz
O/6mhaPl2vl0ar7G0qhztTyklz3SG5bvm2G6+Jd5dMwZ5h+oyvnKPmsGX+8EcOt1
JXdbIE8+w+Ut9wMBIct9Fq+tYM8DuKF/Ga2NMBp40c3Aq5LMn+da1w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:49 2026 by rpki-client