
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/A8306EA22D6911EC9F557316C4F9AE02.roa
File: A8306EA22D6911EC9F557316C4F9AE02.roa (raw, json)
Hash identifier: NW6acT7m8L/bVVZ3ua/PyTSR1cibHNywJ2Cdir/gkAY=
Subject key identifier: 58:BC:29:1D:2A:2E:7B:C2:2A:0B:B0:57:1A:BB:8B:24:D1:90:DB:68
Certificate issuer: /CN=A9180323/serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF
Certificate serial: 351E
Authority key identifier: D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/A8306EA22D6911EC9F557316C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:23:26 +0000
ROA not before: Thu 04 Sep 2025 14:50:51 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 38325
IP address blocks: 113.20.144.0/21 maxlen: 22
113.20.144.0/24 maxlen: 24
113.20.145.0/24 maxlen: 24
113.20.146.0/24 maxlen: 24
113.20.147.0/24 maxlen: 24
113.20.148.0/24 maxlen: 24
113.20.149.0/24 maxlen: 24
113.20.150.0/24 maxlen: 24
113.20.151.0/24 maxlen: 24
122.252.24.0/21 maxlen: 22
122.252.24.0/24 maxlen: 24
122.252.25.0/24 maxlen: 24
122.252.26.0/24 maxlen: 24
122.252.27.0/24 maxlen: 24
122.252.28.0/24 maxlen: 24
122.252.29.0/24 maxlen: 24
122.252.30.0/24 maxlen: 24
122.252.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl
rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13598 (0x351e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180323, serialNumber=D70E8EF80F3587EF902896D8B30DCB0B6EB339AF
Validity
Not Before: Sep 4 14:50:51 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a421ae-ebaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:ae:06:47:9a:38:ea:af:63:6f:e4:38:97:
93:01:30:79:bf:ba:9c:4b:5a:6a:00:f8:69:66:d8:
3c:dc:ad:e2:7e:b8:75:26:87:e2:16:f6:ad:de:71:
6f:83:3c:1f:f9:c0:79:20:db:df:b1:f9:b2:fc:dd:
da:ad:80:25:87:02:07:82:91:9d:29:63:46:4a:22:
df:c7:67:61:df:67:ba:f5:be:c5:ee:c7:cf:f9:59:
2b:d6:e3:7b:f6:ba:83:e4:18:47:97:6f:71:13:39:
06:6c:5e:9a:e4:45:65:ed:be:73:8d:2d:37:c0:53:
5a:bb:39:34:3f:f1:8f:6e:d4:3b:ea:ad:18:6e:27:
02:2f:41:c3:df:e4:fd:f9:26:7d:f4:a6:33:fa:60:
17:47:0e:2e:99:c3:06:65:5a:27:2d:74:cf:dc:94:
e8:b9:56:f4:1a:8d:f8:27:98:ff:ac:bc:3b:05:df:
7f:51:e2:cc:39:05:cc:ec:46:00:9c:5f:77:0d:b1:
61:b2:ca:c3:ed:c4:e8:eb:24:52:b4:af:e7:ea:1a:
64:a6:ae:75:f1:2e:27:82:52:71:43:f6:eb:31:10:
6d:ad:21:70:67:ce:d9:22:f1:2f:33:3e:f1:a5:d6:
1b:4e:fc:b8:0d:1a:08:78:27:af:b8:c3:91:a0:b4:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BC:29:1D:2A:2E:7B:C2:2A:0B:B0:57:1A:BB:8B:24:D1:90:DB:68
X509v3 Authority Key Identifier:
keyid:D7:0E:8E:F8:0F:35:87:EF:90:28:96:D8:B3:0D:CB:0B:6E:B3:39:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/1w6O-A81h--QKJbYsw3LC26zOa8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w6O-A81h--QKJbYsw3LC26zOa8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180323/4EB9426C1D9311E2BF78D8F608B02CD2/A8306EA22D6911EC9F557316C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
113.20.144.0/21
122.252.24.0/21
Signature Algorithm: sha256WithRSAEncryption
91:8c:7e:30:7d:11:03:75:67:c5:67:67:ff:d8:26:64:f6:f2:
a6:c2:09:38:80:81:1d:49:3f:e0:43:de:f2:5d:65:81:29:6e:
44:07:91:9d:c8:63:b2:9e:64:8f:47:3a:86:72:e9:94:e0:a5:
f9:89:84:07:a3:cd:b5:59:78:04:6a:ee:2f:82:e8:4b:46:45:
cf:00:58:49:c1:1d:42:19:bb:8b:88:2d:5b:ed:78:01:b3:0a:
90:e4:a4:35:40:cd:18:e8:fc:aa:49:9c:79:62:5a:bf:f2:fc:
83:66:f5:c3:7d:6c:1b:b9:6c:1d:b1:f3:57:98:52:8a:fb:d0:
ac:a8:6c:aa:d2:64:86:47:84:f5:40:fb:73:af:41:fd:16:31:
c4:2f:6a:47:0c:f6:16:52:b0:90:fa:0e:69:2a:69:22:18:40:
d4:f2:f0:40:43:5e:1e:21:4a:0f:df:99:db:fa:05:6d:fd:12:
bf:f7:3c:db:ff:3d:d6:ef:38:e7:e1:4b:e3:3a:5a:3e:af:8d:
78:28:46:d0:0e:c6:7c:17:c8:a2:21:b9:4c:7c:17:30:57:b6:
7d:63:d8:3c:28:21:80:57:ef:6c:45:d3:c0:a0:54:7c:d4:f4:
ed:31:f5:af:2f:c0:2f:50:0c:84:cb:e0:4f:25:ed:dc:72:8a:
42:4c:5d:f9
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICNR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzMjMxMTAvBgNVBAUTKEQ3MEU4RUY4MEYzNTg3RUY5MDI4OTZEOEIzMERDQjBC
NkVCMzM5QUYwHhcNMjUwOTA0MTQ1MDUxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjFhZS1lYmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaCuBkeaOOqvY2/kOJeTATB5v7qcS1pqAPhpZtg83K3ifrh1JofiFvat3nFv
gzwf+cB5INvfsfmy/N3arYAlhwIHgpGdKWNGSiLfx2dh32e69b7F7sfP+Vkr1uN7
9rqD5BhHl29xEzkGbF6a5EVl7b5zjS03wFNauzk0P/GPbtQ76q0YbicCL0HD3+T9
+SZ99KYz+mAXRw4umcMGZVonLXTP3JTouVb0Go34J5j/rLw7Bd9/UeLMOQXM7EYA
nF93DbFhssrD7cTo6yRStK/n6hpkpq518S4nglJxQ/brMRBtrSFwZ87ZIvEvMz7x
pdYbTvy4DRoIeCevuMORoLQ39wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFi8KR0q
LnvCKguwVxq7iyTRkNtoMB8GA1UdIwQYMBaAFNcOjvgPNYfvkCiW2LMNywtuszmv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMyMy80RUI5NDI2QzFE
OTMxMUUyQkY3OEQ4RjYwOEIwMkNEMi8xdzZPLUE4MWgtLVFLSmJZc3czTEMyNnpP
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF3Nk8tQTgxaC0tUUtKYllzdzNMQzI2ek9hOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzMjMvNEVCOTQyNkMxRDkzMTFFMkJGNzhEOEY2MDhCMDJDRDIvQTgzMDZFQTIy
RDY5MTFFQzlGNTU3MzE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQDcRSQAwQDevwYMA0GCSqGSIb3DQEBCwUAA4IBAQCRjH4wfREDdWfF
Z2f/2CZk9vKmwgk4gIEdST/gQ97yXWWBKW5EB5GdyGOynmSPRzqGcumU4KX5iYQH
o821WXgEau4vguhLRkXPAFhJwR1CGbuLiC1b7XgBswqQ5KQ1QM0Y6PyqSZx5Ylq/
8vyDZvXDfWwbuWwdsfNXmFKK+9CsqGyq0mSGR4T1QPtzr0H9FjHEL2pHDPYWUrCQ
+g5pKmkiGEDU8vBAQ14eIUoP35nb+gVt/RK/9zzb/z3W7zjn4UvjOlo+r414KEbQ
DsZ8F8iiIblMfBcwV7Z9Y9g8KCGAV+9sRdPAoFR81PTtMfWvL8AvUAyEy+BPJe3c
copCTF35
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:42 2026 by rpki-client