
$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa
File: 59018DEE340611ED9C72786AC4F9AE02.roa (raw, json)
Hash identifier: dRmM458Do9mbY5YvzBDoYmvRNoo0+2FxzuYL5tSOm0A=
Subject key identifier: 56:69:51:D2:BE:50:54:6A:8E:0D:CE:76:8E:12:A1:95:B2:4B:A9:A4
Certificate issuer: /CN=A9183B33/serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Certificate serial: 06DB
Authority key identifier: 51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:45:26 +0000
ROA not before: Tue 18 Mar 2025 22:43:58 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 9408
IP address blocks: 203.0.156.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1755 (0x6db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183B33, serialNumber=51AEBA23FB745A553A5E4996DF1C8173473F1798
Validity
Not Before: Mar 18 22:43:58 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fca6-9a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:2a:ac:87:51:17:32:83:51:c9:ce:7f:0f:
9e:9e:30:20:78:ff:e7:4a:1a:90:d7:9f:28:09:7c:
ed:ad:15:6c:4b:34:90:3b:6c:36:3d:5c:63:c8:76:
4d:85:67:c2:56:80:57:ad:de:44:6b:34:ea:9e:55:
30:80:e9:a8:72:dc:45:e4:a5:41:e6:98:4c:b5:88:
86:f3:85:5b:fa:0c:6e:3d:40:61:46:58:3c:ea:46:
a2:79:78:b1:99:66:c6:3a:d2:f2:a9:f1:b9:b8:cc:
a2:5b:63:29:fa:f7:cc:eb:69:61:e8:fa:90:e1:03:
0e:1d:cc:47:04:75:7e:e9:fb:e0:75:57:85:73:70:
b2:c9:51:9c:b8:5a:d0:cf:00:12:26:90:54:20:0c:
eb:ac:c7:3f:78:fe:9c:e1:de:84:32:02:4a:7d:e5:
16:e1:87:24:ce:44:c6:63:f6:29:4a:24:b1:48:ab:
6d:15:46:6c:29:ef:38:2f:20:97:10:f1:01:36:e1:
d2:67:b7:31:2c:15:db:3e:c3:dd:25:52:9e:cb:c8:
df:90:ee:e0:54:e7:3a:7b:a6:05:ad:25:d5:81:ff:
9e:9d:1f:48:28:e7:aa:aa:7a:32:2a:dd:e4:28:a1:
fe:fe:dc:bf:c6:8e:60:a5:93:d6:2d:d1:35:a2:2a:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:51:D2:BE:50:54:6A:8E:0D:CE:76:8E:12:A1:95:B2:4B:A9:A4
X509v3 Authority Key Identifier:
keyid:51:AE:BA:23:FB:74:5A:55:3A:5E:49:96:DF:1C:81:73:47:3F:17:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/Ua66I_t0WlU6XkmW3xyBc0c_F5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ua66I_t0WlU6XkmW3xyBc0c_F5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B33/CD35DB1A912411EB9B72903AC4F9AE02/59018DEE340611ED9C72786AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.0.156.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:66:ea:aa:e9:b4:b8:36:52:51:38:28:9b:e4:3f:4f:22:39:
e9:84:e6:b8:d8:b1:61:8a:08:89:72:c7:e6:66:80:74:4d:61:
e7:81:e8:0a:d1:ab:d1:fa:e8:b4:31:e9:f8:0a:16:d0:1f:dc:
3d:86:8a:58:fe:44:e7:11:3c:5f:4a:61:d7:af:d2:87:32:4f:
14:4e:40:dd:aa:48:26:d7:36:a9:a2:4a:07:88:6c:26:17:f7:
7e:60:62:bb:47:1d:07:75:26:d7:b2:80:b8:99:a4:62:1d:d1:
c0:41:80:3c:51:bd:87:65:80:a5:d2:62:7d:fc:e7:59:0c:81:
b5:50:15:14:d9:54:7c:bb:ae:ae:f7:17:bd:18:73:b5:0f:53:
d1:33:a0:10:32:40:d0:f8:01:04:20:87:a5:ef:f5:34:05:b2:
da:ac:32:04:e3:f2:04:4b:05:af:19:5d:0f:6e:a4:d7:2f:30:
3f:e9:55:c1:2a:d3:3b:a8:9b:54:ca:7b:4c:a1:33:91:56:9c:
36:25:61:18:2e:d6:6e:87:ee:6b:70:09:a0:c5:6b:c0:c6:d4:
6a:40:f8:5a:d4:66:fa:c2:63:32:06:db:f5:ea:0f:36:7d:0f:
74:3a:ec:12:e1:4d:6f:52:83:7d:d4:61:24:b5:7f:22:8e:a6:
12:bb:da:29
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNCMzMxMTAvBgNVBAUTKDUxQUVCQTIzRkI3NDVBNTUzQTVFNDk5NkRGMUM4MTcz
NDczRjE3OTgwHhcNMjUwMzE4MjI0MzU4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmNhNi05YTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmSEqrIdRFzKDUcnOfw+enjAgeP/nShqQ158oCXztrRVsSzSQO2w2PVxjyHZN
hWfCVoBXrd5EazTqnlUwgOmoctxF5KVB5phMtYiG84Vb+gxuPUBhRlg86kaieXix
mWbGOtLyqfG5uMyiW2Mp+vfM62lh6PqQ4QMOHcxHBHV+6fvgdVeFc3CyyVGcuFrQ
zwASJpBUIAzrrMc/eP6c4d6EMgJKfeUW4YckzkTGY/YpSiSxSKttFUZsKe84LyCX
EPEBNuHSZ7cxLBXbPsPdJVKey8jfkO7gVOc6e6YFrSXVgf+enR9IKOeqqnoyKt3k
KKH+/ty/xo5gpZPWLdE1oip49wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFZpUdK+
UFRqjg3Odo4SoZWyS6mkMB8GA1UdIwQYMBaAFFGuuiP7dFpVOl5Jlt8cgXNHPxeY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0IzMy9DRDM1REIxQTkx
MjQxMUVCOUI3MjkwM0FDNEY5QUUwMi9VYTY2SV90MFdsVTZYa21XM3h5QmMwY19G
NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VhNjZJX3QwV2xVNlhrbVczeHlCYzBjX0Y1Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODNCMzMvQ0QzNURCMUE5MTI0MTFFQjlCNzI5MDNBQzRGOUFFMDIvNTkwMThERUUz
NDA2MTFFRDlDNzI3ODZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCywCcMA0GCSqGSIb3DQEBCwUAA4IBAQALZuqq6bS4NlJROCib5D9P
IjnphOa42LFhigiJcsfmZoB0TWHngegK0avR+ui0Men4ChbQH9w9hopY/kTnETxf
SmHXr9KHMk8UTkDdqkgm1zapokoHiGwmF/d+YGK7Rx0HdSbXsoC4maRiHdHAQYA8
Ub2HZYCl0mJ9/OdZDIG1UBUU2VR8u66u9xe9GHO1D1PRM6AQMkDQ+AEEIIel7/U0
BbLarDIE4/IESwWvGV0PbqTXLzA/6VXBKtM7qJtUyntMoTORVpw2JWEYLtZuh+5r
cAmgxWvAxtRqQPha1Gb6wmMyBtv16g82fQ90OuwS4U1vUoN91GEktX8ijqYSu9op
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:42 2026 by rpki-client