
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
File: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (raw, json)
Hash identifier: OEgEDUAjf9BTlI+eiF5A69LmOCeN7jWjg18CXPzKJG4=
Subject key identifier: C8:8F:51:BA:BE:87:7C:7A:95:B2:AB:CF:7E:FB:47:AF:B7:DE:4D:85
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 187B
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:19:42 +0000
ROA not before: Thu 08 May 2025 17:17:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9263
IP address blocks: 203.198.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6267 (0x187b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: May 8 17:17:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4752e-56ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:1b:24:8a:43:7f:b1:93:d8:7e:96:b3:de:
41:72:68:85:f7:07:81:b2:41:82:14:b1:a0:9c:5e:
72:8e:b8:ad:b2:85:ee:78:0c:98:a0:c5:37:ad:c8:
5a:08:55:48:ad:38:d0:17:fc:66:a0:d6:a6:37:01:
2e:3a:2f:a2:14:3b:b0:ad:d8:38:48:2e:ef:4e:e9:
fb:24:d3:ec:2b:99:f6:94:8c:bb:e3:00:5c:a9:63:
7c:f8:af:da:d5:8a:ae:ea:9e:64:a1:2f:2b:04:cc:
97:b3:e5:d0:71:c5:dd:75:c5:67:03:60:d6:fd:62:
f8:f0:e8:25:0a:39:5e:96:b0:a7:32:3e:f3:84:54:
b6:07:df:16:98:80:2a:1f:48:9f:19:ce:ef:dd:99:
06:65:ad:f9:e7:65:ea:d3:02:a0:09:d9:91:e1:09:
6f:e6:c6:48:69:11:ae:d1:45:3d:48:b4:3f:09:95:
80:66:7d:54:2e:f1:f6:8e:8c:73:68:7d:17:13:08:
22:25:08:a2:40:46:06:01:a9:c6:2b:f6:ae:5e:40:
ef:e7:f7:46:b2:84:b6:32:f8:6a:70:b7:83:23:30:
13:0f:8e:b8:c8:04:64:4c:90:df:4f:3e:06:09:f6:
71:28:9c:4b:42:cb:82:5f:ae:53:80:ab:15:ae:26:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:51:BA:BE:87:7C:7A:95:B2:AB:CF:7E:FB:47:AF:B7:DE:4D:85
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/4C0C96C6022E11EBA920EA37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.198.168.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:0c:26:3b:27:b2:14:7f:e7:df:aa:aa:1d:c4:89:44:ef:70:
c7:3f:82:b0:ed:ed:bb:a4:30:2b:67:f4:e8:20:98:a0:10:6d:
0b:27:e1:d8:dd:2c:54:53:c6:4f:54:70:92:ae:f5:23:56:ae:
49:5b:05:3b:47:04:d8:ca:ea:fd:a1:20:e8:26:be:33:99:f3:
e6:4a:f3:f1:ac:a1:e0:e9:5b:2b:7b:2e:09:21:4d:f7:e9:ed:
0d:1f:a2:e8:25:bd:c1:63:32:4b:bf:d2:30:c4:2b:2e:cc:48:
80:4e:cc:f6:fe:03:d0:1b:ed:cc:95:13:1e:54:34:61:25:fb:
93:0c:e9:62:5a:91:9d:f9:97:29:9d:fb:ec:b9:dc:cb:f2:3c:
20:59:7d:89:55:d5:3f:c2:a7:35:d1:73:54:93:81:fa:01:03:
ee:21:86:6e:4c:94:b7:5c:d1:86:74:86:f6:5d:31:46:34:1e:
9d:46:0e:d3:f1:de:b5:a6:7d:b5:27:00:88:bd:de:3e:08:c1:
49:46:a3:c6:07:ff:65:8a:47:74:10:6d:d3:84:25:27:3f:ce:
b2:9c:80:9f:7a:22:f5:bc:22:6d:4e:e3:c2:68:c9:fb:ef:e9:
55:9a:29:a1:cc:bf:8a:48:6d:b5:36:67:2a:f5:8c:51:b4:dc:
1a:9b:75:e7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy
RDFBQ0Q4RkQwHhcNMjUwNTA4MTcxNzUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzUyZS01NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4YbJIpDf7GT2H6Ws95BcmiF9weBskGCFLGgnF5yjritsoXueAyYoMU3rcha
CFVIrTjQF/xmoNamNwEuOi+iFDuwrdg4SC7vTun7JNPsK5n2lIy74wBcqWN8+K/a
1Yqu6p5koS8rBMyXs+XQccXddcVnA2DW/WL48OglCjlelrCnMj7zhFS2B98WmIAq
H0ifGc7v3ZkGZa3552Xq0wKgCdmR4Qlv5sZIaRGu0UU9SLQ/CZWAZn1ULvH2joxz
aH0XEwgiJQiiQEYGAanGK/auXkDv5/dGsoS2MvhqcLeDIzATD464yARkTJDfTz4G
CfZxKJxLQsuCX65TgKsVriaO6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMiPUbq+
h3x6lbKrz377R6+33k2FMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG
RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQ5NUYvODQ4Qzg1N0NERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvNEMwQzk2QzYw
MjJFMTFFQkE5MjBFQTM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDy8aoMA0GCSqGSIb3DQEBCwUAA4IBAQCtDCY7J7IUf+ffqqodxIlE
73DHP4Kw7e27pDArZ/ToIJigEG0LJ+HY3SxUU8ZPVHCSrvUjVq5JWwU7RwTYyur9
oSDoJr4zmfPmSvPxrKHg6Vsrey4JIU336e0NH6LoJb3BYzJLv9IwxCsuzEiATsz2
/gPQG+3MlRMeVDRhJfuTDOliWpGd+ZcpnfvsudzL8jwgWX2JVdU/wqc10XNUk4H6
AQPuIYZuTJS3XNGGdIb2XTFGNB6dRg7T8d61pn21JwCIvd4+CMFJRqPGB/9likd0
EG3ThCUnP86ynICfeiL1vCJtTuPCaMn77+lVmimhzL+KSG21Nmcq9YxRtNwam3Xn
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:51 2026 by rpki-client