
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
File: 0396C48E5E7011EDAD328E21C4F9AE02.roa (raw, json)
Hash identifier: aTV22OI3x/KmbZ4Fy6hctkdp9RgbYkty6oOiMs7TFtg=
Subject key identifier: E2:BA:0B:2E:BC:85:08:60:A2:1A:AA:6F:DA:32:EB:13:E3:D7:23:7D
Certificate issuer: /CN=A9191436/serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Certificate serial: 13FF
Authority key identifier: 2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
Signing time: Thu 02 Apr 2026 17:21:12 +0000
ROA not before: Thu 02 Apr 2026 17:21:12 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 55002
IP address blocks: 202.124.46.0/24 maxlen: 24
203.80.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5119 (0x13ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191436, serialNumber=2DA251C11AC68814F527F22E55DE9AC8C57FD66C
Validity
Not Before: Apr 2 17:21:12 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cea588-397c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a1:87:4d:ee:e2:0b:41:ac:54:8b:49:68:f0:
83:df:ae:c6:f5:a3:94:f7:72:70:39:17:7b:3c:3f:
90:67:04:98:5b:a5:43:c1:43:11:16:b3:bf:93:61:
fb:9d:fd:85:91:a9:52:12:f6:69:8c:43:39:0d:ad:
10:9e:e1:e3:5e:c3:72:76:6b:f6:96:ee:56:d2:4d:
55:65:4d:de:7f:63:d0:ed:7d:73:02:8d:6c:4c:d4:
df:f4:24:c3:c3:a7:66:16:79:31:e8:14:05:06:57:
2d:a8:77:6b:4e:93:f3:f0:f4:15:61:bc:61:a8:b1:
ee:ac:64:74:f8:43:21:fc:cb:13:42:88:66:62:5e:
cd:55:fe:2c:c3:1c:6e:19:a3:08:29:11:f4:b2:82:
40:be:6f:21:9f:9c:52:7f:34:3a:0a:ba:84:6c:27:
bd:11:f3:37:fa:4b:ca:f5:04:3e:00:55:2a:e9:e4:
e1:60:16:01:b3:a3:5e:dc:ad:14:d5:1b:61:fd:43:
9c:c1:46:d7:4f:9f:6d:07:f5:07:99:3d:04:f8:93:
ef:c3:91:15:0a:26:a6:00:1a:66:2c:62:3d:9a:38:
e9:41:1e:3f:c5:85:60:04:e3:be:f4:18:a2:0f:07:
4a:7c:4f:e7:97:70:7b:12:68:fb:4a:f9:01:1e:aa:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BA:0B:2E:BC:85:08:60:A2:1A:AA:6F:DA:32:EB:13:E3:D7:23:7D
X509v3 Authority Key Identifier:
keyid:2D:A2:51:C1:1A:C6:88:14:F5:27:F2:2E:55:DE:9A:C8:C5:7F:D6:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/LaJRwRrGiBT1J_IuVd6ayMV_1mw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LaJRwRrGiBT1J_IuVd6ayMV_1mw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/AAB802E8C78C11E8A76CD914C4F9AE02/0396C48E5E7011EDAD328E21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.124.46.0/24
203.80.160.0/21
Signature Algorithm: sha256WithRSAEncryption
65:f6:d0:52:d0:5e:cc:0d:69:27:ae:88:ba:de:e1:88:ee:44:
0b:e4:14:74:9f:35:4a:e0:8e:46:45:da:e6:aa:fb:c7:65:75:
95:a8:37:e4:d0:c1:81:df:91:d3:43:82:61:17:32:2d:5d:1c:
a2:1f:9c:4d:17:95:07:d6:3b:7f:9e:6c:c5:42:2e:a5:36:ac:
fd:f8:21:9d:a1:b2:0e:1b:c7:38:94:23:e2:10:d2:fe:1c:67:
78:ba:35:c2:62:36:0a:db:f6:ca:22:40:b0:5b:d3:8a:55:fc:
f9:c7:af:e3:9c:d0:3a:08:fe:69:f3:c3:ee:f9:68:7a:97:88:
71:64:0a:f9:eb:11:36:26:6c:6c:4e:40:0b:2d:8b:96:cc:17:
a4:26:3f:53:5d:16:84:c9:45:51:33:7d:b2:9c:33:f9:70:3a:
0e:e5:3c:1e:18:55:69:d6:ef:f8:f6:5a:26:5b:6e:63:dc:b8:
0f:b8:66:f2:38:6a:0a:8a:af:ad:60:d4:1b:b1:7e:c4:6c:ee:
37:70:ee:a2:11:17:9b:39:e5:91:71:3e:2f:61:ec:f1:3e:28:
79:46:42:28:27:b0:1b:c7:e3:cd:a4:09:3b:30:2e:2d:a7:f2:
5f:3c:3f:04:08:99:31:22:3c:7a:a5:b9:c6:61:4d:78:f9:58:
84:20:14:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:23:56 2026 by rpki-client