
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C7ADA138F4C011EAA7B25986C4F9AE02.roa
File: C7ADA138F4C011EAA7B25986C4F9AE02.roa (raw, json)
Hash identifier: ZkPeqkCK4GzWM6lROTZZvtSHrWSOnvfHR71wg6XscYk=
Subject key identifier: 56:23:EF:23:74:F3:E1:EC:F0:9F:99:BD:0C:E4:F3:37:BE:FD:BE:F2
Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Certificate serial: 088E
Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C7ADA138F4C011EAA7B25986C4F9AE02.roa
Signing time: Mon 30 Mar 2026 21:27:02 +0000
ROA not before: Mon 30 Mar 2026 21:27:02 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 138527
IP address blocks: 116.204.208.0/24 maxlen: 24
116.204.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190 (0x88e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Validity
Not Before: Mar 30 21:27:02 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69caeaa6-1bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:a3:63:fb:49:cb:38:6f:95:01:57:e4:61:
20:9f:ae:46:25:e2:6c:2c:fd:15:2c:69:4c:5f:14:
2e:98:7e:a8:b8:67:66:1f:68:9c:b5:28:1f:3f:31:
06:77:31:9b:44:fa:13:12:8a:7c:d9:a1:fb:b2:a8:
2c:9c:d0:ec:c0:bb:bd:5e:8b:bb:0c:cb:5e:62:9b:
50:29:36:98:e3:6b:68:0c:dd:6a:9b:21:f8:0d:ee:
09:71:cf:a2:c7:02:51:14:27:06:f7:57:d9:6a:51:
90:3b:1b:9f:44:b1:8d:a9:b9:4e:aa:d5:00:ea:4b:
73:ff:3e:b3:a8:8b:0c:cb:63:f4:5b:1b:fb:7a:45:
c8:dd:ae:9a:5b:86:a7:33:f2:27:49:74:65:b8:6d:
74:73:84:fd:f5:13:22:b8:6e:71:42:18:1a:d4:3c:
72:56:c2:b2:9c:76:aa:9e:04:ad:e1:02:e5:2e:45:
93:bf:d7:7c:e6:8c:73:9d:de:22:ba:00:99:2c:d4:
7c:4a:27:84:5c:b7:d7:5e:2d:67:41:0b:53:44:77:
85:39:63:3a:a4:00:cc:b8:54:98:2d:40:ef:c8:00:
0d:e5:af:e6:85:9b:7e:76:b3:6e:34:af:82:c1:fd:
be:10:1c:08:4f:9c:c8:85:21:2b:c7:72:35:ed:d9:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:EF:23:74:F3:E1:EC:F0:9F:99:BD:0C:E4:F3:37:BE:FD:BE:F2
X509v3 Authority Key Identifier:
keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C7ADA138F4C011EAA7B25986C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.208.0/23
Signature Algorithm: sha256WithRSAEncryption
46:40:4b:89:51:06:9c:e4:06:5a:46:20:94:53:6d:9e:fb:c0:
4e:6c:bc:87:b7:ff:79:dc:b4:42:bd:31:da:b3:04:0c:9f:8b:
2c:7c:e3:f7:9c:fa:cd:cd:1e:30:ed:9f:b3:ba:83:53:a0:7c:
52:38:d6:e5:fd:22:02:01:a6:06:4b:93:d0:f0:30:97:ef:71:
34:60:26:3b:09:45:b8:33:4e:d3:c6:c7:41:e4:43:78:97:ed:
a0:35:f4:c8:69:58:49:42:27:fd:2c:72:9a:03:e6:f7:f9:b5:
6a:a1:25:d6:04:41:30:a5:79:ff:13:33:eb:0e:ca:d0:c3:b3:
c2:68:57:24:b8:71:08:ca:14:43:91:88:0b:ee:ed:95:66:c2:
95:08:4c:db:fb:2f:68:7e:b4:1a:90:e1:8d:c4:41:b7:9c:22:
5e:ff:ab:e7:60:47:ae:72:00:67:6b:9c:28:82:f6:0a:3f:d2:
39:b9:2f:b3:a0:61:83:d5:90:2c:87:b1:14:ff:d6:86:6e:09:
7a:73:8a:fd:f9:73:99:72:07:fb:42:c5:84:b7:b6:a8:93:cc:
be:8f:15:e9:87:e2:7d:7c:08:b8:80:7b:cd:d8:97:7a:cf:c1:
59:aa:ad:b3:c3:95:6c:3a:d0:1e:95:53:15:a3:33:0d:6f:c2:
29:6b:1a:96
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2
MkE2REU4RjEwHhcNMjYwMzMwMjEyNzAyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNhZWFhNi0xYmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzSujY/tJyzhvlQFX5GEgn65GJeJsLP0VLGlMXxQumH6ouGdmH2ictSgfPzEG
dzGbRPoTEop82aH7sqgsnNDswLu9Xou7DMteYptQKTaY42toDN1qmyH4De4Jcc+i
xwJRFCcG91fZalGQOxufRLGNqblOqtUA6ktz/z6zqIsMy2P0Wxv7ekXI3a6aW4an
M/InSXRluG10c4T99RMiuG5xQhga1DxyVsKynHaqngSt4QLlLkWTv9d85oxznd4i
ugCZLNR8SieEXLfXXi1nQQtTRHeFOWM6pADMuFSYLUDvyAAN5a/mhZt+drNuNK+C
wf2+EBwIT5zIhSErx3I17dkZaQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFYj7yN0
8+Hs8J+ZvQzk8ze+/b7yMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0
QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTVERTUvRTNFRDY1RDhGNEJFMTFFQTlDMzVGRTZBQzRGOUFFMDIvQzdBREExMzhG
NEMwMTFFQUE3QjI1OTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBdMzQMA0GCSqGSIb3DQEBCwUAA4IBAQBGQEuJUQac5AZaRiCUU22e
+8BObLyHt/953LRCvTHaswQMn4ssfOP3nPrNzR4w7Z+zuoNToHxSONbl/SICAaYG
S5PQ8DCX73E0YCY7CUW4M07TxsdB5EN4l+2gNfTIaVhJQif9LHKaA+b3+bVqoSXW
BEEwpXn/EzPrDsrQw7PCaFckuHEIyhRDkYgL7u2VZsKVCEzb+y9ofrQakOGNxEG3
nCJe/6vnYEeucgBna5wogvYKP9I5uS+zoGGD1ZAsh7EU/9aGbgl6c4r9+XOZcgf7
QsWEt7aok8y+jxXph+J9fAi4gHvN2Jd6z8FZqq2zw5VsOtAelVMVozMNb8IpaxqW
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:01:36 2026 by rpki-client