
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
File: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (raw, json)
Hash identifier: I/3jw2SL7oFfJMZX+8eB8I+ObagDtYG05+5xid9Ie/8=
Subject key identifier: 9D:AF:EF:93:FC:5C:79:B2:6F:6C:C6:AA:E3:6D:91:35:B4:16:26:1E
Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Certificate serial: 0394
Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:02:49 +0000
ROA not before: Tue 02 Dec 2025 23:58:26 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 131254
IP address blocks: 202.137.224.0/24 maxlen: 24
2001:df3:9e00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 916 (0x394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA
Validity
Not Before: Dec 2 23:58:26 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a42ae9-7a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:56:b6:84:df:2a:9b:cb:53:c2:13:ee:ec:
55:f1:76:21:85:81:f3:e5:49:14:59:f7:bc:c1:cc:
3c:77:0b:17:f4:c6:26:71:a8:ca:e9:a2:79:72:67:
8f:0c:cc:52:80:6d:e8:36:f0:75:35:03:65:75:fd:
9a:a4:99:ab:b1:85:c1:80:5e:2a:ef:aa:05:29:a9:
ac:82:20:9c:66:07:02:95:6e:9f:1f:8a:ca:1a:48:
72:20:2a:c3:f0:db:69:cf:36:54:07:b4:fb:80:7b:
e4:4b:d4:7c:10:26:eb:54:de:cf:3e:c5:2a:9f:5a:
30:50:a2:a0:4f:5b:93:25:d4:5c:c6:c7:6d:37:8d:
ed:7a:4c:03:d3:7f:d0:c7:d4:8f:61:2b:e6:3a:44:
ff:1f:76:8f:bd:7f:b1:b3:aa:64:70:55:62:d5:71:
53:08:80:08:20:63:be:9c:09:8b:86:51:1f:af:0a:
41:fa:2f:c9:f9:76:b1:ca:97:f0:bb:ca:1e:a2:94:
41:1c:7d:63:98:92:d9:24:50:e3:28:7e:13:bc:13:
5a:dc:29:77:c1:61:aa:88:7b:14:23:ab:70:3b:a4:
5e:93:83:d3:92:57:8e:b3:42:cd:c9:44:0a:58:17:
82:29:df:5c:28:1e:16:5d:9a:a9:4a:26:47:c9:b1:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:EF:93:FC:5C:79:B2:6F:6C:C6:AA:E3:6D:91:35:B4:16:26:1E
X509v3 Authority Key Identifier:
keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.137.224.0/24
IPv6:
2001:df3:9e00::/48
Signature Algorithm: sha256WithRSAEncryption
92:7e:13:d5:c8:ac:5b:99:18:0e:89:02:46:30:8d:2a:ad:8d:
22:7d:17:f6:0c:34:c5:23:28:8f:b6:af:1b:9e:88:e3:22:a5:
ac:fe:ae:80:22:81:a8:2f:45:4f:91:76:53:27:d6:50:63:a0:
e7:a7:d1:40:6e:3e:46:86:d7:b0:ae:64:58:1f:2e:37:f7:ac:
c3:4c:38:02:1b:68:50:6d:04:c4:ec:95:a3:f3:1b:a5:e9:3c:
23:0e:00:8d:94:ac:93:6b:d6:db:a0:27:c9:8e:9e:e4:43:1f:
a3:b9:a4:14:29:d9:85:83:63:53:52:33:3d:a9:d2:30:ba:a5:
c6:d3:13:22:5e:f5:3b:d9:8d:d6:19:2e:6c:11:99:73:cf:18:
02:0d:46:70:8c:2a:61:8b:79:02:5f:8b:4b:39:ca:35:a0:f4:
35:83:7e:bb:ed:d8:5b:e1:9f:88:71:3c:b7:35:af:24:23:e3:
53:24:ef:7a:7a:bc:9e:37:c0:f6:09:8d:6a:85:1f:fb:48:eb:
62:da:7d:29:18:2e:4a:03:fa:bb:db:d5:68:84:5a:89:96:dc:
18:7c:33:57:f6:01:b8:c3:1d:65:24:65:3d:20:02:97:d8:fd:
cb:a0:77:55:fb:b2:76:ed:17:9d:51:93:83:31:77:c8:e6:f1:
47:ad:b6:b0
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD
MURGRjcyQkEwHhcNMjUxMjAyMjM1ODI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmFlOS03YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArOtWtoTfKpvLU8IT7uxV8XYhhYHz5UkUWfe8wcw8dwsX9MYmcajK6aJ5cmeP
DMxSgG3oNvB1NQNldf2apJmrsYXBgF4q76oFKamsgiCcZgcClW6fH4rKGkhyICrD
8NtpzzZUB7T7gHvkS9R8ECbrVN7PPsUqn1owUKKgT1uTJdRcxsdtN43tekwD03/Q
x9SPYSvmOkT/H3aPvX+xs6pkcFVi1XFTCIAIIGO+nAmLhlEfrwpB+i/J+Xaxypfw
u8oeopRBHH1jmJLZJFDjKH4TvBNa3Cl3wWGqiHsUI6twO6Rek4PTkleOs0LNyUQK
WBeCKd9cKB4WXZqpSiZHybEN9QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJ2v75P8
XHmyb2zGquNtkTW0FiYeMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3
RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j
cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTlBNzAvQ0RCQjE4OTZEN0Q5MTFFQzlDMjY1NzU0QzRGOUFFMDIvNkVFRTUwRjJE
N0RGMTFFQzhCNzU4NDVFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAyongMA8EAgACMAkDBwAgAQ3zngAwDQYJKoZIhvcNAQELBQADggEB
AJJ+E9XIrFuZGA6JAkYwjSqtjSJ9F/YMNMUjKI+2rxueiOMipaz+roAigagvRU+R
dlMn1lBjoOen0UBuPkaG17CuZFgfLjf3rMNMOAIbaFBtBMTslaPzG6XpPCMOAI2U
rJNr1tugJ8mOnuRDH6O5pBQp2YWDY1NSMz2p0jC6pcbTEyJe9TvZjdYZLmwRmXPP
GAINRnCMKmGLeQJfi0s5yjWg9DWDfrvt2Fvhn4hxPLc1ryQj41Mk73p6vJ43wPYJ
jWqFH/tI62LafSkYLkoD+rvb1WiEWomW3Bh8M1f2AbjDHWUkZT0gApfY/cugd1X7
snbtF51Rk4Mxd8jm8UettrA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:47:25 2026 by rpki-client