
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/C07FAA5C804311EE928AA523C4F9AE02.roa
File: C07FAA5C804311EE928AA523C4F9AE02.roa (raw, json)
Hash identifier: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=
Subject key identifier: 9D:18:F8:BB:B0:65:E8:D9:6D:76:DE:53:8F:0D:01:98:27:98:76:91
Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Certificate serial: 0296
Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/C07FAA5C804311EE928AA523C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:29:20 +0000
ROA not before: Thu 27 Nov 2025 00:17:49 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 132204
IP address blocks: 203.208.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662 (0x296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Validity
Not Before: Nov 27 00:17:49 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a44d3f-28d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:16:f9:e0:50:c9:9a:a1:be:09:04:6c:e7:bb:
3b:de:5e:83:2f:b8:6d:26:aa:83:39:40:58:ad:7d:
14:7a:93:98:5a:3b:4f:41:38:8a:36:88:06:56:01:
6f:73:5f:a9:f3:4c:82:a8:9c:2e:ea:00:b2:f8:93:
b9:73:7c:2d:45:4a:92:da:08:54:61:b3:18:a8:b8:
7b:f8:ef:75:12:65:7c:79:a0:49:c6:8f:72:cd:2c:
9e:52:90:20:de:ac:60:02:a3:cb:28:b0:e3:62:43:
e0:0e:ae:75:6e:b3:76:d4:fe:fc:bc:4b:87:aa:47:
44:d3:b2:8a:a8:1b:7d:ba:59:86:9c:18:5c:3b:7d:
b3:92:a0:39:1e:12:f4:3a:28:54:ca:7c:59:4b:5b:
ae:a7:ef:38:5b:c4:1f:09:98:5d:9c:c9:59:81:f2:
b5:6e:f7:13:5c:b0:f5:c6:ff:4b:9f:98:0c:56:70:
b4:21:3d:60:04:b2:52:f3:86:4d:e8:32:b7:68:1b:
4c:e9:a2:fb:81:fa:41:ce:db:b9:77:30:4c:81:fa:
b0:cb:27:16:8d:63:ef:b9:49:ce:ef:f7:1f:bc:d0:
cd:cd:de:e1:33:01:d0:40:e4:8d:e0:7e:ed:f0:2d:
aa:3b:83:60:79:55:7d:2b:6a:b5:9a:5d:23:a3:3b:
1c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:18:F8:BB:B0:65:E8:D9:6D:76:DE:53:8F:0D:01:98:27:98:76:91
X509v3 Authority Key Identifier:
keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/C07FAA5C804311EE928AA523C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.208.22.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d6:97:c0:0e:3a:02:d2:c3:57:50:41:67:5a:93:2f:85:5d:
0e:89:27:68:d9:38:7f:58:1a:d4:e0:03:21:b8:d0:41:05:df:
9f:df:6b:ed:53:34:6d:38:e5:22:58:0d:9e:78:0e:9d:33:b2:
2d:f2:3d:a1:df:00:c3:65:2a:5a:d6:69:8f:83:b4:a4:82:11:
bf:f3:aa:ea:2f:bc:01:40:98:d5:cf:a8:fe:19:21:18:42:63:
4f:a7:f4:9f:bd:d7:7b:e4:e2:d8:4a:a2:24:a9:fc:39:df:f8:
c7:c6:38:be:36:13:76:c5:34:21:f4:3a:79:67:14:fa:3e:97:
d0:d3:da:6b:64:03:e7:93:04:95:be:16:46:c2:f6:5f:ad:00:
33:2c:e2:c5:80:b7:8e:b2:d9:a7:07:43:94:81:04:dd:b7:74:
5a:39:ed:f5:51:10:be:53:9a:b0:a4:21:e6:5f:a9:f7:80:4d:
88:13:2a:9a:34:f6:06:fa:ed:6f:d2:cf:0c:05:76:7d:8d:6b:
7a:24:65:b7:ab:d8:4d:11:69:5e:bc:61:c7:20:50:d0:02:78:
88:ed:14:da:8b:72:62:d3:27:39:0c:a5:94:88:58:04:6e:5e:
88:25:99:c8:47:8c:46:1b:2d:37:7b:4e:b9:ad:cb:a7:06:28:
d0:a7:d4:32
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICApYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD
OTRDQkM1QkEwHhcNMjUxMTI3MDAxNzQ5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGQzZi0yOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9hb54FDJmqG+CQRs57s73l6DL7htJqqDOUBYrX0UepOYWjtPQTiKNogGVgFv
c1+p80yCqJwu6gCy+JO5c3wtRUqS2ghUYbMYqLh7+O91EmV8eaBJxo9yzSyeUpAg
3qxgAqPLKLDjYkPgDq51brN21P78vEuHqkdE07KKqBt9ulmGnBhcO32zkqA5HhL0
OihUynxZS1uup+84W8QfCZhdnMlZgfK1bvcTXLD1xv9Ln5gMVnC0IT1gBLJS84ZN
6DK3aBtM6aL7gfpBztu5dzBMgfqwyycWjWPvuUnO7/cfvNDNzd7hMwHQQOSN4H7t
8C2qO4NgeVV9K2q1ml0jozscSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ0Y+Luw
ZejZbXbeU48NAZgnmHaRMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2
MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OURDNzQvRTQyQ0JDNEM0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvQzA3RkFBNUM4
MDQzMTFFRTkyOEFBNTIzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy9AWMA0GCSqGSIb3DQEBCwUAA4IBAQBc1pfADjoC0sNXUEFnWpMv
hV0OiSdo2Th/WBrU4AMhuNBBBd+f32vtUzRtOOUiWA2eeA6dM7It8j2h3wDDZSpa
1mmPg7SkghG/86rqL7wBQJjVz6j+GSEYQmNPp/Sfvdd75OLYSqIkqfw53/jHxji+
NhN2xTQh9Dp5ZxT6PpfQ09prZAPnkwSVvhZGwvZfrQAzLOLFgLeOstmnB0OUgQTd
t3RaOe31URC+U5qwpCHmX6n3gE2IEyqaNPYG+u1v0s8MBXZ9jWt6JGW3q9hNEWle
vGHHIFDQAniI7RTai3Ji0yc5DKWUiFgEbl6IJZnIR4xGGy03e065rcunBijQp9Qy
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:02 2026 by rpki-client