
$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/C276060084F011EF9D52F573C4F9AE02.roa
File: C276060084F011EF9D52F573C4F9AE02.roa (raw, json)
Hash identifier: bXHiUY7HCBEaQA+nusZ6DmYQdogq8krgBrFJi6+mw0s=
Subject key identifier: CC:5E:63:BD:6A:70:D5:BD:30:39:09:B4:8F:4B:BB:A5:63:3B:07:35
Certificate issuer: /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Certificate serial: 0119
Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/C276060084F011EF9D52F573C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:47:59 +0000
ROA not before: Sat 03 May 2025 06:13:14 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 17542
IP address blocks: 202.36.134.0/24 maxlen: 24
202.36.135.0/24 maxlen: 24
202.50.206.0/24 maxlen: 24
202.50.207.0/24 maxlen: 24
202.50.220.0/24 maxlen: 24
202.50.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Validity
Not Before: May 3 06:13:14 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5950f-e3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:f4:50:e7:16:3b:2f:aa:fb:1b:8b:bb:0b:
a0:cd:9e:18:7a:a8:c4:34:83:ad:19:3f:f1:2f:c5:
6a:3c:ce:9a:40:9e:8d:8f:0a:01:a0:2d:10:54:c3:
11:c4:a0:36:5a:0a:56:e7:2d:62:13:9e:40:37:05:
bc:ae:b7:1f:81:8c:cb:3e:3e:3c:53:89:26:3f:72:
ff:84:09:e9:59:bb:5d:2e:de:26:19:cd:45:68:2f:
ad:dd:63:0c:9d:bb:f4:7c:6c:4f:ef:9a:42:23:b8:
e8:2a:77:05:6e:a5:9e:d8:7b:97:a2:ec:3c:6e:dc:
0d:eb:b3:69:a3:6e:aa:2b:04:b3:6d:b2:a2:be:05:
fa:2f:49:d8:02:d6:52:8f:1b:2c:6d:af:eb:aa:6f:
95:bf:4b:05:b7:7e:47:bd:b3:a8:b2:ca:98:f8:3f:
87:5d:20:70:ad:f9:ba:db:3c:b3:51:5f:3f:c2:dc:
a6:f7:4a:dd:ce:5c:f7:7f:c3:28:89:d7:9b:fd:6a:
ca:46:4a:1c:aa:ee:aa:bf:20:53:6a:5a:b1:e9:36:
28:77:bf:45:86:e4:b1:c0:c2:30:e5:7d:74:5f:c9:
0d:f2:e1:59:d5:6d:f1:1b:37:82:9d:a1:19:b1:4c:
84:67:1e:43:2e:6d:59:e5:bd:15:90:17:cc:c0:fd:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:63:BD:6A:70:D5:BD:30:39:09:B4:8F:4B:BB:A5:63:3B:07:35
X509v3 Authority Key Identifier:
keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/C276060084F011EF9D52F573C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.36.134.0/23
202.50.206.0/23
202.50.220.0/24
202.50.222.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ec:59:68:7b:d1:33:e1:8c:9c:5f:c7:b2:5a:7b:b6:18:16:
46:1c:a0:00:f6:ee:93:e1:23:8a:0c:81:a7:97:69:6b:34:c8:
20:f0:7c:87:c1:9b:fd:3d:80:95:44:4b:83:ad:df:12:89:d4:
83:13:ee:87:d9:26:00:f7:07:a1:ec:5b:1f:be:5b:eb:81:cf:
c3:17:99:03:e2:43:40:03:9a:4d:ee:ff:c7:06:7c:d3:e8:2f:
40:a3:8b:1e:1a:48:4b:3f:f7:c3:db:13:8e:7a:03:44:72:8a:
61:c1:11:4f:3d:8e:44:28:83:37:ff:86:91:c2:26:cd:08:df:
ab:39:a3:8e:01:84:13:79:41:01:3e:16:9f:5b:fb:30:2c:c0:
c1:02:85:a2:8b:c8:00:46:b6:de:27:ce:7f:93:ce:cb:a6:e6:
46:4b:15:f1:6a:42:ba:c8:8b:db:87:d0:c9:23:a2:05:8e:a0:
fe:b1:d0:3b:9e:e0:d0:91:c4:12:92:f4:be:33:8c:4c:e4:ec:
f2:88:71:d2:4a:11:8d:ef:28:eb:85:a7:76:55:00:79:bf:64:
26:a7:ce:1b:4c:fd:c9:0a:b7:bc:ae:6f:ee:3e:13:65:33:ee:
da:35:0e:58:57:87:18:00:67:4b:d8:cf:c3:86:09:a1:0b:28:
0b:41:cc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:14 2026 by rpki-client