
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/B409E49CA39D11F1B4F7754D4411F970.roa
File: B409E49CA39D11F1B4F7754D4411F970.roa (raw, json)
Hash identifier: GzaCZWp1dndFD7g7emTXpIICurmoortE6hD0cpGMniI=
Subject key identifier: D0:F3:E9:CC:76:1F:E2:A8:37:20:FD:D3:C7:D2:56:BE:C2:DA:63:86
Certificate issuer: /CN=A915EA8F/serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Certificate serial: 0332
Authority key identifier: 2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/B409E49CA39D11F1B4F7754D4411F970.roa
Signing time: Sat 29 Aug 2026 11:35:15 +0000
ROA not before: Sat 29 Aug 2026 11:35:15 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17639
IP address blocks: 103.219.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 01:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 818 (0x332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA8F, serialNumber=2CE084E01DAC6B4D634938D76CEADA596355BD53
Validity
Not Before: Aug 29 11:35:15 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a92c3f3-e34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7a:27:a7:25:cf:a3:c2:a2:31:f2:d2:48:d9:
33:9e:ca:6c:91:e7:8a:43:73:c9:96:65:e2:92:15:
f4:51:5c:df:d1:5a:00:c4:ef:99:a5:1a:c3:92:64:
14:d5:a1:a3:94:e0:aa:48:73:7d:af:9d:fc:cf:ad:
02:30:93:0c:17:b9:74:40:0a:64:65:6a:f2:70:15:
77:bb:57:aa:34:7d:d6:f8:89:06:17:da:13:4e:e6:
c5:96:66:a8:b4:18:b1:e7:09:f7:cc:79:ba:09:56:
14:d7:cf:f4:5a:db:04:86:b2:4a:c6:1d:ef:14:9b:
fc:4a:13:99:b3:ee:c7:0e:b0:9c:3b:39:2d:fe:45:
ec:4b:3c:b8:d0:8a:06:0a:17:ac:a7:55:41:9a:39:
bf:b8:37:55:39:95:f3:37:e1:09:a6:75:40:1a:80:
0a:aa:aa:13:de:32:59:f2:3b:53:b1:13:ab:78:92:
49:81:df:ca:b6:a0:82:7d:9a:e3:b3:52:2c:ff:ac:
d7:ee:af:11:b6:9b:7e:c4:4e:90:0d:3a:87:b0:86:
ee:86:52:75:ad:57:c5:f6:b8:84:d7:0b:c4:4b:5c:
63:bc:05:2c:25:ba:bc:6e:6f:d6:4f:c2:0c:6c:9e:
c8:c7:41:2f:66:9a:fe:e2:55:dd:53:35:e0:cc:5f:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F3:E9:CC:76:1F:E2:A8:37:20:FD:D3:C7:D2:56:BE:C2:DA:63:86
X509v3 Authority Key Identifier:
keyid:2C:E0:84:E0:1D:AC:6B:4D:63:49:38:D7:6C:EA:DA:59:63:55:BD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/LOCE4B2sa01jSTjXbOraWWNVvVM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOCE4B2sa01jSTjXbOraWWNVvVM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA8F/E3A35BB4242811ED8FD24C86C4F9AE02/B409E49CA39D11F1B4F7754D4411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.188.0/22
Signature Algorithm: sha256WithRSAEncryption
93:c7:8e:11:46:05:2a:0f:86:11:dd:65:24:eb:5c:98:77:3c:
75:7f:4f:f2:8f:a7:f8:a8:9c:90:24:9d:1c:e3:74:69:f7:9e:
2e:4a:fa:d0:13:2f:b5:94:a7:6d:08:aa:fb:2a:16:61:1f:b9:
e4:16:77:ba:60:fb:73:4a:16:d1:91:86:be:63:e4:2b:72:fa:
a8:11:d6:45:07:80:c2:ea:05:f0:c3:60:a1:5c:67:7e:db:fc:
ec:3d:35:b9:74:d7:a0:88:f2:41:d5:34:b6:2e:26:29:50:fa:
33:5b:31:f9:d2:94:c0:22:8e:b7:7c:19:0c:1f:33:72:29:56:
9c:1f:01:71:c0:e4:5a:3b:3e:3c:27:05:48:84:0f:51:9f:88:
f5:e3:e8:99:4b:1a:5f:31:3d:8a:51:d8:9b:65:1d:a9:a8:a9:
f1:9d:26:f6:da:94:8c:4f:03:1b:83:23:e6:6d:3a:0d:fe:a1:
79:bd:bc:2f:08:c5:aa:05:0b:68:79:38:99:8f:77:b9:81:1b:
0f:f9:cc:da:87:cd:44:f0:0c:58:a9:d7:69:aa:f7:ba:83:56:
65:55:2b:27:07:b4:7b:8a:2f:e2:64:71:75:5e:f7:07:83:74:
19:64:76:52:43:34:f8:f8:d7:8d:08:16:8f:3b:92:f1:b9:d5:
79:b7:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:59:23 2026 by rpki-client