
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/A08D36808D9511F18CE7BA083F11F970.roa
File: A08D36808D9511F18CE7BA083F11F970.roa (raw, json)
Hash identifier: y0Dvh0/VOEW6Vmpl7IJY53LBbE9h/rKg1gCLV+jDFR0=
Subject key identifier: 7F:E5:AC:6F:3E:93:AD:1A:8B:1E:58:8F:48:C7:21:6D:A9:31:46:C3
Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial: 0859
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/A08D36808D9511F18CE7BA083F11F970.roa
Signing time: Sat 01 Aug 2026 10:42:02 +0000
ROA not before: Sat 01 Aug 2026 10:42:02 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139325
IP address blocks: 103.158.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137 (0x859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Validity
Not Before: Aug 1 10:42:02 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a6dcd79-a773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3b:aa:c0:a5:20:3b:42:a5:16:2b:ae:43:94:
01:71:e5:d7:c4:58:5d:45:28:b5:39:05:ad:f4:bd:
cc:66:ff:fb:dc:ea:f9:85:cf:ce:bb:53:65:0d:6b:
17:8b:fc:86:60:17:9b:9b:90:3d:5a:90:58:c2:d7:
79:ff:e2:31:4e:7b:15:e0:fb:77:6a:f6:0b:09:9c:
ac:e8:3e:3d:cd:0a:d9:dc:86:1e:57:b3:29:b2:fa:
d4:00:58:46:6f:71:9d:c3:5b:6d:da:3b:3a:81:ba:
13:b5:22:cd:54:d8:4f:5c:b8:b8:d8:66:c0:45:40:
15:fa:67:89:86:5b:08:e8:42:49:b5:cd:83:9f:23:
5e:4e:bc:80:09:ca:8a:8d:a6:e1:3c:55:e4:c6:d3:
89:63:31:96:6d:95:c4:7b:84:4a:db:32:27:24:23:
42:36:da:50:58:35:c3:7c:23:18:8c:13:76:dd:5b:
44:f4:be:28:41:67:a2:d6:2d:a3:91:7b:04:04:bb:
67:fc:07:68:a3:30:08:e8:ed:8d:94:c8:c5:f8:b6:
38:89:56:8b:ab:23:55:31:2c:9a:89:b6:8e:a6:f7:
e2:6f:c0:c3:4f:cf:58:91:c7:e2:19:a1:f6:a8:63:
fd:13:52:56:43:3c:4c:2c:44:ba:53:89:ad:3f:31:
08:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:AC:6F:3E:93:AD:1A:8B:1E:58:8F:48:C7:21:6D:A9:31:46:C3
X509v3 Authority Key Identifier:
keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/A08D36808D9511F18CE7BA083F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.158.0/24
Signature Algorithm: sha256WithRSAEncryption
69:4c:7a:4b:20:ff:b2:ab:60:3a:b9:2f:ba:28:a8:38:db:ad:
13:82:88:46:d9:85:22:55:18:72:ca:99:c1:c3:01:1a:c4:69:
4e:fb:81:17:6a:75:db:2a:13:4d:c7:7c:b9:11:de:a2:f6:27:
4e:7c:6d:e0:24:c2:23:7d:80:9e:ae:94:e4:d9:40:50:47:21:
4c:8b:16:ae:60:6f:e1:25:0b:f1:1c:d1:b3:90:2b:31:be:da:
40:ff:b9:da:87:6e:e8:4d:47:50:40:63:aa:99:97:55:6d:97:
33:c7:3b:50:39:16:59:b6:da:df:a5:03:e0:ab:54:f1:3a:63:
93:85:ce:1f:87:13:1f:14:4c:18:c9:53:c5:25:7e:56:97:e4:
89:83:b3:48:6a:6c:62:52:00:70:c4:70:f3:7c:a6:45:3f:6c:
13:04:1c:97:a9:18:e5:73:83:c4:11:55:d1:8c:56:9c:1e:38:
de:d5:31:3b:87:1c:df:4a:af:8c:5b:6b:ff:42:90:3a:61:b7:
9a:ff:06:80:b7:e3:6c:88:e5:47:2d:92:fe:63:67:d9:8a:7d:
65:40:2d:e1:9d:d3:e0:f8:1f:a3:ff:f8:2e:b0:d9:0c:12:d7:
6f:a4:b3:5c:68:e7:b9:e2:95:18:af:26:6f:6b:3a:7a:98:d4:
c1:b2:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:42:49 2026 by rpki-client