
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F5DFB1A6CD1B11F19D97589A0666CEF9.roa
File: F5DFB1A6CD1B11F19D97589A0666CEF9.roa (raw, json)
Hash identifier: 1z3U6r7srJMsG9DhVTJU+5Mt7lHfVXl6uNKmn6SG2QA=
Subject key identifier: 0E:FA:59:6A:A9:43:2E:7C:80:DA:3F:05:80:D6:01:37:C4:F1:8A:5E
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 068F
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F5DFB1A6CD1B11F19D97589A0666CEF9.roa
Signing time: Wed 21 Oct 2026 06:52:20 +0000
ROA not before: Wed 21 Oct 2026 06:52:20 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 210387
IP address blocks: 43.226.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1679 (0x68f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Oct 21 06:52:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6ad86124-8624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:2e:b1:c4:f0:67:b7:9a:05:0e:74:fd:16:
27:d2:d2:cb:0c:a6:6e:6f:79:60:f7:6d:15:3e:c4:
ae:15:da:b3:9a:2f:72:e5:5b:4f:bb:a7:86:c0:20:
5c:f1:71:59:35:38:5e:2e:62:9d:29:89:a4:65:43:
67:4f:56:d0:67:41:15:58:09:c3:6f:0d:a8:4a:7a:
2c:ad:6a:5c:ea:ed:de:db:4b:a7:44:a3:fe:c6:a2:
5f:ab:73:ee:90:aa:6a:ba:1d:50:b8:b8:86:64:55:
12:38:bf:ab:d7:50:a6:70:69:90:3a:e0:b3:1c:29:
a0:02:b3:40:65:7e:fb:05:c8:ca:32:34:a7:b3:f4:
56:9e:e2:05:c1:0f:78:bc:12:97:9d:37:a6:c4:76:
48:9b:a2:ca:0e:21:91:bc:77:72:17:6d:7f:08:68:
ab:98:e0:8c:08:d6:64:50:f5:9f:20:4f:8b:93:7a:
40:bb:2e:7b:8b:36:29:d6:b1:ee:d0:4d:cf:86:97:
0e:f1:ef:72:82:3a:6c:b4:63:ec:b3:7f:7c:b1:5d:
11:24:fd:f8:9a:01:77:a0:c0:ad:b9:b3:ba:9d:56:
f2:13:08:27:10:75:cd:e7:41:cc:95:26:f4:b2:70:
57:ba:5c:02:2d:d2:62:8e:6f:d6:86:13:c0:d5:b0:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FA:59:6A:A9:43:2E:7C:80:DA:3F:05:80:D6:01:37:C4:F1:8A:5E
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/F5DFB1A6CD1B11F19D97589A0666CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
43.226.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:93:f0:72:4c:f9:63:a0:c2:9a:97:93:b6:c7:51:1c:ee:e6:
05:bb:4f:3d:92:01:3e:f7:37:d5:62:ae:e0:db:44:69:24:40:
4c:4e:cd:21:90:7c:f2:ed:39:04:e7:6d:00:8e:b0:52:2c:3b:
96:84:a1:a7:a5:b8:67:12:8d:f8:45:86:0f:93:58:e7:24:51:
e7:e1:d3:ce:6c:b3:8e:54:38:b0:d3:8b:c6:e0:90:6d:2b:3b:
cd:44:bf:e0:09:a5:c9:e9:e7:b8:0c:99:15:9d:cd:16:29:c0:
6a:50:e3:ed:e6:f8:55:71:18:da:be:12:32:26:87:6d:39:a0:
9a:37:8b:43:85:3f:25:e3:d9:d5:fd:95:a7:b3:80:cf:3c:64:
d7:f3:bb:c2:e1:6b:87:27:71:d5:47:79:30:0b:a9:89:e4:11:
85:e8:af:c1:a0:bd:d8:9d:96:50:24:d8:01:aa:31:2f:f3:59:
c7:37:9f:69:52:36:c1:d8:e3:6d:bb:2b:bb:64:f8:ca:b0:f1:
8f:75:ea:f2:26:f5:c8:29:31:ad:b9:d8:51:82:bc:c9:8f:5b:
30:52:be:27:58:73:05:a9:9a:13:fd:f0:66:17:42:74:de:86:
53:bc:79:d1:f0:14:50:d9:1e:a8:95:52:6e:47:13:6e:b6:e0:
6f:56:46:bb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhCRkExMTAvBgNVBAUTKDE1N0IwQkRFMEUzQ0FEQjI5NDgzOUJDOTgxNTY1NTY0
NERCMjZFOTEwHhcNMjYxMDIxMDY1MjIwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQ4NjEyNC04NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCkuscTwZ7eaBQ50/RYn0tLLDKZub3lg920VPsSuFdqzmi9y5VtPu6eGwCBc
8XFZNTheLmKdKYmkZUNnT1bQZ0EVWAnDbw2oSnosrWpc6u3e20unRKP+xqJfq3Pu
kKpquh1QuLiGZFUSOL+r11CmcGmQOuCzHCmgArNAZX77BcjKMjSns/RWnuIFwQ94
vBKXnTemxHZIm6LKDiGRvHdyF21/CGirmOCMCNZkUPWfIE+Lk3pAuy57izYp1rHu
0E3PhpcO8e9ygjpstGPss398sV0RJP34mgF3oMCtubO6nVbyEwgnEHXN50HMlSb0
snBXulwCLdJijm/WhhPA1bBdYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA76WWqp
Qy58gNo/BYDWATfE8YpeMB8GA1UdIwQYMBaAFBV7C94OPK2ylIObyYFWVWRNsm6R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEJGQS8wNEEyNEMzNDEx
NDMxMUVDOTczNjlGNzNDNEY5QUUwMi9GWHNMM2c0OHJiS1VnNXZKZ1ZaVlpFMnli
cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZYc0wzZzQ4cmJLVWc1dkpnVlpWWkUyeWJwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhCRkEvMDRBMjRDMzQxMTQzMTFFQzk3MzY5RjczQzRGOUFFMDIvRjVERkIxQTZD
RDFCMTFGMTlEOTc1ODlBMDY2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAK+LnMA0GCSqGSIb3DQEBCwUAA4IBAQALk/ByTPljoMKal5O2x1Ec
7uYFu089kgE+9zfVYq7g20RpJEBMTs0hkHzy7TkE520AjrBSLDuWhKGnpbhnEo34
RYYPk1jnJFHn4dPObLOOVDiw04vG4JBtKzvNRL/gCaXJ6ee4DJkVnc0WKcBqUOPt
5vhVcRjavhIyJodtOaCaN4tDhT8l49nV/ZWns4DPPGTX87vC4WuHJ3HVR3kwC6mJ
5BGF6K/BoL3YnZZQJNgBqjEv81nHN59pUjbB2ONtuyu7ZPjKsPGPderyJvXIKTGt
udhRgrzJj1swUr4nWHMFqZoT/fBmF0J03oZTvHnR8BRQ2R6olVJuRxNutuBvVka7
-----END CERTIFICATE-----
Generated at Sun Oct 25 08:49:36 2026 by rpki-client