
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa
File: 26AECD92C2B211EABBD0ED4AC4F9AE02.roa (raw, json)
Hash identifier: rWeyOCzY3PlCkFTWZ9asdNx63M37nsH6C9e4MtwVeR4=
Subject key identifier: 6B:83:76:11:89:24:18:57:C3:07:1D:32:C3:D1:0A:5F:29:DE:1E:89
Certificate issuer: /CN=A914B165/serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Certificate serial: 0971
Authority key identifier: DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa
Signing time: Sun 30 Aug 2026 20:40:56 +0000
ROA not before: Sun 30 Aug 2026 20:40:56 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 140898
IP address blocks: 103.153.28.0/23 maxlen: 24
2001:df4:2b80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2417 (0x971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B165, serialNumber=DA04228D3EEB451FC0F2233669717057F8AB3669
Validity
Not Before: Aug 30 20:40:56 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a949558-2304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:16:86:4f:80:a9:c6:96:28:d9:59:d6:d3:
ab:1e:98:bf:2c:49:f0:62:a9:0a:5a:69:c0:b8:36:
12:8c:fe:9e:d5:6e:50:07:2b:39:8a:43:db:e3:5f:
70:a3:fb:72:f2:b2:82:d9:48:ee:02:d5:f9:3c:ba:
6e:73:4d:f9:87:b0:da:4a:ee:74:53:39:b1:60:dc:
0a:68:1f:1b:c3:c0:d7:2c:ad:01:06:38:b5:8c:b0:
17:59:04:40:43:46:4b:c7:97:42:45:53:35:67:ab:
82:56:83:69:66:26:2b:e5:35:ce:fd:de:ff:01:27:
a3:9e:61:92:c3:6e:8e:ed:d1:cd:d3:28:44:1d:ab:
90:a1:80:6f:46:37:9a:a2:1b:42:9a:e0:e9:8f:4a:
ad:db:37:b3:91:cd:31:a7:7c:28:01:5b:ee:aa:8d:
67:0e:77:fa:ac:5d:87:3d:c3:e0:c4:ee:bc:b4:b8:
fa:b0:c8:70:18:3c:15:98:50:c8:cb:69:07:be:50:
1a:fc:fe:93:3b:f9:02:21:50:56:c7:6e:65:2d:4d:
c9:9f:9b:c5:77:16:c4:34:e4:51:69:f1:01:d5:6f:
a7:18:30:e6:f8:f5:bc:9c:39:75:43:d0:1f:d7:b9:
2b:b1:c0:dc:72:61:1d:2f:91:4d:33:16:33:ef:4f:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:76:11:89:24:18:57:C3:07:1D:32:C3:D1:0A:5F:29:DE:1E:89
X509v3 Authority Key Identifier:
keyid:DA:04:22:8D:3E:EB:45:1F:C0:F2:23:36:69:71:70:57:F8:AB:36:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/2gQijT7rRR_A8iM2aXFwV_irNmk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gQijT7rRR_A8iM2aXFwV_irNmk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B165/6A3EB8B6C2B111EA920BB94AC4F9AE02/26AECD92C2B211EABBD0ED4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.28.0/23
IPv6:
2001:df4:2b80::/48
Signature Algorithm: sha256WithRSAEncryption
4d:40:99:03:1e:49:05:af:b7:d6:e1:44:79:a8:88:93:6e:3f:
a7:0a:58:45:2b:e3:af:30:c6:a5:0b:50:a3:5f:62:33:ce:eb:
db:ed:af:ab:86:4f:2b:1d:4f:5b:c9:42:67:da:c7:ba:ac:97:
9e:fd:b6:58:3e:71:6c:bc:c6:a3:45:04:62:bb:44:ed:08:9a:
84:50:14:f8:61:55:31:f8:c3:03:65:40:2d:04:e9:ac:49:26:
2f:c0:c7:fb:18:fa:4a:82:87:63:8d:ee:90:c2:e8:61:f8:92:
fd:6d:ee:9b:3c:7a:0d:46:dd:b4:bc:90:02:f2:61:92:43:75:
4d:fa:87:23:c0:ca:07:2a:ff:51:ee:42:6b:85:a8:91:b8:27:
d0:56:54:7d:65:a2:8d:ca:0a:0d:7b:08:72:a6:89:e8:6a:13:
6d:58:53:93:b4:3e:30:84:5f:db:9d:66:2b:0e:87:7e:79:cb:
8b:26:a4:f7:9a:1a:02:ab:af:35:92:72:5b:78:ee:ce:11:99:
13:44:a5:16:10:92:f1:e3:5a:26:90:12:96:7f:16:81:18:a4:
e9:6e:53:0b:a4:82:4d:61:0a:a3:67:35:c4:3a:8d:3b:6f:21:
14:08:42:c0:08:80:d8:92:b2:56:b6:61:80:65:a8:8e:4a:88:
91:bf:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:59:04 2026 by rpki-client