
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/890FABCEC41211F1B56440616F11F970.roa
File: 890FABCEC41211F1B56440616F11F970.roa (raw, json)
Hash identifier: nBFBXxNVwttmyXqPiPEcZZexcXkDChMfQuQVxXkx33A=
Subject key identifier: C2:D3:90:53:9A:08:4F:7A:31:0D:C1:77:17:BA:B7:24:5A:E2:6B:55
Certificate issuer: /CN=A9150CF3/serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Certificate serial: 0224
Authority key identifier: B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/890FABCEC41211F1B56440616F11F970.roa
Signing time: Sun 11 Oct 2026 01:49:42 +0000
ROA not before: Sun 11 Oct 2026 01:49:42 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 43969
IP address blocks: 103.69.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 00:58:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150CF3, serialNumber=B48CB1808262B8099B87272A576FFEDC19A396BD
Validity
Not Before: Oct 11 01:49:42 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acaeb36-cc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:1f:55:32:e4:b2:90:fd:8f:fd:33:1e:a5:
7a:fe:3a:fd:43:74:3b:98:26:32:6b:c7:7c:b9:14:
29:e9:56:e1:30:12:8a:55:02:64:c4:1b:7c:57:07:
e3:e2:6d:d6:54:0e:80:08:6c:d4:6e:5a:bd:85:a2:
45:8b:c6:b2:f6:c5:04:5f:6f:6e:aa:1f:14:0b:3c:
91:89:da:3a:a7:8c:7f:22:ae:b6:db:a5:2e:a4:9b:
be:74:e1:bf:48:61:31:bb:04:4f:e1:9b:cc:e4:b1:
73:dd:14:de:e2:1d:3a:b4:b3:19:36:65:b4:87:b9:
34:7b:3c:78:50:c0:9f:fa:74:d9:37:f6:1e:1a:d9:
26:88:33:44:23:6f:a2:cf:68:07:91:4e:30:48:0f:
5c:c8:e2:7a:a2:e4:59:33:55:8c:ff:d1:81:78:8b:
a0:d5:9f:ac:c3:29:08:d0:ac:7d:f1:e6:a4:84:df:
b5:b0:18:82:63:8a:1f:6c:0c:4b:f3:8e:79:47:ef:
a5:df:af:b3:93:b3:99:4e:54:77:00:06:ac:32:47:
03:a5:44:ad:82:0b:67:f1:1a:7c:d5:cb:fa:74:8f:
57:66:55:fb:8b:d4:ca:bd:be:c9:e8:3e:0b:7e:6b:
9a:03:fe:c5:ce:d4:a5:b4:4d:3a:5b:fa:be:b0:77:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:90:53:9A:08:4F:7A:31:0D:C1:77:17:BA:B7:24:5A:E2:6B:55
X509v3 Authority Key Identifier:
keyid:B4:8C:B1:80:82:62:B8:09:9B:87:27:2A:57:6F:FE:DC:19:A3:96:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/tIyxgIJiuAmbhycqV2_-3Bmjlr0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIyxgIJiuAmbhycqV2_-3Bmjlr0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF3/028F9EFE2E8611ED9D2EDC4DC4F9AE02/890FABCEC41211F1B56440616F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.128.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:ab:c0:d5:2e:9e:0b:74:0f:af:46:77:e1:91:ef:b1:19:ba:
31:fb:0a:85:ac:11:8b:73:c7:6d:75:b6:3e:c8:f5:19:ad:30:
40:f8:5f:8b:04:96:47:a0:ce:21:94:fe:4a:e8:51:d3:37:f1:
15:41:e6:1f:42:b1:13:9b:e9:e8:45:84:6d:1f:d0:11:12:a2:
05:7f:c4:b7:fc:35:07:8a:67:ce:8b:f0:88:02:df:62:e4:f1:
62:2f:d9:70:39:ae:1f:e8:a4:93:a7:44:8a:22:58:0a:0e:11:
5b:01:ac:c5:03:b3:5b:3e:00:af:22:1c:c7:53:51:25:69:d6:
22:e1:76:1b:ab:d6:f4:1f:4a:6c:a3:fc:86:6a:d7:82:d8:16:
19:e3:11:be:29:ad:a8:29:3c:fb:ff:78:74:3e:a7:5b:d8:ea:
83:1f:b0:f9:19:d9:8f:dc:57:9a:e0:da:b1:bf:82:c6:16:67:
52:3d:93:97:10:7f:55:79:f3:62:6d:9e:e9:25:78:2d:72:c1:
f0:e5:ee:22:26:b6:90:2b:0c:24:5c:09:6c:9b:85:f8:b8:ed:
0c:fc:37:d8:6e:9f:e2:05:39:d5:08:e1:d4:b6:a5:14:b1:02:
eb:3c:0c:48:42:8d:2d:c2:20:1b:7e:4c:a1:9b:e8:22:ff:11:
30:80:82:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:50:59 2026 by rpki-client