
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/CB4948F4B76211F1A52838354311F970.roa
File: CB4948F4B76211F1A52838354311F970.roa (raw, json)
Hash identifier: TtYV1cniH1eG5KnadO68G5Kg1PHso/ndGYQC5BG0nK4=
Subject key identifier: AE:35:C9:15:42:44:6C:31:33:12:FC:32:91:C4:9B:5B:2C:BA:7D:E6
Certificate issuer: /CN=A9151716/serialNumber=224D1986AFA672E2FC43376DCB959B8554FACFD7
Certificate serial: 02
Authority key identifier: 22:4D:19:86:AF:A6:72:E2:FC:43:37:6D:CB:95:9B:85:54:FA:CF:D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/CB4948F4B76211F1A52838354311F970.roa
Signing time: Wed 23 Sep 2026 15:23:57 +0000
ROA not before: Wed 23 Sep 2026 15:23:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55940
IP address blocks: 103.185.101.0/24 maxlen: 24
202.94.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.crl
rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151716, serialNumber=224D1986AFA672E2FC43376DCB959B8554FACFD7
Validity
Not Before: Sep 23 15:23:57 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6ab3ef0d-acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:87:6f:26:aa:5e:e7:00:0c:ad:36:f6:d9:
92:73:80:1d:83:9b:40:f6:c9:f7:eb:fa:af:e8:06:
20:8e:eb:7f:07:fb:b9:5e:13:d7:e9:f2:a2:3b:4f:
e3:7a:80:5b:a5:04:8f:39:8f:64:19:f4:37:98:d5:
28:dd:2f:07:46:7c:e1:c5:35:cd:32:22:6f:29:a5:
23:eb:29:0f:b7:0f:d4:33:1b:43:69:f6:cc:2f:03:
08:a8:6a:4c:72:6c:f6:40:85:3f:0f:22:35:0b:2b:
a8:a2:0c:7f:1e:f2:de:3a:03:9e:f0:42:ef:f4:f2:
3f:1d:09:f7:12:d7:c7:99:60:7c:26:96:68:1b:10:
04:cb:b0:90:b0:bf:5a:5f:84:12:62:09:f8:e5:e5:
37:ba:22:f3:be:8e:ce:30:eb:9b:fc:d6:cc:f9:4d:
a0:aa:96:44:a1:78:ec:b6:55:72:a3:4f:19:e3:cd:
8a:74:d9:7d:36:16:2d:86:4a:ae:5f:78:fa:3b:18:
4d:38:28:c6:cf:a4:c3:97:04:9c:e3:ca:4c:d9:00:
e6:08:69:a6:06:c2:f0:8c:df:bf:47:2c:e0:50:3d:
31:dd:81:6b:f8:ca:8c:4f:bd:9f:88:9b:23:03:03:
a4:53:a6:da:4d:f1:f5:55:c8:1e:be:c8:b1:e9:4d:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:C9:15:42:44:6C:31:33:12:FC:32:91:C4:9B:5B:2C:BA:7D:E6
X509v3 Authority Key Identifier:
keyid:22:4D:19:86:AF:A6:72:E2:FC:43:37:6D:CB:95:9B:85:54:FA:CF:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ik0Zhq-mcuL8Qzdty5WbhVT6z9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151716/AEAE1182B75F11F19668F7CA4111F970/CB4948F4B76211F1A52838354311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.185.101.0/24
202.94.75.0/24
Signature Algorithm: sha256WithRSAEncryption
43:04:7f:6d:50:04:1c:3b:74:2d:0c:37:6c:ca:19:15:af:b0:
24:a8:31:11:1d:2e:b6:fb:ea:fe:a1:b4:92:cd:36:e3:4f:1b:
35:47:47:72:d7:b3:4c:e6:77:b0:d7:de:7a:63:90:b9:a8:66:
2a:4a:30:fd:1e:f3:cc:05:21:7b:c3:7c:4b:f5:0d:bf:bf:f5:
56:7d:51:cd:c9:d8:99:ed:e0:b1:21:b2:dc:ae:79:90:33:8b:
e3:40:2a:f6:5f:74:c3:1a:e0:13:80:75:8d:42:96:5b:a3:f4:
52:22:a5:ab:52:4a:17:bd:61:f6:d5:ad:81:06:8d:42:0d:01:
45:2a:27:43:78:02:d6:40:93:3d:30:01:3c:7e:b9:14:bf:02:
2b:8b:3c:39:28:35:08:9f:66:8d:69:74:19:b9:47:ab:61:47:
2e:85:e4:4e:9d:f5:7d:39:d4:67:d9:00:5f:d3:d9:f1:a8:c0:
2d:91:c1:1a:95:d5:84:8f:24:da:4c:a3:7b:14:d7:1d:0e:9b:
b2:11:a1:16:d2:eb:33:86:43:8f:3e:f3:34:49:ec:61:d6:fb:
d2:4d:33:c7:45:cb:f3:db:fb:30:fa:1d:5b:52:59:a5:58:1c:
75:7b:b1:b8:cb:9c:e8:3c:95:5d:e9:5e:4b:5c:b3:45:f9:13:
a9:51:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:52:31 2026 by rpki-client