
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/B57A8048A26C11F1A3A3B52B6511F970.roa
File: B57A8048A26C11F1A3A3B52B6511F970.roa (raw, json)
Hash identifier: y2OHT/vLbiEsNPPOfmN97tHiYH0EfOmp/p0s1bJo294=
Subject key identifier: D2:A2:32:0E:55:52:C0:C7:CC:40:C4:30:E0:4F:59:D0:6B:33:DA:82
Certificate issuer: /CN=A9151AA8/serialNumber=D4DF630A441EDEFAE53C25D9D66AAB4382216F34
Certificate serial: 03
Authority key identifier: D4:DF:63:0A:44:1E:DE:FA:E5:3C:25:D9:D6:6A:AB:43:82:21:6F:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/B57A8048A26C11F1A3A3B52B6511F970.roa
Signing time: Thu 27 Aug 2026 23:12:01 +0000
ROA not before: Thu 27 Aug 2026 23:12:01 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 7604
IP address blocks: 103.14.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl
rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 16 Sep 2026 09:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151AA8, serialNumber=D4DF630A441EDEFAE53C25D9D66AAB4382216F34
Validity
Not Before: Aug 27 23:12:01 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a90c441-2cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:2e:86:46:14:97:20:c3:8a:cf:07:a5:75:
9b:ca:04:2f:96:bb:a8:7f:61:84:3b:8f:19:36:af:
6e:df:6e:f3:92:91:64:1a:65:bf:63:53:28:11:10:
cd:55:ec:02:ec:fd:2b:33:62:04:67:13:b9:aa:92:
fb:11:c5:2f:81:ff:17:c3:e4:4b:cc:ac:b9:4b:40:
3e:4a:d1:d4:3d:32:88:a5:91:8e:6d:f8:da:a7:e3:
a4:ec:01:89:ce:e7:7c:02:21:9d:fa:4d:1b:a9:76:
6b:b9:fb:61:74:7b:fa:63:1e:9b:b0:fc:dc:74:37:
02:dd:18:b7:b0:b2:41:4a:97:35:6a:e1:12:16:06:
5b:92:55:0d:c5:09:73:52:41:84:8e:4a:30:da:7e:
91:30:7b:c8:13:8a:f9:36:c3:f9:f6:be:23:94:62:
3b:2d:78:5e:d9:20:0a:81:4b:ec:ed:5c:50:3b:32:
1b:f0:80:40:73:3c:dd:be:b4:f0:11:13:d5:b0:53:
57:d6:85:cf:e7:b4:1b:eb:35:67:a7:4a:ce:f5:2c:
d5:ca:b8:53:0b:cf:dc:44:88:5b:37:be:c8:a7:d5:
d2:f7:bd:20:80:fc:97:94:6a:5d:cb:2b:3e:28:36:
55:8b:e9:7c:02:99:f9:8d:41:e3:56:54:28:1e:1a:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A2:32:0E:55:52:C0:C7:CC:40:C4:30:E0:4F:59:D0:6B:33:DA:82
X509v3 Authority Key Identifier:
keyid:D4:DF:63:0A:44:1E:DE:FA:E5:3C:25:D9:D6:6A:AB:43:82:21:6F:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1N9jCkQe3vrlPCXZ1mqrQ4IhbzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151AA8/222C2094A26C11F18F29BA436411F970/B57A8048A26C11F1A3A3B52B6511F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:fc:37:a9:b8:98:a4:41:91:c7:ec:8b:03:d4:f8:5c:f0:d6:
91:c3:bd:63:8e:ef:f1:a7:01:72:bb:8c:0f:d6:2b:b1:99:77:
fe:be:6b:8e:28:8e:b7:c5:cb:d9:ae:2b:dd:72:f5:25:f6:46:
8d:b8:9c:6c:9a:de:5e:b1:e5:f1:b2:75:cc:3d:a4:ba:a3:04:
9b:2c:e9:e1:bc:87:13:2e:23:80:01:73:c1:3f:9a:73:d1:ec:
02:a4:0f:43:aa:48:a8:18:eb:5d:09:71:c8:21:15:eb:ed:d4:
fc:d0:7f:05:29:c1:85:c3:4a:97:15:5f:bd:3e:9c:4c:26:17:
e3:6f:ae:b2:13:c5:a8:fa:61:1a:a3:ee:f9:72:7e:94:d3:8c:
d6:ee:b0:29:91:c0:55:b5:d9:56:c9:f6:d9:97:5a:88:7d:a1:
0d:5a:cb:a9:8a:f7:a3:de:59:e9:8f:de:3c:c6:4a:d3:9e:e6:
6e:6c:19:03:45:40:22:08:44:9f:b6:6c:11:7b:ce:af:95:25:
51:5e:52:16:01:97:b5:50:67:62:e8:e4:bc:37:6e:27:b5:10:
71:b5:6e:ea:f0:7e:94:55:36:6a:e1:a1:d7:4c:64:3a:a5:81:
ee:69:5d:53:ac:fe:bf:6c:ca:8c:e1:ae:5e:1a:b7:2c:91:d8:
dc:40:fb:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:57:15 2026 by rpki-client