
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa
File: 695DB5289D9D11EC958A216AC4F9AE02.roa (raw, json)
Hash identifier: X5PDT1MbgloBsVHEEErT26cO3WdhXztNkcjjEpdBJNM=
Subject key identifier: F5:7D:E8:18:7C:A6:83:D7:D1:10:2B:08:B1:DA:C8:62:C4:37:50:AE
Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
Certificate serial: 0447
Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa
Signing time: Wed 01 Apr 2026 00:32:32 +0000
ROA not before: Wed 01 Apr 2026 00:32:32 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9297
IP address blocks: 103.182.168.0/23 maxlen: 23
2001:df0:7ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl
rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1095 (0x447)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182
Validity
Not Before: Apr 1 00:32:32 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc67a0-ff7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:84:45:01:a6:9c:b0:49:4a:84:f9:42:db:
66:3b:6c:47:f3:5c:be:2d:3e:cf:42:89:85:55:ad:
e1:66:d0:88:9f:87:38:a2:3c:74:63:90:76:76:b9:
56:08:a7:f6:db:34:d6:97:69:e4:8b:ce:25:eb:ba:
2c:c8:5d:12:f6:08:b5:9c:42:b6:38:7c:e7:91:58:
4c:83:18:7e:f1:46:bb:a4:3f:3f:4e:87:e1:a2:c1:
1a:94:4e:5f:b2:22:6c:1c:1d:ce:7f:cc:01:51:70:
59:8e:52:17:dd:9d:ca:d4:3d:78:da:77:28:6d:3a:
84:d3:ce:5c:27:6e:56:0e:71:71:6e:36:ed:63:8c:
55:a7:90:f9:15:1f:7d:6a:85:44:1b:38:43:99:e2:
ac:08:6e:3d:cd:8c:db:ea:10:37:f0:bb:4f:da:b4:
47:8b:aa:60:d7:87:dc:82:ec:4b:87:d6:3e:28:35:
a5:59:47:68:fa:67:a7:81:a7:a9:6c:a4:e8:df:ea:
a8:f9:26:eb:43:e6:43:86:a4:a8:dc:e6:6b:87:95:
2b:ff:a4:e9:7b:cc:80:e5:d0:60:c8:1e:91:68:1b:
c4:f6:c7:05:29:2a:79:17:0d:58:c1:7d:ef:cf:4c:
ba:66:c2:60:2f:55:bb:9c:91:a0:bf:3e:2a:d3:33:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:E8:18:7C:A6:83:D7:D1:10:2B:08:B1:DA:C8:62:C4:37:50:AE
X509v3 Authority Key Identifier:
keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/695DB5289D9D11EC958A216AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.168.0/23
IPv6:
2001:df0:7ec0::/48
Signature Algorithm: sha256WithRSAEncryption
66:2c:fb:41:15:55:d2:48:58:ef:10:b0:db:1c:19:89:28:44:
73:87:7a:a4:67:ac:f4:85:98:5b:5b:fb:9e:bd:7a:09:d6:e0:
11:ae:1e:31:91:a6:ad:d1:cf:74:f9:30:00:64:63:4f:9e:9a:
6a:9f:e3:b7:90:3b:c2:65:c3:11:6e:ce:81:91:0f:38:9d:05:
4c:da:0c:a8:a3:02:b7:78:6d:15:7d:62:e8:96:f1:79:1d:b5:
53:dc:85:cf:97:2f:13:f3:32:ca:b5:a2:af:5e:23:23:7d:8b:
45:85:20:79:1e:96:5b:da:ed:1f:38:13:4c:97:af:78:0a:37:
e3:5e:c9:fd:15:9f:0c:56:4e:11:cb:a1:dc:9e:22:05:fd:5c:
04:5e:22:69:3e:ce:13:4e:59:15:9d:e3:44:0a:24:fb:cf:42:
ad:04:ed:c0:e2:56:c6:99:3a:07:2d:ae:a4:ab:e8:b7:36:b5:
f7:ad:06:dc:0b:df:7f:b4:9d:b9:66:e6:aa:e1:64:1a:1b:58:
2c:1e:aa:e6:ef:3f:51:84:b2:33:11:3f:cf:1b:45:15:cd:16:
1e:37:59:f0:a8:e2:d9:05:26:1e:bf:4a:11:09:29:7e:e7:1e:
72:10:d4:40:93:7d:46:4d:54:ca:50:5f:b9:c3:d6:54:4b:75:
15:3e:d7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 18:20:17 2026 by rpki-client