
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/EB598C04BAE011F1AFD56E445411F970.roa
File: EB598C04BAE011F1AFD56E445411F970.roa (raw, json)
Hash identifier: uL1Tj6lZVjqqdCbl5vW1Rvcu97SuukVRAxRhywHxhj0=
Subject key identifier: 82:66:3F:11:D3:26:7B:24:2E:09:30:AD:E3:14:22:7F:50:F8:72:B9
Certificate issuer: /CN=A9158A3E/serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751
Certificate serial: 21
Authority key identifier: 89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/EB598C04BAE011F1AFD56E445411F970.roa
Signing time: Mon 28 Sep 2026 02:04:21 +0000
ROA not before: Mon 28 Sep 2026 02:04:21 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 7474
IP address blocks: 103.182.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl
rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 09:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158A3E, serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751
Validity
Not Before: Sep 28 02:04:21 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ab9cb25-b613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:e5:b3:c1:79:fa:7f:a1:fa:aa:72:23:ce:
41:eb:70:e5:8a:09:89:54:03:c3:c3:02:19:22:17:
33:12:cc:65:72:1f:32:51:e3:b9:7d:df:bb:83:2f:
71:29:0c:97:b7:0c:c0:ba:9d:b9:43:85:e5:47:f5:
8e:7f:c4:a6:18:7e:2d:74:70:fb:8f:f1:9f:64:cb:
ea:cc:c0:5c:35:ef:52:fe:9b:d0:52:5b:aa:b4:92:
0b:1a:e1:90:a8:08:67:ed:7f:c4:95:10:e3:f6:9e:
d4:5d:1d:b4:bb:75:93:76:ed:ce:6e:0e:b4:3d:13:
87:e8:7d:09:f6:8c:78:53:51:66:f6:a9:81:45:96:
9f:dc:f6:ae:9e:39:a2:6e:d7:81:78:a7:ed:f7:f3:
12:87:54:1e:ab:d5:4e:26:02:ab:d0:bd:64:13:ab:
59:18:90:5a:cb:e9:1d:7a:b2:9c:75:69:ca:9b:fd:
a0:c4:21:4d:52:2e:74:83:14:7c:54:79:79:db:54:
99:fa:3d:f5:25:68:f2:6b:ac:e5:94:fb:07:29:5d:
9d:83:59:bf:f4:7b:dd:78:ae:9f:a4:62:69:32:65:
ac:d5:1c:45:81:ad:27:2b:2c:52:63:e6:90:92:c1:
54:62:13:88:be:93:27:97:11:54:50:a0:92:b9:57:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:66:3F:11:D3:26:7B:24:2E:09:30:AD:E3:14:22:7F:50:F8:72:B9
X509v3 Authority Key Identifier:
keyid:89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/EB598C04BAE011F1AFD56E445411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.152.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5e:da:c4:55:cc:e3:89:37:9d:cb:ed:16:06:09:99:df:e5:
a7:29:4b:0c:93:23:0e:cc:89:a3:a8:c8:31:67:60:99:9c:64:
42:f6:9e:08:50:1d:99:86:e7:2a:85:e5:d2:71:38:fb:33:1e:
92:92:17:a2:af:d1:4f:5e:84:9e:45:73:e6:fb:35:58:11:51:
40:34:38:83:c4:62:54:0a:de:ef:a1:e2:b6:25:83:37:63:3b:
7d:28:8f:1f:69:ef:97:44:69:31:86:90:39:33:b7:06:d8:4e:
25:d5:d7:3f:1d:70:5e:54:2d:0f:06:ca:fe:62:75:22:6f:07:
85:8b:b1:fd:6b:ff:de:1b:df:cd:a1:b1:cd:86:a2:39:03:6b:
db:a9:8a:fe:c9:fa:38:2b:c0:e5:3c:e7:2c:de:be:8e:2b:b6:
bc:f2:91:a2:d2:e6:3f:6d:e4:ff:d1:b4:a3:10:6a:41:68:22:
38:bb:34:05:c6:1b:a9:ff:d4:07:31:5d:60:03:b5:db:0d:c3:
a3:88:df:c5:9f:7c:53:bb:1d:64:6f:ef:70:dd:c4:ec:8f:be:
07:ea:ca:8e:64:4d:44:dd:06:dc:04:5e:5b:64:4c:b6:cf:ff:
c0:51:15:7a:56:29:9e:d5:cf:79:a5:33:a9:1d:80:73:4f:46:
65:af:ac:d8
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
OEEzRTExMC8GA1UEBRMoODlFREMyNzQzNDU1Q0U1OUFGRUJBQzMxNDg2RERGRUJG
N0NEMDc1MTAeFw0yNjA5MjgwMjA0MjFaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYjljYjI1LWI2MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDB++WzwXn6f6H6qnIjzkHrcOWKCYlUA8PDAhkiFzMSzGVyHzJR47l937uDL3Ep
DJe3DMC6nblDheVH9Y5/xKYYfi10cPuP8Z9ky+rMwFw171L+m9BSW6q0kgsa4ZCo
CGftf8SVEOP2ntRdHbS7dZN27c5uDrQ9E4fofQn2jHhTUWb2qYFFlp/c9q6eOaJu
14F4p+338xKHVB6r1U4mAqvQvWQTq1kYkFrL6R16spx1acqb/aDEIU1SLnSDFHxU
eXnbVJn6PfUlaPJrrOWU+wcpXZ2DWb/0e914rp+kYmkyZazVHEWBrScrLFJj5pCS
wVRiE4i+kyeXEVRQoJK5V3lXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUgmY/EdMm
eyQuCTCt4xQif1D4crkwHwYDVR0jBBgwFoAUie3CdDRVzlmv66wxSG3f6/fNB1Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4QTNFL0VENDg2ODkyOTJG
RDExRjFCNzRFQjVFNzZDMTFGOTcwL2llM0NkRFJWemxtdjY2d3hTRzNmNl9mTkIx
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWUzQ2REUlZ6bG12NjZ3eFNHM2Y2X2ZOQjFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEEzRS9FRDQ4Njg5MjkyRkQxMUYxQjc0RUI1RTc2QzExRjk3MC9FQjU5OEMwNEJB
RTAxMUYxQUZENTZFNDQ1NDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABntpgwDQYJKoZIhvcNAQELBQADggEBAEFe2sRVzOOJN53L7RYGCZnf
5acpSwyTIw7MiaOoyDFnYJmcZEL2nghQHZmG5yqF5dJxOPszHpKSF6Kv0U9ehJ5F
c+b7NVgRUUA0OIPEYlQK3u+h4rYlgzdjO30ojx9p75dEaTGGkDkztwbYTiXV1z8d
cF5ULQ8Gyv5idSJvB4WLsf1r/94b382hsc2GojkDa9upiv7J+jgrwOU85yzevo4r
trzykaLS5j9t5P/RtKMQakFoIji7NAXGG6n/1AcxXWADtdsNw6OI38WffFO7HWRv
73DdxOyPvgfqyo5kTUTdBtwEXltkTLbP/8BRFXpWKZ7Vz3mlM6kdgHNPRmWvrNg=
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:53 2026 by rpki-client