
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E4C0040A8C8C11EBB81BA228C4F9AE02.roa
File: E4C0040A8C8C11EBB81BA228C4F9AE02.roa (raw, json)
Hash identifier: Y61Wa0P+shzkpnMlqsX6TttdoSi4Cg9Z5BPs5CO0c6c=
Subject key identifier: 1D:7A:A7:FE:48:02:8C:95:FA:79:3A:2A:B8:9B:49:BA:EE:A3:44:D2
Certificate issuer: /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Certificate serial: 07A9
Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E4C0040A8C8C11EBB81BA228C4F9AE02.roa
Signing time: Wed 12 Aug 2026 21:42:20 +0000
ROA not before: Wed 12 Aug 2026 21:42:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 1273
IP address blocks: 103.23.192.0/22 maxlen: 22
202.89.16.0/21 maxlen: 21
202.89.16.0/22 maxlen: 22
203.169.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 21:37:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1961 (0x7a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C07D, serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13
Validity
Not Before: Aug 12 21:42:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7ce8bc-b981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:a9:5a:b6:dc:e6:83:af:30:7e:03:1c:e3:
e1:b5:0b:aa:21:a0:8c:64:1d:c2:b6:0f:cc:ce:74:
7d:dc:f6:91:88:64:19:ec:09:75:54:8a:1a:73:c3:
c8:6f:76:f3:46:9e:12:49:a4:79:b4:56:80:9c:19:
f9:98:81:b1:ff:2a:3c:cd:03:8f:b8:48:76:3b:9e:
93:2e:f5:b4:d9:3a:17:68:8c:f9:84:c8:4a:09:b8:
8e:42:47:35:01:a4:dc:3e:78:14:bf:a3:16:40:98:
16:7d:63:6c:fc:d4:5f:63:7e:57:f9:6a:45:5e:d1:
db:15:32:72:5b:e4:d6:99:40:b1:3b:e2:03:89:ea:
79:2f:9a:b0:21:ee:74:e2:22:da:49:95:76:05:d2:
1c:78:c6:4c:f1:f0:71:a1:80:e3:49:67:d7:e2:b0:
e2:b2:a1:8c:96:29:3b:9a:da:7f:f2:28:88:82:21:
e8:81:ca:f8:a2:ed:e7:39:bf:ee:25:3a:94:1d:59:
7c:c7:3c:41:8b:72:2d:e6:4f:fc:72:da:cc:bf:a6:
50:69:0e:74:08:e5:65:93:76:03:15:bf:a2:e3:e3:
32:26:4a:33:bd:1a:fe:4a:1b:6f:44:44:a7:23:25:
64:1e:3a:24:fa:b9:98:a9:70:3a:87:a2:b1:e7:ad:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7A:A7:FE:48:02:8C:95:FA:79:3A:2A:B8:9B:49:BA:EE:A3:44:D2
X509v3 Authority Key Identifier:
keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E4C0040A8C8C11EBB81BA228C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.192.0/22
202.89.16.0/21
203.169.56.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:01:5d:ca:64:83:c3:8e:1c:c9:7b:10:37:c7:7c:bd:f2:c4:
6a:cf:53:e8:71:66:bb:7e:00:51:db:bb:45:b1:6a:67:4d:d5:
11:9f:57:b4:f4:d8:3e:59:df:bb:a2:5a:ea:f9:14:53:3d:65:
e0:4b:07:d1:9e:8f:20:93:da:6d:99:80:b9:af:cc:0e:14:71:
fb:71:6f:83:3b:37:71:7a:19:f0:85:8d:91:7e:6f:76:4e:2e:
ad:4c:77:ca:17:7d:cc:00:76:c7:c7:3a:a7:da:3d:8c:27:84:
91:c5:44:2a:e3:98:2f:19:01:ac:d0:8e:f9:39:ae:fd:98:94:
57:44:2f:77:a0:cf:7a:60:74:ba:1c:b9:80:d3:e2:c0:7b:b1:
51:a0:04:1d:02:a1:d1:04:1f:bc:50:ff:79:bf:bd:f2:1a:16:
f1:f6:02:5b:46:72:9f:14:e9:ab:e9:31:0e:0a:7a:2e:f1:c6:
77:85:7b:b5:86:2c:71:9d:89:81:f4:b1:fa:fd:a1:92:7d:b8:
49:8c:a1:a6:ff:7b:a6:56:b3:4d:f3:5f:8c:23:61:2e:85:7a:
ff:62:b7:a0:a7:b1:b0:82:c0:41:08:cb:da:40:48:95:f7:1a:
bc:09:a1:b0:21:75:5d:bd:ce:41:e9:d5:42:79:02:55:66:1b:
ef:d2:b9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:53 2026 by rpki-client