
$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa
File: 3A748F0E9C1211EF80DB437DC4F9AE02.roa (raw, json)
Hash identifier: jZxAOWiAe/BSMfxj7HHzJhOBvkhZZ5jWDWhZwPaoTDg=
Subject key identifier: A4:D9:52:02:71:68:81:C4:0F:36:62:E9:DC:3E:F3:4B:05:0D:F0:97
Certificate issuer: /CN=A915EA46/serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Certificate serial: 0105
Authority key identifier: 8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:29:12 +0000
ROA not before: Wed 03 Dec 2025 04:33:59 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 153392
IP address blocks: 160.191.188.0/23 maxlen: 23
160.191.188.0/24 maxlen: 24
160.191.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl
rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 05:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EA46, serialNumber=8B15440AE226C990FC9E55915FE8C9509BCB6676
Validity
Not Before: Dec 3 04:33:59 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a59eb8-48e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f6:92:4f:2a:9e:f5:c7:58:a5:fb:70:38:f7:
ae:85:27:91:e3:c7:d4:3a:35:96:32:ca:73:d7:b0:
11:78:a2:1a:38:70:95:a0:cb:99:1f:49:e0:74:5f:
b9:b5:27:46:27:23:d2:75:8d:6e:66:e2:b5:5c:5a:
07:9c:65:33:51:b0:79:9a:b1:ee:bc:9d:e4:86:99:
74:9c:80:ac:66:e0:92:89:e9:2e:6d:96:ca:18:79:
dc:31:0d:9e:01:8c:30:55:5a:eb:c3:75:8e:c8:45:
1b:76:a2:f7:7c:5c:68:91:6d:e8:02:05:ee:54:d7:
6f:ba:22:1f:9f:00:55:51:e7:da:91:73:d8:87:b3:
2b:f3:a2:c0:8e:bf:e0:80:6a:b4:aa:60:ee:dd:aa:
83:7f:ee:10:18:ef:46:b1:f6:b1:de:9e:e8:cd:d8:
ef:f1:1e:9b:49:98:7d:f6:6b:4c:84:b1:84:f6:28:
29:44:1d:e5:fe:59:74:2c:80:93:da:3e:0d:d7:1d:
f6:75:0b:32:48:ed:55:8f:a7:58:fd:80:a1:10:6c:
3e:aa:2e:b6:79:d5:b0:34:00:aa:77:df:86:76:6a:
09:70:ec:73:1a:cf:cb:3e:aa:c2:22:d2:1d:3b:14:
1e:a5:42:7d:67:67:4e:f7:a3:26:85:00:d3:98:1b:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D9:52:02:71:68:81:C4:0F:36:62:E9:DC:3E:F3:4B:05:0D:F0:97
X509v3 Authority Key Identifier:
keyid:8B:15:44:0A:E2:26:C9:90:FC:9E:55:91:5F:E8:C9:50:9B:CB:66:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/ixVECuImyZD8nlWRX-jJUJvLZnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ixVECuImyZD8nlWRX-jJUJvLZnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/D43711129C1111EF92FBA97CC4F9AE02/3A748F0E9C1211EF80DB437DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
160.191.188.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:40:14:92:c8:91:25:ff:9e:13:91:93:dd:4d:14:57:a8:55:
f4:4e:46:51:d8:5c:74:69:a4:e0:43:b7:bc:d0:bf:ed:f7:5b:
e9:50:7b:1d:a9:6c:20:d5:7a:cc:2e:42:a2:e5:ae:36:7b:3e:
ef:7c:61:3e:65:57:71:ef:a2:56:2d:7d:15:01:ca:4d:20:dd:
08:6a:23:c3:71:01:89:f9:be:30:e8:d9:b4:71:76:83:43:ca:
61:aa:5f:5a:d1:79:0f:c1:da:a2:5a:07:e5:94:61:f2:95:14:
c5:f5:b5:6d:36:1a:3a:1b:30:89:e3:4f:2e:22:f2:dd:90:44:
c0:2f:1b:e3:03:08:9d:66:0c:46:a9:c5:62:cf:fc:e2:20:cf:
22:dc:d8:c0:f7:52:19:a5:f5:9e:57:26:63:51:4f:b7:39:ad:
06:f2:97:65:79:2e:65:71:4a:c1:ca:59:2f:df:5c:6d:8d:48:
cc:a8:3e:98:a7:7e:02:d6:b2:2d:f4:aa:17:04:c6:ee:4f:c7:
53:1e:81:a8:d7:ad:25:fb:a6:b6:8b:ab:97:a5:4b:13:13:3e:
56:fc:eb:d5:04:48:07:17:4a:fb:69:7b:b4:2a:bd:1f:56:dd:
86:97:83:47:e7:f0:21:6b:5e:aa:31:6f:48:78:a6:89:9f:5d:
d0:6b:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:08 2026 by rpki-client