
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/93BEF5A8C13211F19B20E4B94711F970.roa
File: 93BEF5A8C13211F19B20E4B94711F970.roa (raw, json)
Hash identifier: 3HOomSKqtTC0iR89khoNUxVVYpYPNaQr5nvp57BS4Jg=
Subject key identifier: 16:86:C7:9B:51:BC:B8:03:8E:BC:79:49:54:5B:E4:6E:52:8F:0D:60
Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial: 0191
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/93BEF5A8C13211F19B20E4B94711F970.roa
Signing time: Tue 06 Oct 2026 03:04:25 +0000
ROA not before: Tue 06 Oct 2026 03:04:25 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153531
IP address blocks: 161.248.218.0/24 maxlen: 24
161.248.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Validity
Not Before: Oct 6 03:04:25 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6ac46539-c721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:28:45:8a:62:db:6d:1f:8e:89:a1:1a:43:67:
94:89:b8:fd:1b:d1:20:7e:c5:15:cf:fd:85:b1:43:
f8:6f:2c:17:7f:fc:1e:38:b9:e3:24:c4:a2:95:24:
09:36:7d:60:d7:88:11:dc:11:7c:d5:b8:13:63:1b:
85:fa:4f:ba:6b:07:39:27:ab:c3:cd:60:55:2c:03:
23:69:53:82:a4:e3:d6:95:79:9b:8a:4d:c2:5d:bd:
49:75:74:1c:a9:85:47:a3:13:a5:80:66:2a:3d:13:
0b:d5:b7:0d:3e:47:b5:c1:4a:0a:f6:54:d6:bd:8b:
47:2f:1b:dd:32:05:69:97:70:85:9e:37:cd:36:0a:
12:94:1b:58:f2:8e:3e:8f:9a:b7:8c:84:1a:a9:c3:
58:5f:61:8f:f4:a4:c1:dc:2d:b8:a6:72:97:08:45:
5d:27:32:74:91:9a:12:c1:ba:bf:50:17:84:b8:6c:
78:33:6f:0c:47:31:e1:2d:90:0e:6a:b4:c3:4a:8f:
bf:8e:2e:b6:c2:cc:e3:68:53:fd:93:1c:5d:3c:19:
31:6a:06:5c:82:18:6c:bd:c1:1d:b4:98:75:b1:06:
bd:f0:e1:cc:66:e8:de:d3:51:1d:ff:cf:5a:87:75:
80:91:3b:41:4e:78:8b:1e:8a:4c:4e:f8:1d:33:cc:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:C7:9B:51:BC:B8:03:8E:BC:79:49:54:5B:E4:6E:52:8F:0D:60
X509v3 Authority Key Identifier:
keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/93BEF5A8C13211F19B20E4B94711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.218.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:34:27:66:7b:b1:fd:84:f8:6a:63:4d:b2:d1:d4:89:0c:24:
bf:94:31:fa:9d:9f:83:cb:03:c7:d1:6c:f0:af:0c:40:f3:c9:
99:47:a1:c5:67:c3:54:20:e0:aa:d0:34:a5:31:b1:37:3f:3f:
bd:df:8d:c5:7b:61:c2:02:a6:75:d9:0c:61:4b:0f:e2:9c:6b:
11:7f:8f:86:7c:2d:0c:b9:60:67:72:29:c7:c1:53:8b:61:db:
db:75:e2:09:ac:ad:20:ec:98:d7:65:8a:81:3e:53:47:d5:a1:
45:22:72:01:96:d5:79:57:6b:de:07:63:50:d2:41:f0:d7:ba:
11:14:fe:64:e0:75:97:cc:84:35:48:ec:8f:d2:66:04:0e:56:
21:00:61:60:cf:2f:ee:fe:13:d9:0e:cf:f2:32:f4:e3:84:6a:
41:76:85:b0:02:2c:49:7e:3f:26:72:83:12:8a:3a:fa:85:29:
82:bb:86:c4:42:15:53:21:7b:27:9c:0d:bc:5c:d8:6e:4f:5d:
69:e8:19:34:5d:2f:18:12:1d:e6:86:67:77:fd:ae:f1:ef:ec:
24:b1:9c:a5:b9:c6:29:ce:ed:fc:07:75:92:9f:d7:74:79:ce:
27:07:9b:32:7f:13:35:19:f8:49:e2:b5:fe:7b:98:f8:65:6e:
a6:6b:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:33:16 2026 by rpki-client