
$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
File: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (raw, json)
Hash identifier: I6AxyYVSCOlj4hHrHvuL3zmglVcdD72S+M6j2FfbyI8=
Subject key identifier: 44:BF:00:B0:04:7F:04:E8:D1:62:01:3D:8B:9D:21:7A:C9:A4:3D:A9
Certificate issuer: /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Certificate serial: 021A
Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
Signing time: Thu 29 Jan 2026 02:22:26 +0000
ROA not before: Thu 29 Jan 2026 02:22:26 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9336
IP address blocks: 203.15.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 538 (0x21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918557B, serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Validity
Not Before: Jan 29 02:22:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697ac462-d09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:6f:c9:89:4c:78:0e:ad:e8:26:18:c7:21:
4d:d7:41:5c:97:7b:a9:3f:a4:e3:7c:0d:ed:a8:f9:
b0:b6:24:13:72:23:cd:81:3c:cd:34:e1:60:c9:fc:
81:ca:91:4a:aa:59:d0:a3:f6:e8:09:d1:4b:a1:a0:
c0:22:8a:e4:52:98:81:df:63:7c:9b:0d:6d:b0:0c:
42:2e:22:e8:04:a3:99:aa:bb:86:6d:67:86:43:00:
42:f3:a7:c8:d5:3f:04:ed:bb:b7:ad:36:17:a2:40:
20:11:d9:09:a5:ba:ab:98:88:c0:2e:72:f7:9b:58:
b1:99:42:c4:b7:72:b4:cd:e5:53:38:27:14:96:9c:
e5:2c:a4:6c:45:a8:5f:f7:71:95:4d:6b:2b:1d:e2:
f3:aa:df:ef:15:5d:09:b2:80:a0:e9:4c:4d:33:3a:
05:34:86:a3:d1:8e:58:61:26:b0:29:30:7d:7a:a8:
3e:26:89:72:5e:f3:b5:4c:c7:6b:05:56:cd:97:e2:
37:a0:38:c6:c5:cd:80:32:02:ee:ac:13:6f:b2:bf:
87:c1:9a:f0:00:56:ea:76:58:cf:b2:c3:6e:d1:e9:
1c:c4:f4:76:b3:d6:25:d4:00:b8:ee:68:d3:8d:c6:
08:80:48:14:62:94:93:7a:e4:c0:94:e7:b3:a7:58:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BF:00:B0:04:7F:04:E8:D1:62:01:3D:8B:9D:21:7A:C9:A4:3D:A9
X509v3 Authority Key Identifier:
keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.15.172.0/23
Signature Algorithm: sha256WithRSAEncryption
81:47:45:db:25:1b:2f:52:e8:13:f7:4c:15:89:fe:be:bf:ee:
56:d7:cd:13:28:ac:97:67:b6:3b:a8:d7:42:ec:72:fb:bc:4e:
5c:be:89:b1:99:7b:5f:33:ba:ed:9b:8e:ff:3d:1a:69:26:78:
c8:16:91:5f:88:05:34:75:e1:7a:07:37:37:bd:d6:43:ad:2c:
64:98:81:cf:91:b4:70:fe:37:2b:fc:d5:01:79:f4:5d:14:1a:
d3:83:2b:56:c4:91:0b:80:84:5b:99:a9:05:1a:db:dc:04:1b:
2d:34:5a:0a:2a:9b:e8:7d:e3:10:fb:c8:d8:71:f3:8b:67:83:
8f:f0:46:3e:dc:d1:cd:1e:5f:36:bc:58:77:ea:04:1b:29:19:
fd:38:47:b9:76:57:0e:ab:be:d8:22:e2:14:a8:61:79:10:e4:
cc:74:42:84:f0:7f:4b:3c:fc:7d:af:09:c3:ab:0d:8d:3a:09:
b2:37:85:73:4f:60:39:f2:8f:7e:8c:d4:fd:7c:d9:fa:8c:63:
b8:bc:55:e0:3c:3a:a6:9d:12:c0:03:1e:3b:39:30:6b:41:1b:
bd:4a:d8:47:7a:1f:40:d3:18:1c:ff:10:12:57:aa:b5:6c:36:
68:6d:a1:ec:5c:c7:48:15:9d:c1:5d:1f:c2:6b:2f:f4:33:1b:
21:d4:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:01 2026 by rpki-client