
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E259315C57CA11EA8D931284C4F9AE02.roa
File: E259315C57CA11EA8D931284C4F9AE02.roa (raw, json)
Hash identifier: 2IJMCnmvY6PYsFvIoiKqGJsi5W32855ijAqfD1IGSkE=
Subject key identifier: FC:7A:8E:F1:C4:D9:3E:5A:24:BB:A1:4C:41:67:A3:C7:6C:1E:4E:79
Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial: 1783
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E259315C57CA11EA8D931284C4F9AE02.roa
Signing time: Fri 16 Oct 2026 17:30:06 +0000
ROA not before: Fri 16 Oct 2026 17:30:06 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 24429
IP address blocks: 43.242.168.0/22 maxlen: 24
103.38.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 16:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6019 (0x1783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Validity
Not Before: Oct 16 17:30:06 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad25f1e-d471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:46:f2:bf:dc:36:84:f5:4f:6f:e7:bf:4b:
b4:72:af:35:95:df:dc:a4:16:4b:21:4f:cc:26:bf:
6e:e0:41:9d:72:be:da:93:60:37:88:f7:bf:50:87:
87:5b:9d:ca:29:e2:ad:e5:0d:6a:27:2c:72:29:43:
2e:33:46:95:d4:8c:05:fb:28:5c:d5:ef:f2:76:d2:
46:18:1d:14:05:21:46:4b:b8:d0:2b:ad:5c:54:28:
fb:7d:07:2e:59:61:c7:b3:a7:84:a3:c6:b9:13:98:
0d:03:f7:0c:3f:b0:92:8e:0e:48:8c:8b:69:ea:20:
e3:45:45:95:c2:80:b5:f7:97:ff:f5:57:fa:41:4d:
11:37:78:22:c0:fb:40:d2:8e:da:9b:07:bc:ea:e3:
e7:ab:9d:f8:3b:21:f3:12:4a:af:04:36:bb:bd:3d:
e4:51:39:9f:48:81:59:57:19:c7:95:81:2c:5c:a1:
d5:99:29:bb:a0:1a:23:ba:e7:65:0b:1d:db:f6:09:
fd:9c:c9:29:0c:b4:62:91:c9:f1:a5:de:cd:d5:33:
2b:47:ce:b5:8b:bd:8a:7c:89:62:af:69:92:8c:2d:
25:43:a1:e0:59:49:91:c7:a7:37:41:43:29:82:a2:
cd:11:0a:3b:79:1f:b7:64:63:4b:72:97:db:d4:45:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7A:8E:F1:C4:D9:3E:5A:24:BB:A1:4C:41:67:A3:C7:6C:1E:4E:79
X509v3 Authority Key Identifier:
keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E259315C57CA11EA8D931284C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.242.168.0/22
103.38.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:45:fd:10:94:58:3a:d8:78:d1:1f:8e:e9:ab:8b:90:15:05:
62:a9:1e:db:21:1d:b3:e9:fe:0b:de:4d:89:c6:c7:1c:04:1c:
eb:60:e9:eb:02:f9:a0:68:fa:f3:ed:89:b1:27:e7:17:49:c9:
7e:7d:a9:7c:cb:57:ea:0f:0b:17:40:e0:6c:77:41:a1:56:e5:
db:1e:ee:0e:91:45:64:96:6f:1a:eb:6b:ee:8a:ec:43:6b:47:
9f:b1:ce:b7:16:10:d7:26:84:24:ec:2b:b2:84:64:dd:cd:eb:
5e:02:ec:48:b5:97:ac:a2:7c:f9:36:d0:65:4a:3b:91:61:62:
e3:d9:61:2a:45:47:a8:36:27:23:91:01:f5:46:13:3b:6a:e1:
e1:93:c6:6d:d7:e9:9a:b3:b2:96:10:6b:bb:68:c7:2e:11:d0:
dc:f7:b5:d5:40:7f:38:71:38:55:d4:4e:9a:b3:22:10:38:c8:
d7:e0:7d:b8:91:9c:aa:cd:70:a6:b0:a3:1e:60:fc:33:6d:35:
2e:db:9b:6b:0f:19:37:7f:55:6d:cb:17:e8:98:5f:e1:00:70:
db:ee:45:e6:b6:93:c0:f6:6f:77:78:41:eb:46:1d:2d:54:70:
bb:e1:44:73:b7:a8:0a:e0:ac:e0:78:9d:3b:d1:85:08:62:27:
da:de:73:e2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICF4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3
M0IwNDdCMTkwHhcNMjYxMDE2MTczMDA2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQyNWYxZS1kNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAngdG8r/cNoT1T2/nv0u0cq81ld/cpBZLIU/MJr9u4EGdcr7ak2A3iPe/UIeH
W53KKeKt5Q1qJyxyKUMuM0aV1IwF+yhc1e/ydtJGGB0UBSFGS7jQK61cVCj7fQcu
WWHHs6eEo8a5E5gNA/cMP7CSjg5IjItp6iDjRUWVwoC195f/9Vf6QU0RN3giwPtA
0o7amwe86uPnq534OyHzEkqvBDa7vT3kUTmfSIFZVxnHlYEsXKHVmSm7oBojuudl
Cx3b9gn9nMkpDLRikcnxpd7N1TMrR861i72KfIlir2mSjC0lQ6HgWUmRx6c3QUMp
gqLNEQo7eR+3ZGNLcpfb1EWkLwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFPx6jvHE
2T5aJLuhTEFno8dsHk55MB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB
NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc0NjUvQjFBRkI2RkEwQTUzMTFFOEFDN0JFRTJFQzRGOUFFMDIvRTI1OTMxNUM1
N0NBMTFFQThEOTMxMjg0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCK/KoAwQCZyY4MA0GCSqGSIb3DQEBCwUAA4IBAQC1Rf0QlFg62HjR
H47pq4uQFQViqR7bIR2z6f4L3k2JxsccBBzrYOnrAvmgaPrz7YmxJ+cXScl+fal8
y1fqDwsXQOBsd0GhVuXbHu4OkUVklm8a62vuiuxDa0efsc63FhDXJoQk7CuyhGTd
zeteAuxItZesonz5NtBlSjuRYWLj2WEqRUeoNicjkQH1RhM7auHhk8Zt1+mas7KW
EGu7aMcuEdDc97XVQH84cThV1E6asyIQOMjX4H24kZyqzXCmsKMeYPwzbTUu25tr
Dxk3f1VtyxfomF/hAHDb7kXmtpPA9m93eEHrRh0tVHC74URzt6gK4KzgeJ070YUI
Yifa3nPi
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:33 2026 by rpki-client