
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
File: 994A883AE06511EEA8CEC61EC4F9AE02.roa (raw, json)
Hash identifier: bNGffj8ZbrDxM99jMp0vtDGv1ysJThWBPa37lbK47XA=
Subject key identifier: BF:6C:F2:FF:B2:24:3D:68:63:B0:BA:03:FD:E3:3C:3E:82:62:66:B9
Certificate issuer: /CN=A9198D95/serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Certificate serial: 01DB
Authority key identifier: FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
Signing time: Thu 03 Sep 2026 03:53:40 +0000
ROA not before: Thu 03 Sep 2026 03:53:40 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55501
IP address blocks: 103.155.4.0/23 maxlen: 23
103.155.4.0/24 maxlen: 24
103.155.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 03:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 475 (0x1db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198D95, serialNumber=FED8172F8A95A35202D51C6F75FA947DE844F4CD
Validity
Not Before: Sep 3 03:53:40 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98ef44-2b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:7c:35:72:f1:40:ab:6f:e2:35:ce:2f:4c:4d:
15:8a:5c:a0:65:e6:90:ae:36:95:b3:df:27:f3:9b:
b4:4e:f0:81:fd:8d:82:37:05:47:f4:84:ab:bf:2a:
80:fc:aa:f3:cd:48:c1:97:dc:53:31:f9:50:d3:e0:
43:82:bc:ee:5d:fa:78:91:07:d1:fe:27:92:9c:ea:
39:9d:3e:b9:45:db:51:bd:66:c1:fb:62:29:88:ed:
f8:58:80:0c:9e:29:d2:3e:6f:c8:72:aa:71:9f:c7:
7b:cc:7b:47:c8:98:02:b3:4f:bf:a4:56:d2:91:91:
5a:2b:e0:c6:7d:00:60:b7:53:e1:65:b0:5e:44:ac:
4f:24:34:b0:e9:60:88:ea:7d:8d:93:86:65:16:80:
a3:5e:9a:d0:ee:42:d6:d9:db:70:37:9b:12:6f:06:
20:54:17:d4:7d:55:28:f0:01:f9:1f:f0:a1:cb:dc:
5a:40:4c:09:c5:0b:f7:11:e6:de:ed:1f:59:cc:fa:
5b:3a:fc:d7:d3:bd:aa:22:69:cc:7b:0c:07:26:8b:
81:5e:35:e3:40:5a:d4:99:85:69:ae:12:0a:ad:3c:
ac:98:ae:24:c8:29:32:f4:71:37:62:8f:ca:9b:8d:
d1:2c:ed:1c:5a:31:4d:43:7d:94:00:a4:7e:c7:97:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6C:F2:FF:B2:24:3D:68:63:B0:BA:03:FD:E3:3C:3E:82:62:66:B9
X509v3 Authority Key Identifier:
keyid:FE:D8:17:2F:8A:95:A3:52:02:D5:1C:6F:75:FA:94:7D:E8:44:F4:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/_tgXL4qVo1IC1RxvdfqUfehE9M0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_tgXL4qVo1IC1RxvdfqUfehE9M0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D95/48ED296AE06511EEB35F421EC4F9AE02/994A883AE06511EEA8CEC61EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.4.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:06:36:65:20:70:8e:6b:a7:77:ac:dc:51:3c:a2:42:31:de:
d4:08:10:60:a9:6e:a4:b8:b7:e4:8f:e8:61:b3:ce:d1:1f:c5:
5d:02:ea:82:2b:62:8d:3a:fd:f3:e9:32:31:28:f1:58:80:a8:
ab:26:5d:a3:9b:06:eb:71:01:8c:a2:86:02:4c:f2:43:f6:3a:
9a:08:69:31:49:60:bd:2b:5c:65:dd:7a:b4:07:12:a4:3e:ed:
9e:fa:63:5b:37:6d:0d:2e:8c:5e:0b:ad:fe:90:a1:6c:c6:38:
c1:62:87:92:55:b4:b5:bd:f3:59:a3:2f:37:3a:af:21:63:54:
5b:1f:47:bd:c6:80:f6:66:d5:dd:83:93:f7:20:9a:a6:f0:33:
ae:bc:93:87:ce:ee:26:a6:c0:a2:a7:7f:f1:ad:e8:98:68:4f:
87:2a:2c:fe:0e:93:1b:a3:00:53:a5:74:53:6f:06:fb:50:3b:
9d:66:cc:21:6d:c9:65:85:f4:62:f6:c7:59:b0:b2:80:bb:e0:
29:54:41:f9:49:18:42:99:29:10:f3:89:99:8d:47:55:17:d2:
5a:08:4c:f7:68:39:ee:40:0d:a3:1a:a9:7a:ae:5c:5c:8c:10:
3e:da:21:02:5c:d3:a6:ac:eb:9e:42:8e:de:d9:7b:e6:09:48:
1f:10:d1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:23:56 2026 by rpki-client