
$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9F196B2EC91A11F0AAB4C673C4F9AE02.roa
File: 9F196B2EC91A11F0AAB4C673C4F9AE02.roa (raw, json)
Hash identifier: tyQ+cSqsH2Qv0ddD7XoDmKPDoTkmyW/CRBZ+upSwUfo=
Subject key identifier: 01:29:D4:75:CC:D7:68:C3:25:9B:8A:5D:2D:52:C1:D8:E1:AA:D9:AD
Certificate issuer: /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial: D5
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9F196B2EC91A11F0AAB4C673C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:11:19 +0000
ROA not before: Mon 24 Nov 2025 09:47:42 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 152463
IP address blocks: 122.154.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Validity
Not Before: Nov 24 09:47:42 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48f57-a72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:ae:5f:6e:51:73:3a:e6:75:91:28:b2:11:
c2:e7:af:c3:6d:7f:0c:50:ec:52:30:02:ff:86:b8:
d0:75:1e:3a:92:2b:b0:d7:3f:ba:36:9c:8a:18:d8:
1b:41:11:7a:fd:8a:ce:9c:68:5c:29:0b:e5:85:0c:
52:7d:df:77:52:e2:2f:a5:8e:80:b8:00:bb:d3:e7:
1b:29:6e:10:d4:ad:ea:08:e2:52:81:23:16:0a:2c:
8b:3d:f1:4c:70:82:5b:bd:f2:bb:ee:6d:52:10:87:
22:07:13:20:f2:ee:94:1f:2c:92:dd:3a:76:7c:22:
d9:fc:8d:15:7a:8b:b8:b8:5a:f1:a5:3b:33:e1:c3:
20:61:da:d0:b8:07:20:ef:18:85:55:bb:28:17:3e:
bf:75:aa:76:14:5c:a0:62:34:7f:c9:55:4a:7b:be:
f1:bb:0b:61:1c:a8:04:a3:5b:da:06:42:2b:af:bf:
45:d2:c2:1f:a1:61:e5:82:23:bf:a2:09:c9:f3:f2:
50:fc:9d:41:b6:9b:c4:1b:9b:c8:92:c6:77:b1:57:
3d:03:45:80:83:d1:68:c1:37:ff:22:6f:2e:87:bb:
b8:2c:be:b3:fa:a7:74:06:1f:11:c5:8e:f5:c6:4f:
14:2f:3f:bb:ea:d8:d4:2b:fa:30:d3:7d:c3:69:c3:
fa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:D4:75:CC:D7:68:C3:25:9B:8A:5D:2D:52:C1:D8:E1:AA:D9:AD
X509v3 Authority Key Identifier:
keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/9F196B2EC91A11F0AAB4C673C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
122.154.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:14:01:5e:60:ed:f9:9d:98:fc:e7:5e:3b:1e:5b:1f:fa:60:
82:f9:ba:cf:19:d7:1a:23:f3:c5:e9:77:69:c5:69:b0:09:e3:
01:2f:b2:b8:b6:4f:12:f4:74:b5:5a:8f:39:42:97:de:47:ae:
58:51:81:36:ab:29:12:8b:5c:82:75:44:73:5f:fc:93:8d:dd:
fa:98:c1:3d:ab:91:dd:eb:fb:78:50:8d:8f:6a:77:b0:88:d5:
ac:57:7e:77:97:e1:92:9f:8b:b6:cf:d8:09:7a:75:8c:85:f3:
32:57:5a:c1:9b:bb:9e:31:f3:42:d2:08:9a:0e:e9:51:1e:2c:
65:e7:31:0d:4b:cd:aa:09:0b:7b:f5:22:d7:25:be:2d:87:e0:
3e:f7:9c:ae:d1:d2:27:a5:04:29:85:b4:31:6b:9c:fb:af:7d:
3f:db:46:90:ea:64:b0:2f:ab:fe:da:e4:92:2e:c3:a8:10:ba:
f1:84:da:b5:4f:63:b7:e6:dc:8f:b5:e2:71:f5:86:49:3e:37:
05:8f:44:fb:ab:a6:5d:6e:4d:c8:54:e9:66:d8:51:57:e2:b8:
fe:b1:d8:2c:82:7a:81:c2:a7:ed:5f:65:df:4e:56:38:35:77:
40:ce:b0:79:bd:f9:e4:6d:2c:47:00:9d:06:6c:d5:51:05:2e:
cf:3f:82:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:44 2026 by rpki-client