
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/0648277C065B11F1BBF0D547343D8C67.roa
File: 0648277C065B11F1BBF0D547343D8C67.roa (raw, json)
Hash identifier: UPZChaoPwZygYNvD1ZEQcZn9IurnbGE9M73HomojtHk=
Subject key identifier: 38:F1:A0:AE:A7:2D:17:CD:B7:41:B5:24:AE:1E:8C:C3:23:4E:37:AC
Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial: 01E1
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/0648277C065B11F1BBF0D547343D8C67.roa
Signing time: Sun 01 Mar 2026 15:19:20 +0000
ROA not before: Tue 10 Feb 2026 08:32:24 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 149430
IP address blocks: 103.158.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Validity
Not Before: Feb 10 08:32:24 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a458f8-3c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1e:2c:94:21:49:ba:e3:83:87:70:7b:1f:f3:
f1:5f:25:a5:32:3c:25:58:28:81:af:7d:0a:97:0b:
f0:ad:7e:57:16:2c:de:ae:f9:a5:6e:8e:ee:3a:45:
cf:80:f3:6a:0a:5d:85:fa:5a:6d:6c:6e:d1:72:28:
24:27:b6:28:1e:9a:0c:b8:18:88:c9:b7:f7:b2:91:
4d:a7:cc:6e:aa:6d:10:04:0a:c4:db:ff:b7:78:f6:
d8:08:2b:5b:37:d9:ff:bf:c5:e2:29:f0:ea:b8:da:
32:f5:da:cf:23:26:59:88:19:6d:80:da:fa:1d:e1:
30:72:ba:63:ce:eb:66:e5:64:94:5f:12:ed:5f:40:
15:85:f2:de:ac:ac:de:16:be:d0:cb:11:2e:a1:cb:
77:00:f9:7a:a4:82:33:ba:a4:d1:88:6d:d5:68:ae:
b5:05:72:32:ab:b2:b2:a1:fd:a8:d3:a4:49:dc:d5:
1f:ab:ba:86:1a:86:a1:10:dd:83:ba:d7:38:11:c9:
6b:c5:8f:62:b3:bc:55:da:bf:7c:b9:8f:a9:97:51:
cb:0f:90:b0:8d:e6:78:74:52:37:34:30:80:2f:a9:
17:88:82:ca:ff:1a:b2:62:95:a5:b8:c7:20:c4:5b:
e2:d4:b2:f0:97:ff:47:64:04:00:bd:71:b8:70:1d:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:A0:AE:A7:2D:17:CD:B7:41:B5:24:AE:1E:8C:C3:23:4E:37:AC
X509v3 Authority Key Identifier:
keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/0648277C065B11F1BBF0D547343D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.83.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ba:81:be:23:07:85:ee:62:ee:c9:d5:5c:27:11:8b:62:34:
7f:1f:22:2a:53:f5:c9:02:c1:95:00:77:fb:22:56:16:b4:a7:
9d:dc:ff:d5:ac:71:9f:3f:60:a8:19:d5:10:78:dc:4a:19:21:
0d:85:fc:bb:a3:88:3e:8d:05:a1:5c:8c:f2:cd:0e:76:f4:09:
14:2f:17:13:4f:bc:8e:ee:4c:d2:86:4c:bd:e8:f1:d2:f8:1e:
48:24:7d:86:4a:a4:ec:00:b7:29:ef:cf:ca:77:93:de:61:e5:
f7:92:80:8d:2d:9b:b1:75:66:53:bf:ed:ef:57:6e:16:63:65:
53:a7:6d:45:7f:d6:de:e3:1d:f5:50:87:77:b8:33:26:30:3b:
0f:8e:fc:a6:dc:43:59:52:0c:4f:8e:b5:9e:7e:3d:88:e2:34:
b6:d3:a5:c2:71:03:a3:ac:1a:22:18:d7:3f:4e:6b:ab:9b:7d:
10:ba:a1:ea:59:a5:3d:f2:9e:cf:d8:8e:ae:aa:ca:21:56:15:
ca:b2:2d:fb:f8:40:ab:a5:b1:20:34:81:61:43:ba:e1:6a:bd:
fd:f3:7d:db:ab:45:4f:1e:44:e9:53:a8:36:ca:75:4d:b7:e7:
08:bf:2a:15:e9:60:9e:d5:6f:37:c0:ff:82:98:7c:29:df:03:
02:20:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:55 2026 by rpki-client