
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
File: EC61C060DDB411ED93355C4FC4F9AE02.roa (raw, json)
Hash identifier: z6jab3pPMKE60NZxiOVLMs9nS5ZOotEr05TjZQstmbM=
Subject key identifier: 08:3A:97:2F:70:39:38:F0:AC:43:4B:31:D5:71:52:E6:C9:DD:D3:21
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0245
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
Signing time: Wed 15 Apr 2026 02:34:37 +0000
ROA not before: Wed 15 Apr 2026 02:34:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3462
IP address blocks: 103.112.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:21:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Apr 15 02:34:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69def93d-b3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:40:14:cf:07:ed:cc:d6:61:4a:53:f9:9d:
8b:07:8f:1f:63:5a:30:f2:86:8e:2d:6b:bf:22:1f:
b9:ec:89:0f:ab:72:5f:4e:33:d8:10:a9:51:9e:1a:
7f:7d:98:2f:61:e4:9f:46:e7:93:e7:aa:83:3f:1e:
1b:31:51:a8:c1:44:65:fc:f4:9b:47:8a:09:0e:21:
88:4d:95:a1:8e:6f:40:24:39:d9:7c:bc:77:73:a1:
d4:a7:27:6d:67:3a:bc:7c:af:a5:f0:6c:2f:f7:1b:
d7:7a:b8:35:d0:0f:3c:a4:ed:04:b0:79:57:c1:9e:
93:42:f7:e1:51:f3:16:6d:ce:1c:1c:23:3b:eb:78:
2a:f6:89:05:61:ab:84:67:09:b6:70:20:56:f0:e2:
08:22:85:e7:8a:49:7a:16:71:f7:21:42:76:37:34:
54:40:81:97:fa:cd:32:39:5d:a2:b2:ce:51:4a:21:
a5:ee:c8:4e:75:64:c1:c6:0b:a6:dd:2c:14:4e:ad:
95:21:fb:02:31:81:0e:b8:29:2f:7c:6c:0c:42:ec:
41:f3:bc:9f:ec:87:fd:9f:97:1d:9c:5d:fe:54:c1:
a3:46:c5:0a:a7:9c:92:c5:e4:18:54:43:ce:26:d1:
63:a1:8a:46:af:af:16:33:f5:40:36:ea:cf:80:c9:
2c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3A:97:2F:70:39:38:F0:AC:43:4B:31:D5:71:52:E6:C9:DD:D3:21
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:6f:39:d0:f6:d7:cf:91:43:52:b7:56:a9:f4:59:25:93:a3:
5d:6e:b0:5a:56:7b:aa:e9:bc:d3:5b:46:0f:c3:66:59:6e:48:
4e:48:0e:73:f6:f6:46:52:a7:bf:e6:db:fb:8f:9e:fc:ad:02:
dc:4e:6f:10:06:1c:8e:3b:70:68:c8:73:17:99:94:ff:77:03:
6e:5b:95:2e:9e:80:f6:64:cf:be:d3:20:44:58:ce:98:ef:24:
95:e2:24:ef:c0:66:4e:9d:4a:ba:66:57:dc:2f:61:74:c6:d4:
56:b1:c0:fc:d9:1a:88:92:7c:66:84:16:be:6b:db:c8:af:73:
a9:da:e3:b1:af:83:31:b6:28:0b:97:f6:fb:cb:a2:52:c8:c0:
c9:65:cc:3a:69:c1:39:47:56:53:6b:1e:3b:fb:f6:25:4b:07:
a3:2e:3a:4a:ed:cf:9e:20:1f:e3:ec:d1:2f:45:ae:c3:9e:2f:
cc:9d:b8:a9:e4:9f:ae:21:7c:7d:09:12:3e:89:90:83:71:ec:
c6:86:e9:90:67:16:0e:64:22:33:ba:56:1e:49:a9:3d:6c:0d:
a0:b5:18:55:4f:20:a0:4f:4c:72:02:6a:52:e8:25:76:ee:03:
b7:1d:a9:34:81:44:e1:bd:48:cf:02:27:ac:c8:3e:b5:ee:39:
ff:f5:e8:96
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFCNUIxMTAvBgNVBAUTKDI4ODQ4REMzRjE5RTc3MjlGRkUzN0VGN0U0RjBBNUM5
QzVCNDkwRTkwHhcNMjYwNDE1MDIzNDM3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWRlZjkzZC1iM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkIpAFM8H7czWYUpT+Z2LB48fY1ow8oaOLWu/Ih+57IkPq3JfTjPYEKlRnhp/
fZgvYeSfRueT56qDPx4bMVGowURl/PSbR4oJDiGITZWhjm9AJDnZfLx3c6HUpydt
Zzq8fK+l8Gwv9xvXerg10A88pO0EsHlXwZ6TQvfhUfMWbc4cHCM763gq9okFYauE
Zwm2cCBW8OIIIoXnikl6FnH3IUJ2NzRUQIGX+s0yOV2iss5RSiGl7shOdWTBxgum
3SwUTq2VIfsCMYEOuCkvfGwMQuxB87yf7If9n5cdnF3+VMGjRsUKp5ySxeQYVEPO
JtFjoYpGr68WM/VANurPgMksEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAg6ly9w
OTjwrENLMdVxUubJ3dMhMB8GA1UdIwQYMBaAFCiEjcPxnncp/+N+9+TwpcnFtJDp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUI1Qi84RDU3RTE3Q0RE
OTUxMUVEQUU4QzZDN0FDNEY5QUUwMi9LSVNOd19HZWR5bl80MzczNVBDbHljVzBr
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tJU053X0dlZHluXzQzNzM1UENseWNXMGtPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFCNUIvOEQ1N0UxN0NERDk1MTFFREFFOEM2QzdBQzRGOUFFMDIvRUM2MUMwNjBE
REI0MTFFRDkzMzU1QzRGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3AwMA0GCSqGSIb3DQEBCwUAA4IBAQAebznQ9tfPkUNSt1ap9Fkl
k6NdbrBaVnuq6bzTW0YPw2ZZbkhOSA5z9vZGUqe/5tv7j578rQLcTm8QBhyOO3Bo
yHMXmZT/dwNuW5UunoD2ZM++0yBEWM6Y7ySV4iTvwGZOnUq6ZlfcL2F0xtRWscD8
2RqIknxmhBa+a9vIr3Op2uOxr4MxtigLl/b7y6JSyMDJZcw6acE5R1ZTax47+/Yl
SwejLjpK7c+eIB/j7NEvRa7Dni/Mnbip5J+uIXx9CRI+iZCDcezGhumQZxYOZCIz
ulYeSak9bA2gtRhVTyCgT0xyAmpS6CV27gO3Hak0gUThvUjPAiesyD617jn/9eiW
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:24:52 2026 by rpki-client