
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa
File: 903E0F1652BD11F0A9261F57C4F9AE02.roa (raw, json)
Hash identifier: U9H5l1ZbJh0tHhCGTWDWxFOlVgyCElxhxwRUXVPz79Y=
Subject key identifier: CE:FC:0D:69:C4:E6:4F:A2:93:8E:3E:D7:48:C1:A7:6F:10:95:5A:AA
Certificate issuer: /CN=A9144CB7/serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Certificate serial: D1
Authority key identifier: A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:27:17 +0000
ROA not before: Sun 01 Mar 2026 08:27:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16552
IP address blocks: 203.119.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144CB7, serialNumber=A298059F06537DF8C08B89255F795941A31C1800
Validity
Not Before: Mar 1 08:27:17 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3f864-eafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:db:49:5c:b5:7d:54:1e:98:39:97:10:52:90:
be:55:41:09:af:2c:2b:fd:95:7d:61:86:e8:a7:cf:
e1:cd:5c:61:bd:6a:8b:d9:cd:00:5d:79:1d:1d:63:
9e:7d:0c:9f:74:1d:81:3b:91:bc:4b:d8:1d:63:be:
59:e3:71:d4:1e:02:46:9f:5e:a0:c5:4a:a3:6c:3d:
df:7e:09:94:41:77:34:10:aa:89:37:0d:42:fe:a0:
6c:08:60:48:8f:e2:70:f0:d5:2b:86:e8:f8:9c:39:
df:0a:bd:51:18:73:d5:56:95:53:f8:07:a1:8b:f4:
f6:67:4e:e1:8a:d8:24:62:c6:29:b4:64:7e:b6:6e:
27:a3:c4:5c:de:7e:1c:50:30:dc:d0:17:d2:2d:5c:
43:53:78:04:02:60:6e:58:0e:f1:e3:e8:00:78:bc:
4d:88:e8:28:af:e6:fc:ff:cf:b1:96:51:27:03:f3:
5c:55:70:cf:e7:4d:99:da:bf:d6:68:2c:e4:05:77:
eb:ad:5d:53:37:83:a2:90:b4:f9:bf:8e:a1:d6:c1:
f7:21:71:a6:ca:bc:aa:97:41:e6:12:43:75:3f:2e:
97:70:b8:d4:60:d5:2d:5e:ff:3e:b8:bc:7d:45:68:
1c:60:7e:11:be:d6:ad:26:a7:8d:f2:81:47:96:f7:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:0D:69:C4:E6:4F:A2:93:8E:3E:D7:48:C1:A7:6F:10:95:5A:AA
X509v3 Authority Key Identifier:
keyid:A2:98:05:9F:06:53:7D:F8:C0:8B:89:25:5F:79:59:41:A3:1C:18:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/opgFnwZTffjAi4klX3lZQaMcGAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opgFnwZTffjAi4klX3lZQaMcGAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144CB7/8C93F76CE17611EFB7981B19C4F9AE02/903E0F1652BD11F0A9261F57C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.119.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:83:31:cb:71:ef:6b:3f:3d:35:02:0c:99:0a:83:50:1f:df:
64:d0:df:bb:cb:48:9d:1c:1f:1d:4e:15:08:31:c3:56:12:00:
1f:70:20:e4:96:dd:4b:84:e4:ba:4b:10:e9:8d:b7:a8:b9:10:
af:01:73:50:6f:ee:5a:4a:cc:ef:b0:ad:10:b0:5c:a5:81:a8:
08:ef:9b:6a:84:21:a3:2d:b8:57:5b:6b:b0:5d:2c:72:1f:ce:
31:b3:ac:47:a4:6b:00:25:29:4d:23:5e:77:ee:57:1f:62:b1:
19:cf:63:cb:de:eb:e1:36:15:8f:ef:f1:43:c5:92:f9:cb:e3:
22:a3:11:5d:22:ef:89:07:23:3a:16:e2:e8:71:66:63:38:c7:
4e:cb:af:9a:c4:ad:64:d5:3d:81:06:53:03:96:4e:69:d4:a4:
ad:c0:14:d9:75:84:b6:b1:8f:96:a6:c8:31:74:b9:f4:33:1f:
93:c2:bb:c8:7b:fd:c5:cc:9e:5a:ea:8b:84:a1:17:22:f7:53:
dc:44:07:cc:09:7b:f5:6c:7e:fc:b2:75:5f:cb:97:43:10:d0:
ab:6a:8b:9b:bb:91:dc:25:05:93:e9:9d:ea:3c:7f:f7:ef:29:
8f:e9:ca:8e:21:b6:2c:93:0a:f2:9b:91:7e:ea:42:81:da:48:
5d:a0:85:2f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDRDQjcxMTAvBgNVBAUTKEEyOTgwNTlGMDY1MzdERjhDMDhCODkyNTVGNzk1OTQx
QTMxQzE4MDAwHhcNMjYwMzAxMDgyNzE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjg2NC1lYWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6dtJXLV9VB6YOZcQUpC+VUEJrywr/ZV9YYbop8/hzVxhvWqL2c0AXXkdHWOe
fQyfdB2BO5G8S9gdY75Z43HUHgJGn16gxUqjbD3ffgmUQXc0EKqJNw1C/qBsCGBI
j+Jw8NUrhuj4nDnfCr1RGHPVVpVT+Aehi/T2Z07hitgkYsYptGR+tm4no8Rc3n4c
UDDc0BfSLVxDU3gEAmBuWA7x4+gAeLxNiOgor+b8/8+xllEnA/NcVXDP502Z2r/W
aCzkBXfrrV1TN4OikLT5v46h1sH3IXGmyryql0HmEkN1Py6XcLjUYNUtXv8+uLx9
RWgcYH4RvtatJqeN8oFHlvckdwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM78DWnE
5k+ik44+10jBp28QlVqqMB8GA1UdIwQYMBaAFKKYBZ8GU334wIuJJV95WUGjHBgA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NENCNy84QzkzRjc2Q0Ux
NzYxMUVGQjc5ODFCMTlDNEY5QUUwMi9vcGdGbndaVGZmakFpNGtsWDNsWlFhTWNH
QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29wZ0Zud1pUZmZqQWk0a2xYM2xaUWFNY0dBQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDRDQjcvOEM5M0Y3NkNFMTc2MTFFRkI3OTgxQjE5QzRGOUFFMDIvOTAzRTBGMTY1
MkJEMTFGMEE5MjYxRjU3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy3cPMA0GCSqGSIb3DQEBCwUAA4IBAQBLgzHLce9rPz01AgyZCoNQ
H99k0N+7y0idHB8dThUIMcNWEgAfcCDklt1LhOS6SxDpjbeouRCvAXNQb+5aSszv
sK0QsFylgagI75tqhCGjLbhXW2uwXSxyH84xs6xHpGsAJSlNI1537lcfYrEZz2PL
3uvhNhWP7/FDxZL5y+MioxFdIu+JByM6FuLocWZjOMdOy6+axK1k1T2BBlMDlk5p
1KStwBTZdYS2sY+WpsgxdLn0Mx+TwrvIe/3FzJ5a6ouEoRci91PcRAfMCXv1bH78
snVfy5dDENCraoubu5HcJQWT6Z3qPH/37ymP6cqOIbYskwrym5F+6kKB2khdoIUv
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:27 2026 by rpki-client