
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/47E1F234B45111EEA556091EC4F9AE02.roa
File: 47E1F234B45111EEA556091EC4F9AE02.roa (raw, json)
Hash identifier: y7FzZtWFboD8vtJhkIMB4U1/N9/RdxpQzgNAs6lz9Ac=
Subject key identifier: 2D:F4:12:89:56:D4:D1:4E:F1:2F:F0:70:92:D7:BB:9B:20:F6:9E:63
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 35C9
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/47E1F234B45111EEA556091EC4F9AE02.roa
Signing time: Tue 31 Mar 2026 16:13:49 +0000
ROA not before: Tue 31 Mar 2026 16:13:49 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 56176
IP address blocks: 118.188.0.0/20 maxlen: 20
118.188.16.0/23 maxlen: 23
118.188.26.0/23 maxlen: 23
118.188.28.0/23 maxlen: 23
118.188.30.0/23 maxlen: 23
118.188.32.0/19 maxlen: 19
118.188.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 15:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13769 (0x35c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F, serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 31 16:13:49 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cbf2bd-82ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:9e:27:4a:8f:5d:05:b4:5b:f0:43:0e:08:
c9:73:91:e2:f3:37:21:ca:42:2f:39:54:99:37:81:
6c:10:26:ba:43:2f:4b:76:15:17:bc:61:ad:e9:a4:
2d:df:20:2f:73:ae:48:19:bb:cf:ac:5a:55:25:ca:
5c:2b:09:9a:44:a4:8a:3d:57:5b:44:42:1a:e3:a8:
c9:7d:5d:0f:7f:76:25:c7:b6:cb:ba:64:83:51:6c:
09:9b:6f:97:cb:52:da:26:b4:6d:7c:da:53:a2:96:
28:ab:14:6b:fa:9d:96:18:00:8a:fb:d9:3b:cf:eb:
ce:c5:bc:ba:98:6d:6a:3a:8b:8d:47:73:67:58:51:
fb:49:fb:d8:8d:f9:e2:a2:e4:e1:f8:9c:a1:7f:16:
69:8e:8a:cb:4f:fb:83:38:b5:6c:0e:e6:4d:89:22:
06:cd:91:5b:bb:c7:30:cd:b6:ed:dd:b9:23:6a:0a:
6b:91:cd:1f:45:ef:39:86:72:b1:1c:fe:4d:5f:94:
2d:a6:70:d3:19:7e:e2:46:41:b6:96:33:57:84:59:
8e:85:ea:04:2e:0b:03:e7:0b:9c:26:28:05:90:b3:
4e:1d:c6:2e:0f:c9:8b:79:5d:fd:ba:46:0e:67:69:
0c:80:3c:2b:ae:c8:10:ab:57:43:d7:ec:34:5f:b0:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F4:12:89:56:D4:D1:4E:F1:2F:F0:70:92:D7:BB:9B:20:F6:9E:63
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/47E1F234B45111EEA556091EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.188.0.0-118.188.17.255
118.188.26.0-118.188.127.255
Signature Algorithm: sha256WithRSAEncryption
3c:84:71:83:ba:51:36:80:28:1c:bf:e1:c3:b4:94:fa:63:92:
c2:56:93:16:59:e7:f1:0a:49:4e:cc:1d:b3:f4:9f:f8:de:0a:
75:66:4d:34:d4:69:7d:4a:be:5d:d4:8a:e0:e3:8e:13:04:2e:
25:d4:3a:97:41:ba:71:1c:53:8b:f4:9b:c0:1d:b5:73:6c:62:
46:a9:66:6c:61:d4:a2:a2:22:cf:db:17:47:60:0a:eb:38:a4:
23:2a:6c:ef:96:78:4d:b5:d6:95:7f:fd:de:0f:9a:18:a6:ff:
80:1f:39:ac:a5:47:e1:ca:1d:25:d3:d6:67:2a:35:a2:df:1e:
d0:01:20:1f:7c:56:f1:b1:86:db:ce:5f:3b:16:01:71:ad:f8:
03:73:04:9a:02:df:9f:e5:52:fc:a3:a2:3d:11:c4:4d:8f:33:
e8:b3:2d:b1:29:a6:75:32:20:4a:b3:7c:d0:f7:1b:f2:e5:e7:
92:49:01:53:4b:ac:ca:9c:88:e2:ec:0e:c2:f7:c7:46:e2:84:
0a:39:bb:f3:49:ea:96:8d:4e:9a:1e:94:ee:65:23:71:5f:b7:
bc:e4:fe:75:9c:77:b0:7a:61:fc:8a:22:d7:cb:63:e9:e3:f3:
af:ad:77:ed:9c:84:2e:ba:2f:e2:18:95:0f:0b:11:28:06:db:
44:14:7e:a4
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICNckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjYwMzMxMTYxMzQ5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNiZjJiZC04MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveCeJ0qPXQW0W/BDDgjJc5Hi8zchykIvOVSZN4FsECa6Qy9LdhUXvGGt6aQt
3yAvc65IGbvPrFpVJcpcKwmaRKSKPVdbREIa46jJfV0Pf3Ylx7bLumSDUWwJm2+X
y1LaJrRtfNpTopYoqxRr+p2WGACK+9k7z+vOxby6mG1qOouNR3NnWFH7SfvYjfni
ouTh+JyhfxZpjorLT/uDOLVsDuZNiSIGzZFbu8cwzbbt3bkjagprkc0fRe85hnKx
HP5NX5QtpnDTGX7iRkG2ljNXhFmOheoELgsD5wucJigFkLNOHcYuD8mLeV39ukYO
Z2kMgDwrrsgQq1dD1+w0X7CeDQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFC30EolW
1NFO8S/wcJLXu5sg9p5jMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvNDdFMUYyMzRC
NDUxMTFFRUE1NTYwOTFFQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAh
BAIAATAbMAsDAwJ2vAMEAXa8EDAMAwQBdrwaAwQHdrwAMA0GCSqGSIb3DQEBCwUA
A4IBAQA8hHGDulE2gCgcv+HDtJT6Y5LCVpMWWefxCklOzB2z9J/43gp1Zk001Gl9
Sr5d1Irg444TBC4l1DqXQbpxHFOL9JvAHbVzbGJGqWZsYdSioiLP2xdHYArrOKQj
KmzvlnhNtdaVf/3eD5oYpv+AHzmspUfhyh0l09ZnKjWi3x7QASAffFbxsYbbzl87
FgFxrfgDcwSaAt+f5VL8o6I9EcRNjzPosy2xKaZ1MiBKs3zQ9xvy5eeSSQFTS6zK
nIji7A7C98dG4oQKObvzSeqWjU6aHpTuZSNxX7e85P51nHewemH8iiLXy2Pp4/Ov
rXftnIQuui/iGJUPCxEoBttEFH6k
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:04:43 2026 by rpki-client