
$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/8836D872E37B11EFB4D75458C4F9AE02.roa
File: 8836D872E37B11EFB4D75458C4F9AE02.roa (raw, json)
Hash identifier: OwgEAbL5QCnHsVpOX5SA562X1wx0q50NZ09aIXPpfus=
Subject key identifier: 3C:E7:E1:E7:21:93:9F:0D:9A:92:2F:1E:1F:CA:92:88:B3:8C:D0:5F
Certificate issuer: /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Certificate serial: C7
Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/8836D872E37B11EFB4D75458C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:58:25 +0000
ROA not before: Wed 05 Feb 2025 04:41:58 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 153571
IP address blocks: 161.248.248.0/23 maxlen: 23
161.248.248.0/24 maxlen: 24
161.248.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Validity
Not Before: Feb 5 04:41:58 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3e391-b9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:d7:fd:68:ce:c7:87:2c:7b:fc:29:ed:3b:
24:7a:26:bf:8d:d5:ac:07:c1:ab:7e:83:47:f4:62:
8f:78:d3:d3:e5:15:9f:83:91:38:21:b8:21:6f:da:
14:40:8a:21:1c:f8:15:d9:41:bb:3b:25:4b:e4:51:
f6:9c:bf:b8:a3:69:bf:11:71:9a:f6:eb:18:1c:d9:
c2:63:78:c8:5f:43:72:c6:bd:80:dc:d6:28:c0:16:
c4:64:13:00:d0:39:06:30:b2:0c:14:2d:0d:c0:05:
66:81:1a:a8:19:96:96:66:28:8a:fd:47:2b:d2:0b:
d2:16:50:64:42:24:a7:79:c7:a6:26:07:de:3f:88:
96:16:99:c7:6a:13:55:51:79:e4:ec:b1:87:a2:60:
06:73:6f:b8:27:85:82:a0:87:6a:21:63:80:36:c6:
9e:69:1d:be:17:50:36:02:e3:73:90:62:c7:eb:85:
30:a7:e6:6f:6c:8e:dd:2e:66:8a:a6:ab:20:c1:f3:
0d:c1:b0:24:6b:89:7b:81:fe:fd:8e:7e:49:aa:17:
e8:5e:f5:9f:c7:e2:b7:66:4b:27:7f:bc:1b:66:99:
8b:ce:94:2f:b6:98:71:8c:69:3a:a6:9d:28:97:80:
8d:9f:73:b2:67:19:57:30:10:a9:b9:f3:c5:b5:89:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:E1:E7:21:93:9F:0D:9A:92:2F:1E:1F:CA:92:88:B3:8C:D0:5F
X509v3 Authority Key Identifier:
keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/8836D872E37B11EFB4D75458C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.248.0/23
Signature Algorithm: sha256WithRSAEncryption
13:ef:a9:d6:97:7b:02:8a:89:01:05:4d:ba:bf:af:58:d0:da:
59:43:c0:ef:38:8d:b6:fb:6b:0d:d9:02:dc:86:f8:78:66:43:
d0:5d:e6:f0:38:62:0d:a4:97:b9:3b:0a:00:b5:a1:9a:bb:e5:
db:ac:89:91:86:98:db:4c:1a:14:6a:75:85:4c:94:71:bc:51:
59:af:18:0f:46:9d:fc:6d:42:69:e4:eb:6a:cf:27:70:54:3c:
b6:c3:bc:ae:5d:42:74:11:4e:23:49:a8:ae:d4:3c:22:0e:94:
69:24:cc:0d:19:e3:1a:e8:2a:99:12:e9:35:64:a3:48:69:5b:
f6:4e:f3:49:6c:05:b7:0c:3b:7d:7a:f7:f3:15:9f:00:08:58:
c4:05:2b:fe:fe:1f:71:a1:50:18:c2:27:f0:41:aa:11:9f:28:
41:eb:8e:be:88:33:5d:c5:d7:8c:be:d5:b9:b9:34:e7:38:ed:
20:7d:7f:b4:89:48:5f:5b:53:45:63:51:36:61:f4:53:dc:3b:
ef:f7:20:75:56:3a:74:35:f6:3f:33:0c:14:c4:0e:21:74:b4:
79:b6:5d:ec:81:ab:8b:8f:3d:2b:62:bc:56:2b:6a:b5:fd:bd:
aa:f7:d6:81:60:1a:f7:ce:77:63:4c:49:60:8c:0f:6a:92:6b:
a0:6c:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:45:37 2026 by rpki-client