
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/A9D891D4C82B11EF8409A474C4F9AE02.roa
File: A9D891D4C82B11EF8409A474C4F9AE02.roa (raw, json)
Hash identifier: 85VnbBesAuFtmnoaNDKNK175y8YDoN8WdUlNmCsSoTg=
Subject key identifier: 16:2D:F8:74:1D:DA:F9:18:A8:8D:2A:AA:75:9D:00:B3:44:21:2F:80
Certificate issuer: /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial: E6
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/A9D891D4C82B11EF8409A474C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:15:15 +0000
ROA not before: Tue 13 Jan 2026 05:24:09 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 132221
IP address blocks: 161.248.70.0/24 maxlen: 24
161.248.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230 (0xe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Validity
Not Before: Jan 13 05:24:09 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a43be3-6837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:95:de:90:ed:40:22:2f:f7:4e:59:d2:2c:
e4:f1:5d:7a:e8:5b:03:ac:67:52:93:aa:bb:ed:b3:
4b:67:93:9f:64:85:44:d5:d9:9a:d1:a6:d2:c5:0b:
f3:1b:8e:b6:c3:c5:56:74:cf:93:6c:bf:3e:b7:08:
a5:1c:21:9c:4a:16:63:d9:72:e6:26:4b:a7:ab:e2:
cf:39:2c:21:ac:7f:10:52:9b:11:31:ec:0f:b0:7c:
04:65:2c:59:9a:1e:6c:83:47:c0:d5:43:d9:0a:53:
95:67:1d:5d:9d:da:2c:92:eb:00:05:dd:f9:f6:74:
0d:88:85:bd:5f:59:5f:05:51:77:bf:74:46:73:44:
4e:14:5d:80:82:15:69:ec:38:71:ca:23:21:a3:a1:
a2:4a:46:15:39:d8:a0:3b:ca:d2:82:8f:f0:4e:08:
62:1d:df:de:97:58:82:da:4b:1c:de:cd:47:b9:d3:
cf:95:99:64:d9:9c:a0:ea:e0:8d:66:2e:d1:e9:bb:
28:40:91:67:84:dc:ce:6a:f7:bc:5c:81:ee:45:40:
98:89:70:c7:29:1c:45:24:f5:96:83:4a:6f:6e:f4:
e4:b7:e5:f1:f3:e1:b5:71:42:46:f3:81:25:23:24:
c0:c6:96:a2:9a:e0:29:72:17:02:25:a4:b0:e5:58:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:F8:74:1D:DA:F9:18:A8:8D:2A:AA:75:9D:00:B3:44:21:2F:80
X509v3 Authority Key Identifier:
keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/A9D891D4C82B11EF8409A474C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.70.0/23
Signature Algorithm: sha256WithRSAEncryption
43:b3:6d:b7:3b:be:18:40:46:6e:2d:6c:2f:c1:0c:ef:ed:0f:
6e:a8:f3:20:cd:79:e9:cf:f9:04:46:36:1f:41:63:b8:60:f1:
4e:01:cc:93:c8:a4:e1:ee:64:a8:09:1d:78:78:6c:0a:73:b2:
44:43:da:34:41:82:63:f0:75:7f:43:81:11:e9:53:cc:b5:69:
d5:1c:5d:8a:7b:a8:77:f9:6f:82:1c:12:5b:96:b7:59:96:20:
57:a7:56:8a:33:d1:40:20:fe:c4:32:22:db:ca:da:3c:ed:7d:
28:4f:ae:42:e9:5e:82:5c:dd:f3:3e:ef:dc:e8:2c:d1:db:6d:
a6:0f:a6:cc:0c:4e:35:49:f6:c7:8a:2e:bd:43:c4:a2:1c:5d:
06:22:d5:ab:cd:bc:84:ea:21:ae:de:5c:a1:b4:4a:74:89:ce:
73:15:55:b9:46:40:b9:a8:80:18:d7:cd:ba:7b:72:f2:e5:66:
0e:75:14:66:c7:c1:1a:0d:c8:1f:e6:d4:d5:53:17:65:24:e4:
9d:45:02:c6:c0:bf:d2:24:a0:7c:42:21:38:da:39:43:fc:e3:
16:26:99:ee:ac:17:73:08:02:61:61:8b:50:dd:5a:7c:91:6e:
44:99:35:16:c4:8d:d2:fc:ea:31:a3:27:a7:5b:7b:74:f4:14:
b5:a3:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:48 2026 by rpki-client