
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/8CA88A568FD611F09FFCA92CC4F9AE02.roa
File: 8CA88A568FD611F09FFCA92CC4F9AE02.roa (raw, json)
Hash identifier: TxrrC9wYr/I+aWhB4yIA14fUgs+AJHTP94jMCdYeTOE=
Subject key identifier: DD:8A:F1:E8:32:27:B8:BA:48:F5:DF:2B:9C:C4:F7:A5:83:4A:88:91
Certificate issuer: /CN=A9157B07/serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE
Certificate serial: 58
Authority key identifier: CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/8CA88A568FD611F09FFCA92CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:30:03 +0000
ROA not before: Fri 12 Sep 2025 12:46:49 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 154219
IP address blocks: 203.34.241.0/24 maxlen: 24
2001:df6:1cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl
rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157B07, serialNumber=CCE9C5624BACF9D0985E3F2D6E31E6B2D86D82AE
Validity
Not Before: Sep 12 12:46:49 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3dceb-6693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:d3:8a:a0:d4:f2:81:85:f6:05:31:71:da:
6e:8a:b4:70:f4:60:d9:e1:93:e0:70:83:bf:c7:42:
5d:b8:6d:99:d9:f6:0c:91:8f:00:6a:43:23:8d:12:
0e:6a:79:ef:2e:10:f6:22:ec:91:e8:42:1c:25:de:
7e:68:3b:a7:1d:37:51:1d:b8:3a:9e:47:33:fa:73:
9f:f3:04:3b:75:d3:9e:36:3b:01:d2:72:49:42:70:
a3:66:1d:02:5c:a5:4e:24:6c:0c:14:0a:a2:bb:5b:
f0:a4:e8:ee:64:37:39:2a:47:28:57:34:81:5e:2f:
8b:46:63:8d:ed:11:e6:54:68:bc:a6:73:b6:62:e2:
83:4a:e6:6d:2f:69:77:67:71:a0:98:dc:3c:28:d5:
fa:e0:f3:06:69:7b:98:fc:77:9f:f5:27:4d:23:3f:
f4:ad:82:d9:d1:53:25:16:1a:e7:1d:55:c5:e2:33:
80:2f:c1:e5:23:5c:31:78:80:87:11:fc:05:77:59:
c8:22:07:3d:95:5d:ed:ef:9b:ad:91:6b:c2:48:86:
58:ba:a1:b9:5f:e3:4b:a4:80:7b:56:b3:b6:0b:ec:
2e:e5:27:09:8b:65:24:1d:89:d3:77:5e:da:47:64:
21:98:48:73:7b:6c:07:98:41:18:f7:2e:c3:64:e1:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8A:F1:E8:32:27:B8:BA:48:F5:DF:2B:9C:C4:F7:A5:83:4A:88:91
X509v3 Authority Key Identifier:
keyid:CC:E9:C5:62:4B:AC:F9:D0:98:5E:3F:2D:6E:31:E6:B2:D8:6D:82:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/zOnFYkus-dCYXj8tbjHmsthtgq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOnFYkus-dCYXj8tbjHmsthtgq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157B07/D88544928FD511F0A61C9B2BC4F9AE02/8CA88A568FD611F09FFCA92CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.34.241.0/24
IPv6:
2001:df6:1cc0::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d5:30:23:1e:77:86:93:e6:1c:3a:1c:b6:ae:ec:b4:a1:8e:
a9:bd:6f:fe:7f:85:99:4b:9f:a5:6f:0a:10:20:72:ff:bf:c2:
64:6c:eb:ec:da:84:5e:11:26:86:98:70:0b:ee:25:d2:ae:d0:
77:4c:37:0f:34:d9:f6:ca:70:57:0a:89:21:be:b5:df:64:61:
0c:65:45:07:7f:fa:f3:e3:c2:49:d1:3b:4e:dd:85:4e:60:b3:
8b:02:cc:eb:ec:fd:c9:f8:13:53:3f:4b:a1:cd:08:6f:59:49:
d6:ba:5c:69:69:fb:aa:c5:3d:a6:97:c9:3b:ee:a4:e1:45:02:
d2:99:79:22:a0:27:9d:92:27:9e:1a:9c:51:13:7d:95:6a:fc:
15:9a:a9:d8:fc:32:57:96:1a:d6:73:8d:48:da:b4:98:b9:7c:
f4:3d:42:c6:cc:8c:48:18:bd:ed:65:02:f4:cb:dd:10:41:64:
81:4b:0d:42:16:29:31:63:ce:79:ea:89:db:0b:55:3b:d3:92:
4f:76:2b:75:0e:e9:46:28:e0:b6:dd:42:2e:12:93:b0:ad:ed:
96:24:9b:fb:9b:1a:18:0f:1d:bf:d2:40:54:69:b4:5f:9b:1a:
30:ff:85:16:99:86:d4:87:8b:59:d3:ec:05:2a:ff:31:86:40:
59:4e:64:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:43 2026 by rpki-client