
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa
File: A8949F64D86E11E982BA0712C4F9AE02.roa (raw, json)
Hash identifier: X4LATPCKHxi0BpzBlW5Akqkm4GKFiRGzj6NqAdLIqbI=
Subject key identifier: D2:37:08:33:20:BA:D6:0C:68:1F:D2:E8:F6:1A:75:FE:3A:E8:D8:EF
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 13CC
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:33:13 +0000
ROA not before: Sat 20 Dec 2025 17:14:35 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139653
IP address blocks: 2403:cfc0:1014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5068 (0x13cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Dec 20 17:14:35 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48669-1d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:41:34:d6:3e:76:1f:e4:3b:d9:55:c6:6d:
81:e0:02:16:84:69:3f:93:1e:aa:a5:8c:ac:db:4a:
3f:81:02:45:35:46:c9:66:5f:14:ad:56:1a:38:84:
62:f1:fc:f9:20:ad:8d:fc:67:67:a9:2a:13:67:24:
db:84:11:7f:90:22:97:bf:01:a0:f3:54:19:e4:a7:
0f:2d:17:ee:87:8c:53:cc:c3:34:57:1e:b5:9d:34:
a2:ff:68:54:26:da:77:68:8b:b6:97:9d:7a:89:18:
f9:72:41:7f:92:f2:8a:0c:6a:2e:27:39:4a:c5:ed:
1a:be:52:ed:62:38:f2:a1:a0:47:0d:7b:69:31:ec:
46:40:19:ea:76:31:28:3e:b1:c9:81:33:30:f1:92:
c7:04:e9:d0:07:cd:d8:46:66:6e:d7:5c:dd:29:bf:
29:c6:ef:4c:80:71:90:06:32:3b:f3:88:41:32:97:
c9:0e:64:be:39:37:fa:2f:30:55:10:09:d1:1a:e0:
84:cb:ab:7f:54:19:27:9d:8d:da:83:1c:a3:d0:f7:
d7:24:e7:ff:27:ce:78:c6:21:27:20:3d:a4:ed:7a:
1e:70:83:9d:08:a4:8b:32:fb:7b:59:17:ca:19:0c:
97:b7:13:8d:56:b4:dc:63:86:8e:1b:a1:69:3e:ee:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:08:33:20:BA:D6:0C:68:1F:D2:E8:F6:1A:75:FE:3A:E8:D8:EF
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/A8949F64D86E11E982BA0712C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2403:cfc0:1014::/48
Signature Algorithm: sha256WithRSAEncryption
82:55:a9:1f:38:67:b7:80:cc:00:7b:62:f7:6e:84:f7:c1:71:
78:62:c3:68:69:df:cd:d1:48:e7:19:31:d5:41:80:6a:5e:fd:
c5:49:02:8b:f0:1a:5a:4d:3c:92:8a:3d:0a:42:a3:70:2e:0c:
5c:7c:54:9d:94:f2:dc:60:d7:25:3a:f8:56:3e:df:a6:fc:cd:
57:cd:c8:a3:18:51:9a:a9:80:6a:51:a5:a7:cd:84:39:86:f7:
46:5c:1f:68:ec:44:10:61:5e:84:ff:7e:c2:61:be:37:69:91:
70:8b:bc:ee:bd:d9:e5:6b:2a:c8:cb:14:a0:09:d1:22:de:a2:
48:7a:df:2f:41:c0:62:92:ef:22:7b:ee:27:9c:4b:e0:d1:bd:
45:18:2d:6c:ab:4e:4b:35:27:92:bb:d6:1b:ee:4b:d6:2e:10:
d7:2b:df:43:a8:c8:9f:af:9a:8e:ec:78:52:24:da:51:6e:01:
f0:e5:31:2d:0b:51:06:84:aa:f7:4f:55:e2:99:e4:93:f1:6e:
a3:b1:be:32:f3:48:9c:0a:43:9d:16:f3:31:de:a0:07:78:59:
d7:a2:1f:db:65:25:e7:08:07:75:92:1a:aa:a2:d5:4f:77:1a:
3d:64:2b:e5:1b:9b:ee:58:94:3c:78:17:67:8e:71:5e:01:61:
83:1a:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:45 2026 by rpki-client