
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/5B49C0145D3E11EE93D0E174C4F9AE02.roa
File: 5B49C0145D3E11EE93D0E174C4F9AE02.roa (raw, json)
Hash identifier: ToDqmpyYy9fDyBGitKxxqoCmfFWhXOoX4JrjahgKPgk=
Subject key identifier: 05:AA:5F:1E:8D:FD:AC:28:27:9D:33:87:5A:E8:CB:77:FD:0F:86:7B
Certificate issuer: /CN=A915AF7A/serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Certificate serial: 01D6
Authority key identifier: F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/5B49C0145D3E11EE93D0E174C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:58:32 +0000
ROA not before: Sun 20 Apr 2025 22:53:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142162
IP address blocks: 103.167.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A, serialNumber=F10892F85468BF004EEF5F4E1FA5917F0632A049
Validity
Not Before: Apr 20 22:53:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48c58-d536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:4c:3e:7e:02:ab:29:8a:7d:e8:90:cd:05:
07:23:af:99:56:8b:95:cf:90:02:81:81:b5:55:2a:
91:d6:3d:32:3d:23:0c:03:55:e5:38:c2:64:b3:44:
36:9c:43:3b:96:69:b8:0b:30:79:c1:84:88:35:17:
0d:06:94:83:e1:cc:f5:b5:41:83:ed:37:d6:7c:6e:
67:4a:df:5f:35:ce:4d:1f:c2:f1:15:e4:67:c8:13:
64:6c:d2:0b:9e:d4:31:2f:79:0f:a6:8f:80:2d:cd:
27:fb:27:8c:51:d2:48:20:fb:29:d1:72:eb:4b:02:
41:24:78:e2:be:b0:a2:6f:da:14:1b:5e:80:cd:2f:
60:8d:ea:ff:ed:fd:bf:06:a0:b3:11:26:08:93:82:
c0:b9:68:bf:81:74:ca:1f:d1:0e:e9:52:13:fc:7c:
7f:df:a3:02:71:0c:d2:62:2b:87:6d:5d:15:a5:58:
c9:fd:a1:d9:94:fc:d0:04:93:d9:6c:9e:f3:49:b4:
e6:5b:f6:bf:1b:90:18:19:bb:2e:67:17:e8:22:ac:
75:fa:c7:fa:f1:04:48:db:91:51:cf:b0:37:11:5b:
51:75:08:40:da:c2:91:eb:69:4f:4c:5a:76:53:0f:
05:72:e6:43:85:50:66:73:4d:9a:10:f4:7c:37:c1:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:5F:1E:8D:FD:AC:28:27:9D:33:87:5A:E8:CB:77:FD:0F:86:7B
X509v3 Authority Key Identifier:
keyid:F1:08:92:F8:54:68:BF:00:4E:EF:5F:4E:1F:A5:91:7F:06:32:A0:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/8QiS-FRovwBO719OH6WRfwYyoEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QiS-FRovwBO719OH6WRfwYyoEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/5B49C0145D3E11EE93D0E174C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:75:01:d1:d0:ce:b6:38:6c:ce:f6:90:8c:00:0b:56:66:08:
b9:b8:aa:f1:fd:d4:32:01:50:39:b3:b6:69:38:e9:7c:c0:8e:
e3:5d:17:5a:32:af:a2:5c:ab:78:a9:40:2e:60:1a:96:44:70:
37:16:45:23:91:05:fb:a5:01:67:42:45:ac:a6:ec:19:71:a9:
23:23:dd:52:f2:68:7e:bf:d0:4b:58:44:30:b0:70:50:e7:31:
67:6b:2c:f2:88:fc:80:33:e3:6e:6c:63:5b:95:a2:c3:99:24:
08:9b:37:8d:d1:e4:14:47:ef:25:7e:38:9e:e5:27:ce:af:57:
9d:e1:5e:1f:bd:4a:52:45:3b:ea:e1:41:e9:6f:a7:e5:b9:0d:
59:a7:84:e4:a0:a1:38:5e:db:c9:2e:28:b6:d5:ce:2c:a8:d4:
4a:7c:62:b3:2b:ef:7b:6f:c4:3e:0d:60:9f:02:b5:85:d5:be:
d1:96:0c:2b:87:cb:60:d7:84:b1:59:27:f7:4c:78:11:47:2a:
16:a4:33:a9:47:7c:41:5c:d6:8f:45:1b:17:3b:8a:71:37:2e:
e2:92:8c:79:dc:fb:15:4d:6c:9b:3e:07:d8:73:98:c6:67:9f:
48:6a:32:67:a7:9c:1e:21:dd:67:56:95:d6:e5:35:64:6b:9f:
ac:78:08:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:27:26 2026 by rpki-client