
$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa
File: D8B25C54EC2211EA84C17E26C4F9AE02.roa (raw, json)
Hash identifier: R7VnNFxrgalauYUwfe5aX2x35cjIHiMXQfYblHnNqog=
Subject key identifier: 04:A1:DA:81:FC:0A:D9:E1:75:20:A6:FD:CB:82:36:9B:04:19:11:7C
Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Certificate serial: 08E3
Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa
Signing time: Wed 08 Apr 2026 20:26:54 +0000
ROA not before: Wed 08 Apr 2026 20:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24049
IP address blocks: 203.119.18.0/24 maxlen: 24
2001:dd8:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2275 (0x8e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B536, serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47
Validity
Not Before: Apr 8 20:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d6ba0e-1d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:21:53:be:6e:7b:6a:cd:ec:7d:a7:58:01:
23:b4:69:a3:3a:43:0d:ed:0a:0d:da:1d:a1:9e:5f:
3b:8d:c9:29:5b:5c:47:17:33:85:58:f5:45:ea:20:
cd:45:06:e6:50:79:8c:d2:0d:29:e7:af:6c:83:79:
48:71:4b:33:cf:52:0b:dd:37:d3:71:71:d1:43:26:
4d:2d:ad:95:5f:6f:d8:84:b1:ab:a1:fe:e5:0e:e7:
e0:82:ee:fd:ff:f2:1b:d9:3e:4d:9a:16:04:a3:78:
d7:99:56:02:17:fa:ee:4e:43:72:e8:45:7d:2f:26:
06:88:a9:73:3d:bb:4f:e7:f4:7f:92:09:03:d5:61:
fd:ac:cb:e8:19:5a:d3:75:61:49:9e:15:b2:11:43:
f7:37:d5:11:fb:57:56:7a:51:4f:ad:c0:8f:03:06:
94:c3:d3:16:f0:0c:68:e6:60:ee:76:43:d6:ef:89:
8a:60:4f:a7:76:0c:74:a0:b3:f9:be:28:8e:74:61:
88:13:cb:80:e2:b7:58:1b:1c:dc:45:b3:c9:5a:6a:
5f:3a:fc:8c:9f:b9:98:1c:4c:e7:3c:7d:8f:a7:88:
f8:96:3a:69:fb:c6:28:30:0e:cd:ca:32:2c:80:11:
2b:32:b0:5c:3b:59:5c:28:b8:8e:98:0a:a9:0d:ab:
0b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A1:DA:81:FC:0A:D9:E1:75:20:A6:FD:CB:82:36:9B:04:19:11:7C
X509v3 Authority Key Identifier:
keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.119.18.0/24
IPv6:
2001:dd8:1b::/48
Signature Algorithm: sha256WithRSAEncryption
e0:4e:76:44:34:95:61:88:58:e1:8e:69:32:c5:38:d2:f3:09:
5e:96:f3:33:98:b1:ea:2c:43:17:e6:ea:4f:df:89:94:a8:b8:
9c:d0:54:a4:9a:00:a6:07:5c:d0:fa:23:3a:95:5a:d2:59:70:
05:e4:2f:dd:7f:39:3b:69:e1:86:ad:0b:89:56:7c:c2:96:bb:
c3:29:a9:9b:e4:c4:fb:1b:53:d7:d4:41:ee:94:05:f9:f7:a7:
c8:cd:28:6a:93:40:15:ac:d9:98:32:49:b3:cc:4d:22:6b:36:
31:4f:49:d2:0d:8d:03:94:dc:f4:0a:4e:43:cd:92:ee:dc:0a:
98:db:e2:94:bd:89:22:cb:1a:a0:16:33:e9:30:93:b6:9b:b5:
a3:9b:fd:55:44:d3:32:3d:2f:79:d3:a4:05:44:1b:72:d4:25:
50:56:9a:d1:cb:45:16:72:ea:d0:6e:95:c3:eb:78:b5:05:45:
7e:f6:8c:68:90:1d:3f:d6:ef:40:c9:3e:24:10:da:5a:67:e2:
50:4b:cd:5a:30:9f:9e:f8:9d:42:9c:01:d3:f3:7f:7f:7b:28:
3c:ee:e3:fe:1b:4a:f7:cf:0a:8a:1a:9b:17:c1:71:4f:1e:cb:
7b:63:db:7c:cc:1d:10:92:93:df:56:4d:bf:04:09:6e:57:3d:
a0:7c:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:43 2026 by rpki-client