
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/9F9EE58C783011F0B097E07BC4F9AE02.roa
File: 9F9EE58C783011F0B097E07BC4F9AE02.roa (raw, json)
Hash identifier: fSYltpxk2u14lPvWhCXB9QKuMuDj8l4c6pcDEmZNiXo=
Subject key identifier: 2E:EA:6C:C7:4A:BC:81:E4:09:65:72:6E:D1:BC:96:DA:EC:65:65:F3
Certificate issuer: /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Certificate serial: 76
Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/9F9EE58C783011F0B097E07BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:20:53 +0000
ROA not before: Fri 13 Feb 2026 06:26:34 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140637
IP address blocks: 203.31.52.0/24 maxlen: 24
203.31.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118 (0x76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22
Validity
Not Before: Feb 13 06:26:34 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a42115-d425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:79:50:fa:6c:9e:46:5d:c9:3c:e3:e7:63:
53:4b:9e:9c:d2:33:11:8d:f6:5f:59:9b:13:44:b7:
2b:11:dc:ce:a4:18:72:1d:bb:22:61:73:4d:7e:f1:
96:db:f7:b2:8f:26:b3:99:df:74:af:fb:8a:54:94:
09:75:96:1d:08:6d:b7:50:7f:d3:5f:81:19:8d:dd:
52:62:8a:28:3c:17:32:57:f7:49:c8:38:12:e5:bd:
ff:cb:59:19:bf:b7:f1:0c:34:d5:18:b0:63:68:09:
82:f7:7d:41:06:1a:ee:cd:4e:95:ca:2c:e7:3b:e1:
05:1f:7e:92:e1:56:f5:28:a6:cd:78:96:b2:a4:91:
64:84:4f:2a:84:30:eb:01:2d:93:68:19:86:5f:be:
f1:84:14:5c:8d:76:37:43:17:83:4b:44:9e:f4:94:
2b:b6:8a:c0:27:80:28:ce:fd:cb:4c:9b:07:f2:e7:
3d:84:b2:44:ca:bc:39:78:8c:27:bd:61:fc:70:02:
d1:3d:25:bf:fb:ad:73:f2:76:1f:82:82:49:3a:40:
1a:10:b0:be:bc:fd:7b:cf:90:e6:d9:76:59:fb:4b:
f0:25:9a:ea:83:04:1f:37:b9:d6:14:9f:17:71:92:
b1:71:9a:47:d6:08:f7:ee:f5:ff:a0:e5:aa:21:c5:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EA:6C:C7:4A:BC:81:E4:09:65:72:6E:D1:BC:96:DA:EC:65:65:F3
X509v3 Authority Key Identifier:
keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/9F9EE58C783011F0B097E07BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.31.52.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:61:2c:8e:44:1a:47:a8:db:21:30:2a:85:92:a7:41:f5:5c:
af:b6:4a:90:a6:d3:c1:23:06:5a:3b:79:39:6f:90:5e:5b:84:
96:88:d0:5b:16:8d:ef:9a:c6:d1:2a:58:89:b9:c9:88:5f:cb:
5e:40:78:5b:3f:e3:af:5c:6d:d7:7d:e5:70:39:06:74:7d:7e:
7c:f8:c4:03:53:a5:6f:a2:24:36:38:fb:d2:67:9a:99:31:ac:
22:24:a3:df:a4:bd:4b:86:ca:5f:c8:ec:13:a8:60:03:50:ab:
a7:40:56:07:f3:87:c2:30:f4:af:27:0c:7b:40:4e:c6:a8:6c:
99:6e:c0:b5:14:5d:3a:21:a9:c3:63:35:ca:88:51:9a:e9:94:
e0:a6:5c:20:6c:a6:03:fd:bf:f4:71:53:4a:80:47:3c:ba:01:
58:10:93:50:7b:81:82:87:cd:01:22:ad:d6:bf:06:4b:c4:6d:
5c:98:df:92:ca:4a:54:b2:ca:9c:39:21:5d:66:26:50:e0:b6:
b3:7f:75:29:3c:e0:8e:c3:11:b5:70:f3:6c:30:88:ff:7e:24:
73:f5:7f:be:2b:79:02:ce:3c:ee:53:bd:84:fc:97:2e:bd:c0:
8a:24:b6:2a:d2:04:6d:10:87:1b:3f:d5:d7:78:d5:24:de:aa:
fe:16:63:0d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:15 2026 by rpki-client