
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/B80A9FF60B4111EF919B0B7DC4F9AE02.roa
File: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (raw, json)
Hash identifier: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=
Subject key identifier: 5E:42:41:EA:17:D3:2A:7F:02:16:E4:96:8B:98:01:86:6A:B9:12:D1
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0B00
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/B80A9FF60B4111EF919B0B7DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:36:12 +0000
ROA not before: Sat 08 Nov 2025 19:40:28 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 7631
IP address blocks: 123.176.114.0/23 maxlen: 23
123.176.115.0/24 maxlen: 24
123.176.116.0/22 maxlen: 22
123.176.116.0/23 maxlen: 23
123.176.116.0/24 maxlen: 24
125.253.36.0/23 maxlen: 23
203.189.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2816 (0xb00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Nov 8 19:40:28 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4871c-8745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:30:c6:56:23:96:82:0e:d6:47:9c:78:88:
d3:bb:ae:ad:ac:42:67:f1:f3:e9:7f:1e:77:43:86:
be:3f:56:71:8d:97:25:b3:56:0b:50:2d:45:53:e7:
3b:ca:e9:f6:26:a5:ae:79:d5:61:b4:6a:19:89:76:
7b:e3:fc:6d:fa:c9:e6:35:69:23:d1:db:35:eb:b4:
e3:bc:47:72:72:39:d1:38:55:b5:fb:d6:3f:bc:de:
5b:ce:3c:01:c0:37:d7:3d:a0:d2:7a:53:fd:df:8c:
ef:13:41:fc:fb:a6:8a:13:6c:f7:68:4b:f0:af:6a:
9e:d2:b5:58:80:c5:23:be:5b:66:1f:5e:f3:9f:aa:
cc:15:9a:03:1f:6d:19:d6:7a:2b:c1:37:e8:b1:d7:
87:9a:6b:b1:b6:72:d2:4e:62:14:d9:66:e9:e2:e7:
40:d1:c6:bf:db:1f:4e:8e:6b:2c:8c:b5:c3:c2:7a:
48:c8:b9:a5:a0:f4:57:74:35:23:93:ba:c0:83:a6:
66:f7:62:c0:62:c7:a5:a3:f9:c3:5c:c1:45:31:3c:
13:b6:e8:28:e0:ef:d0:7c:8e:0e:c5:51:f2:2b:9a:
e7:4b:7e:12:12:99:1d:a8:7c:b8:f1:9c:b4:4e:fc:
3e:f5:68:73:10:6d:41:61:57:93:e4:ed:2f:53:f1:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:42:41:EA:17:D3:2A:7F:02:16:E4:96:8B:98:01:86:6A:B9:12:D1
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/B80A9FF60B4111EF919B0B7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
123.176.114.0-123.176.119.255
125.253.36.0/23
203.189.4.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bf:0f:c0:34:ef:50:dc:0a:c8:ab:cd:0c:a1:04:a0:0e:f5:
1a:54:e3:0b:54:8c:c9:2d:b3:6e:34:a3:94:8b:d3:d4:9c:82:
9f:71:9a:43:37:45:12:92:af:95:ba:a8:59:d5:d9:3e:4e:91:
a1:8f:a6:61:46:7a:b2:7b:0a:08:40:91:2f:ae:c8:aa:47:18:
fb:05:72:e2:a6:1b:1c:39:81:36:b3:01:5c:2c:6b:99:58:ce:
ff:19:93:c4:13:de:a3:54:09:38:6a:fe:4f:41:6c:7b:dc:18:
b8:48:c7:92:4d:0e:3c:86:75:b8:0e:6b:de:29:0b:67:75:62:
3a:3f:f4:d6:db:58:b3:46:a1:4f:ca:0b:d5:0a:4b:30:21:53:
4a:cd:b5:1d:c6:81:88:b4:72:ca:bb:6e:ae:97:7f:fa:6c:67:
a2:a8:29:c7:2e:87:05:bb:d1:24:ac:bc:95:3a:e6:2e:61:9f:
57:49:55:d0:44:ca:2d:02:57:6a:21:e3:bc:36:db:d9:1f:7e:
3f:5f:30:21:87:f7:75:ca:2d:10:f6:3a:85:56:b1:8a:47:fd:
0a:30:ed:56:35:c6:ad:f2:2c:ed:ba:21:26:55:7d:c5:0c:c3:
5a:b1:7e:a4:a8:29:3b:eb:3a:be:9f:d8:ab:9e:42:26:3d:b8:
44:a8:25:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:22 2026 by rpki-client