
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/45322DB8BF9111F0B4CD4C4FC4F9AE02.roa
File: 45322DB8BF9111F0B4CD4C4FC4F9AE02.roa (raw, json)
Hash identifier: y52vjz0PqAr4Sn8nEwEisp6b6oYmOWXO9/pS8U9Wjh4=
Subject key identifier: 85:DF:05:48:07:4A:4D:FE:BD:63:E0:FF:05:0D:70:70:A7:1B:C5:D2
Certificate issuer: /CN=A915FDD9/serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Certificate serial: 0109
Authority key identifier: 96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/45322DB8BF9111F0B4CD4C4FC4F9AE02.roa
Signing time: Sat 07 Feb 2026 06:25:00 +0000
ROA not before: Sat 07 Feb 2026 06:25:00 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 153531
IP address blocks: 161.248.218.0/24 maxlen: 24
161.248.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FDD9, serialNumber=967B97D9E311250D82942D27E4C5F90D98138058
Validity
Not Before: Feb 7 06:25:00 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6986dabc-b50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:69:c2:cc:78:1d:d4:35:93:70:15:9f:f2:f7:
39:ef:ba:1f:eb:39:a7:3c:1c:a0:60:55:e1:50:11:
e6:bd:33:dd:31:fb:6b:90:22:3c:03:cf:63:4f:e5:
72:52:3e:2c:39:c8:d6:57:01:08:9a:02:64:a9:b4:
11:dd:b3:f0:51:71:04:2b:23:ea:28:25:7c:d6:ce:
ee:18:2d:88:71:be:8a:8c:6a:93:96:87:5f:f3:ce:
da:f9:6f:a2:2b:33:ff:95:b5:0d:3d:1b:57:d5:83:
8e:19:0f:c1:f7:f5:e5:e0:3f:b4:31:c4:37:c7:69:
ac:37:a2:2c:83:f6:cc:3e:b3:82:bc:31:b7:67:f0:
71:a6:9c:c0:d8:24:15:f2:7c:a2:5a:d3:02:02:d8:
0c:71:90:87:7b:d3:6f:bd:5b:d3:05:12:dc:5f:9b:
fc:1a:ab:03:ff:53:8f:fe:13:f4:6a:e8:9a:4d:59:
6a:e4:c4:e8:38:79:aa:b0:de:35:7b:3c:dc:1e:79:
60:11:cc:49:93:d0:96:4a:3b:88:ba:0a:5d:2a:a7:
5d:2d:4d:bf:72:51:7c:af:47:e1:bc:f3:00:f0:bc:
2d:c3:8f:4a:43:64:93:2d:bb:aa:f7:84:aa:ce:16:
36:49:d5:67:0f:11:62:02:bf:61:fd:d2:7e:98:f2:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DF:05:48:07:4A:4D:FE:BD:63:E0:FF:05:0D:70:70:A7:1B:C5:D2
X509v3 Authority Key Identifier:
keyid:96:7B:97:D9:E3:11:25:0D:82:94:2D:27:E4:C5:F9:0D:98:13:80:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lnuX2eMRJQ2ClC0n5MX5DZgTgFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/B622FA8AD6DE11EFB0474E1BC4F9AE02/45322DB8BF9111F0B4CD4C4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.218.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:26:d7:57:1a:88:46:b0:c0:f1:42:1e:7f:98:3f:93:b7:6e:
a7:0d:6e:37:65:6d:d7:2c:d2:3a:30:00:30:f3:ce:cb:33:1b:
e5:aa:25:a7:3b:07:44:65:11:a5:2d:a3:19:68:df:ed:79:b5:
2c:98:6d:a6:ca:54:1b:e9:a2:fc:6d:4e:b3:38:62:7e:e7:a6:
a5:24:0d:49:ac:a6:60:15:e7:c8:8a:ac:43:15:4b:8c:f8:31:
4d:07:46:78:42:bc:75:02:2d:47:b9:84:c4:44:49:0d:65:11:
e4:71:d2:88:4f:eb:ad:cb:e5:93:6c:89:a8:e3:57:9b:d0:d4:
ca:2c:ae:94:62:4a:81:c0:4b:a7:87:4d:37:14:ac:2d:34:a5:
d7:67:69:d4:ea:5d:41:fc:4f:cb:4d:96:81:d5:53:d3:cb:b6:
57:50:63:bb:a6:f5:1f:7a:18:87:3f:98:f6:ad:f9:4c:4b:52:
26:2e:72:9b:a5:0a:21:11:3b:94:4f:eb:d1:f4:da:ed:6a:1e:
67:67:33:17:ec:b6:dd:19:76:e2:74:3b:c0:1c:eb:b6:10:21:
ec:05:f3:78:82:9e:a0:f7:9a:e5:3d:c8:ed:6a:c6:86:b2:40:
8e:07:de:a6:66:97:85:ef:ec:8a:97:ff:db:ec:9b:3a:e4:94:
53:7a:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:12 2026 by rpki-client