
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
File: EDADA2842BD911F0BD5FC622C4F9AE02.roa (raw, json)
Hash identifier: bVsu56znidGrIajKiO+ImUloohJgR7Y2wqgwesz6s7s=
Subject key identifier: AC:C5:F9:57:CF:0D:65:27:7F:97:D3:7D:23:40:55:3F:05:A3:50:81
Certificate issuer: /CN=A9161A95/serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Certificate serial: 9E
Authority key identifier: B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:19:06 +0000
ROA not before: Wed 11 Feb 2026 06:29:04 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153548
IP address blocks: 161.248.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161A95, serialNumber=B6AC587EC27D535ECF4D8FDE171176579DAF4D4F
Validity
Not Before: Feb 11 06:29:04 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a420aa-ab78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:ef:09:98:4e:f4:58:0f:11:e0:a8:3a:58:
3e:05:1d:d0:35:35:e7:4e:66:b8:ad:07:53:50:b3:
2e:67:63:c5:6c:3e:8c:86:44:2a:55:d0:ab:80:3a:
df:12:5c:01:d1:6c:90:01:67:9d:69:bb:ef:ea:31:
33:80:55:9a:7b:3f:0a:de:21:25:64:8e:64:89:47:
0d:6c:b1:d6:fb:84:9f:7a:d5:12:db:88:ef:ca:26:
53:a2:83:66:32:ab:a0:51:cb:d2:f8:f5:34:d0:cd:
3a:57:63:29:ee:61:f5:91:d6:e0:33:4f:86:6f:e2:
75:6e:ec:12:00:34:44:e1:cb:92:dc:6c:6a:30:80:
21:20:21:39:fa:a7:42:4c:ee:04:bf:0e:f2:c2:0b:
b5:e1:0e:93:e8:3a:10:80:c7:53:9b:1f:1f:3e:32:
0c:06:31:2e:a1:63:39:f3:56:44:14:62:85:51:2e:
9f:70:57:0a:33:47:b1:69:ac:ab:ec:2a:27:40:53:
67:5f:b9:ba:28:e5:a5:70:59:4f:59:01:f2:0a:fc:
4b:f3:d2:0a:8d:77:b0:e7:90:e1:cc:df:7d:ab:e4:
34:85:c2:8b:98:98:96:59:96:e0:9e:e4:46:a6:6d:
79:28:a6:28:04:1a:bb:ea:d4:73:12:e2:f3:73:03:
3a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:F9:57:CF:0D:65:27:7F:97:D3:7D:23:40:55:3F:05:A3:50:81
X509v3 Authority Key Identifier:
keyid:B6:AC:58:7E:C2:7D:53:5E:CF:4D:8F:DE:17:11:76:57:9D:AF:4D:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/tqxYfsJ9U17PTY_eFxF2V52vTU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tqxYfsJ9U17PTY_eFxF2V52vTU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161A95/8C44A9342BD911F0AB443122C4F9AE02/EDADA2842BD911F0BD5FC622C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.232.0/24
Signature Algorithm: sha256WithRSAEncryption
84:87:a7:cf:bc:d3:5d:f5:e1:04:31:ee:80:26:a0:e9:88:ca:
4c:f2:9b:1a:b9:6d:fb:23:68:04:2d:8d:59:be:b0:58:af:f1:
49:f6:bc:3f:43:12:14:9e:e3:43:09:9f:a9:31:ca:eb:60:52:
81:23:b0:0a:9c:32:ff:3f:28:4f:bb:08:fe:0c:77:43:f5:5b:
76:f4:ba:3e:51:63:a3:05:16:02:93:8c:07:97:f9:db:52:25:
a9:40:f0:0f:3a:af:d4:ea:19:6b:31:25:32:e7:7e:d3:7b:09:
ae:5f:f7:fe:c1:fc:f2:da:00:90:95:e7:d1:17:86:02:35:f5:
46:17:28:11:89:87:d0:62:8e:86:de:63:29:cf:d4:16:17:4b:
79:6a:28:cc:ab:36:9b:47:b1:f9:fb:4b:fa:5d:33:65:88:95:
17:f1:c4:35:a3:69:2d:bb:83:e5:32:88:d6:86:e5:c2:c0:a3:
a7:80:39:d6:12:37:7a:c3:4c:3c:a6:21:23:f5:f1:1f:34:6f:
ab:05:dc:af:98:54:a3:52:1d:a4:d6:30:0d:04:3c:c9:94:67:
62:41:1c:1f:23:3c:d3:24:6d:7a:7c:5b:fc:03:ca:e7:c8:22:
8b:c4:02:a0:a7:06:da:a8:7c:93:d4:d7:f3:fd:0e:74:5d:d1:
26:86:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:18 2026 by rpki-client