
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa
File: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (raw, json)
Hash identifier: J94u9FnrIiwrzDJWeFDOpq+HwbLatBCEAzqVSnk5AQ4=
Subject key identifier: BC:42:64:1A:89:EE:9D:5C:37:DD:4A:67:19:11:FA:86:8F:68:81:C5
Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Certificate serial: 076F
Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:40:47 +0000
ROA not before: Tue 14 Jan 2025 22:01:17 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 1221
IP address blocks: 203.26.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1903 (0x76f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E
Validity
Not Before: Jan 14 22:01:17 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3fb8f-b572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:49:27:40:3c:a8:da:2b:be:a1:a4:44:5a:
b1:ae:52:ab:28:b4:98:31:36:93:2b:5a:47:1e:00:
b4:3c:20:f9:12:2b:b0:aa:c3:b0:ee:08:11:e1:eb:
59:e6:34:aa:dc:a3:74:a5:b9:c5:06:d4:ba:2a:49:
99:bd:92:af:ac:ea:1e:29:b8:9b:1e:2a:a8:67:2a:
d9:31:e7:dc:13:dd:57:b4:b3:5b:99:0b:25:1c:2b:
d8:ba:33:56:2b:ba:7e:da:32:c5:d2:8d:15:90:78:
b9:f7:34:65:62:a2:eb:e7:a0:73:82:90:8a:d0:f2:
78:c8:38:d5:da:ce:0c:95:2d:84:44:ee:0e:78:67:
4b:0c:b2:9b:40:3f:f8:7b:85:b0:1a:79:73:ce:9e:
ba:1c:8b:20:b2:aa:3e:2a:6d:7f:70:2c:67:c6:e6:
0e:d5:f4:b9:b3:03:88:97:5d:70:09:b7:bd:f5:70:
8e:47:8a:1c:13:48:ac:11:dd:bc:e7:28:4e:d7:f2:
47:2b:b7:31:b2:f0:c9:ea:41:59:55:07:6a:f5:52:
e8:9b:af:81:fe:b1:7b:86:03:45:0d:4f:c4:1a:c3:
19:23:9a:72:a8:ce:24:15:78:4e:89:7c:88:65:1a:
4e:b2:8e:06:62:8a:25:b8:d0:83:95:be:5c:b5:94:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:42:64:1A:89:EE:9D:5C:37:DD:4A:67:19:11:FA:86:8F:68:81:C5
X509v3 Authority Key Identifier:
keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/8CFEF8EE50AE11EBB71FB743C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.26.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:30:84:25:2b:8a:eb:8d:28:18:ea:08:13:de:59:5c:6d:ba:
29:bb:f5:83:f2:9a:48:e6:87:f2:8b:f6:29:6b:7c:69:f2:bd:
ee:64:66:9e:79:77:7d:c5:63:7f:07:1f:eb:3d:0a:f8:24:92:
07:33:5d:d7:b6:08:db:78:b6:ef:fc:fc:0b:d7:98:3f:9a:6d:
e7:03:b5:ef:31:ab:88:51:ca:51:b2:82:47:8f:dc:7a:ea:3a:
f6:0b:60:b2:67:4b:75:df:f5:52:c8:55:db:f8:31:3b:9a:dd:
d5:6a:75:f3:64:2c:ba:87:48:df:1d:38:2a:e5:ce:03:78:c2:
b3:55:02:c2:4b:90:78:69:81:b0:dc:c1:a8:42:a3:47:02:d6:
9f:4b:a0:ce:f8:f6:97:c9:f0:78:dd:e4:55:28:d0:3c:e1:0d:
30:09:30:d9:59:db:5d:19:24:a8:ff:6d:36:92:6b:84:d5:0e:
54:79:4d:63:c3:04:13:c3:45:8b:f9:cd:5f:9c:d6:8a:2b:15:
6f:bd:41:50:85:fc:97:65:1b:b2:ac:13:db:ee:3a:4a:cd:de:
e6:92:5b:6c:9d:fe:a9:ef:bf:de:75:ae:46:3b:75:fa:88:80:
63:85:c6:e4:b5:18:9b:eb:5e:05:3d:bb:5c:f8:56:94:8f:94:
d7:5b:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:00 2026 by rpki-client