
$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
File: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (raw, json)
Hash identifier: ag4sWVEE6696Uatb2RvVK5W48ijULl0+4Lnio86PfMw=
Subject key identifier: 80:F2:A5:AF:8B:7E:C8:38:F8:8D:57:80:C2:8D:32:29:89:D8:4D:83
Certificate issuer: /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Certificate serial: 022E
Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:11:54 +0000
ROA not before: Thu 29 Jan 2026 02:22:26 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 9336
IP address blocks: 203.15.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558 (0x22e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918557B, serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C
Validity
Not Before: Jan 29 02:22:26 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a410ea-2dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:e4:4e:4a:88:6a:39:f9:37:e0:cd:31:47:
58:1c:4f:74:21:48:a0:94:71:5e:f5:eb:ff:92:45:
8c:65:97:dc:e1:2b:fe:b9:53:50:37:e3:25:30:e2:
42:5c:47:2e:f4:f8:20:e4:e6:26:46:51:13:cd:df:
d6:00:09:5d:96:2b:3f:c9:44:9f:a7:9a:4f:8e:13:
a9:1d:80:48:2b:4e:65:d8:ad:40:0a:f7:10:46:b4:
1b:b4:a1:b8:01:1a:f0:02:2c:34:02:30:ab:bb:9e:
2f:43:69:a2:cb:10:d0:c5:73:37:d6:db:28:d3:89:
b9:f8:0a:63:ee:c8:59:8b:3b:1e:ae:28:d5:34:5d:
12:36:d1:41:a0:08:b7:52:99:4b:f4:33:08:dd:b5:
ee:94:59:82:0e:e5:c0:fe:58:e3:6e:28:d5:ca:ee:
4a:73:3b:68:16:40:44:00:c6:2e:72:ba:aa:89:6a:
42:08:2e:d1:4e:c8:ad:9d:5b:57:87:cf:3c:bb:c6:
b9:7b:53:ca:0e:01:e0:db:21:bf:cd:01:b6:51:16:
6a:f0:6c:3c:81:23:ee:ce:5e:38:91:4f:b2:2a:a1:
bc:e4:21:10:cd:8a:82:da:65:5e:a4:a3:43:22:8c:
08:da:5b:bd:30:5f:ec:23:2c:a5:a5:9d:5f:6b:0c:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F2:A5:AF:8B:7E:C8:38:F8:8D:57:80:C2:8D:32:29:89:D8:4D:83
X509v3 Authority Key Identifier:
keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.15.172.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:77:3f:fc:45:c3:31:5f:4f:b7:00:a6:0d:7b:1a:09:88:d7:
c1:40:fe:31:b5:a9:c5:f5:f1:f6:f2:ff:75:9f:e8:15:f1:65:
42:cc:03:53:08:bc:6c:2d:44:4b:e6:36:3a:51:e3:58:06:b9:
10:5c:26:bc:8f:21:f7:d8:af:0a:f6:68:37:35:6c:21:b4:7c:
a6:96:96:54:b0:71:f7:2c:d9:43:29:c0:1b:36:9a:42:32:62:
7f:ff:1b:92:65:2d:56:71:e1:d6:26:21:51:0f:05:65:48:5a:
7d:b6:72:4b:fb:d2:6f:42:88:3a:f7:6a:83:ce:10:d9:26:b0:
9c:6b:00:8f:04:ed:7f:f2:99:e9:01:9b:6b:36:5a:b0:2b:32:
11:cf:c6:77:7f:c8:f7:75:cf:98:27:42:bb:d2:2f:b6:f5:e2:
6d:99:02:a5:eb:07:07:c6:bf:9f:75:3e:63:ef:2b:83:e7:61:
7a:e3:cc:37:63:ee:9d:ee:fa:97:e0:85:82:4d:67:f6:2f:6e:
0b:2d:e3:88:27:2a:0f:bf:f0:50:36:79:f0:ba:91:6c:da:7a:
7f:95:0c:b8:fc:fb:7b:cf:85:1a:c3:b9:a4:d6:61:a9:00:a6:
4b:33:bb:d2:d4:9e:0a:7b:99:e5:47:28:f3:90:14:d6:b9:97:
2e:c7:c5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:14 2026 by rpki-client