
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/C098EF8E499811EFBB8C701EC4F9AE02.roa
File: C098EF8E499811EFBB8C701EC4F9AE02.roa (raw, json)
Hash identifier: uB385efdqTb3/LugdWT8rNVy3FgK+9CSA2XsUkIjqtY=
Subject key identifier: 5F:A5:41:84:82:B4:B2:AA:F4:6E:7E:B4:57:70:F0:E9:D5:B8:98:4E
Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial: 07D4
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/C098EF8E499811EFBB8C701EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:00:57 +0000
ROA not before: Sun 04 Jan 2026 21:17:31 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 142270
IP address blocks: 203.76.253.0/24 maxlen: 24
203.76.254.0/24 maxlen: 24
203.76.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2004 (0x7d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Validity
Not Before: Jan 4 21:17:31 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a47ed9-f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:22:35:e8:62:9e:fb:6a:b7:60:ff:6b:7c:
a8:40:9b:3a:11:e0:7a:76:89:33:6b:cf:60:e7:22:
c0:2b:c9:fb:37:9e:ef:bf:75:3f:2a:05:49:b6:c8:
34:41:32:89:f9:4a:1e:a1:7e:f1:f4:5a:8c:cd:fc:
fc:55:83:e4:f1:80:32:d3:b1:1c:2c:a0:81:52:85:
13:3b:f6:5f:a0:fb:73:72:f1:70:b7:6d:bc:ec:90:
ff:c1:51:7c:ae:c1:db:25:d6:16:a1:fb:5c:73:e4:
22:52:36:d4:20:ae:0b:ca:47:39:9a:8b:3b:0f:a2:
5a:10:36:bb:f2:1a:47:56:2c:c0:c8:47:f7:69:b9:
89:11:db:f2:d5:57:d0:19:e9:45:c4:c9:a0:ad:b6:
48:51:dd:81:47:7c:78:aa:53:e2:40:13:da:49:71:
ef:80:56:37:6f:31:0f:37:0b:85:db:49:79:0c:2e:
ea:c0:4c:e9:c5:cb:17:23:d8:eb:89:40:68:67:81:
31:0d:1f:74:70:60:f8:61:4d:9f:d0:92:c3:f5:11:
72:e4:21:07:bf:92:e2:3f:d2:c7:9d:80:44:a6:fb:
c0:b8:e6:76:b4:72:99:e2:2c:aa:74:44:71:19:53:
cf:c3:02:f8:4a:3b:a2:23:e9:d0:75:7f:be:0f:bd:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A5:41:84:82:B4:B2:AA:F4:6E:7E:B4:57:70:F0:E9:D5:B8:98:4E
X509v3 Authority Key Identifier:
keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/C098EF8E499811EFBB8C701EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.76.253.0-203.76.255.255
Signature Algorithm: sha256WithRSAEncryption
22:5b:13:6b:f3:dd:96:c4:ad:27:fc:dc:bd:c5:4c:d3:62:1e:
05:79:81:5b:0f:ad:91:7e:2d:03:55:ec:55:fa:5e:db:cb:1c:
2c:b6:a2:53:ca:24:b4:4c:36:e7:97:6a:98:0c:59:bf:7e:c3:
9c:f1:64:02:61:33:e3:b5:05:85:14:a1:57:21:77:30:85:e3:
c9:2f:a4:96:55:1d:0f:25:af:d4:87:e1:67:95:0c:f6:8c:0a:
71:41:3b:6a:b5:95:38:8b:23:24:9a:3a:90:b6:45:ad:7e:33:
b4:fd:c6:bd:a1:a7:54:25:1c:86:58:3e:f4:d7:84:25:d5:f6:
a8:5f:53:86:58:cc:80:c1:ca:a8:64:55:d5:8b:3d:70:ca:a3:
c3:6e:cc:ae:e8:e7:71:89:c0:f7:8e:68:1c:ae:52:1b:2b:46:
d1:2e:df:d5:ea:bf:f5:13:53:9f:77:a4:4a:31:8f:eb:e2:a7:
31:b9:fc:f8:d1:c0:05:32:bc:32:4b:ca:88:6a:3f:d9:b7:dc:
22:d4:7b:f4:02:f2:b4:a5:a5:53:a7:e2:c3:34:d4:ed:d9:82:
60:f1:89:c6:88:1e:39:15:66:10:68:a8:5b:97:4e:50:07:2d:
d5:0f:dc:4f:84:2c:94:09:f1:0e:8a:7d:a9:11:90:6d:18:8e:
be:b6:08:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:42 2026 by rpki-client