
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/858F093E6D6C11EBA3CFBD21C4F9AE02.roa
File: 858F093E6D6C11EBA3CFBD21C4F9AE02.roa (raw, json)
Hash identifier: frlhuFiyVOqitxOAJckRFou7x/HIITvsGO1KaZNWImQ=
Subject key identifier: 54:69:32:70:82:2B:87:56:26:02:6A:21:2D:25:56:76:51:9C:C3:09
Certificate issuer: /CN=A919B80A/serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
Certificate serial: 072D
Authority key identifier: 47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/858F093E6D6C11EBA3CFBD21C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:12:42 +0000
ROA not before: Fri 30 Jan 2026 22:18:23 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 141728
IP address blocks: 103.162.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl
rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1837 (0x72d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B80A, serialNumber=47C70465044A2E14014547FA79BB7A54FE36EBBE
Validity
Not Before: Jan 30 22:18:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a4495a-7254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4c:bb:5b:6f:6a:97:88:61:e4:85:40:99:4a:
9c:08:a3:55:b3:c9:27:7e:f4:fc:a7:0f:8a:21:fb:
d0:ac:41:7c:18:7e:3f:c6:94:b6:a3:b1:78:ae:2f:
cb:7c:53:71:e7:a2:d7:75:2f:b6:52:d4:21:01:24:
c2:46:57:cb:bf:c3:46:ee:22:69:07:4c:85:f8:e6:
f9:f6:ae:be:c1:a1:23:6b:86:2d:79:c7:b5:6c:6d:
71:42:b7:fc:6a:42:12:4e:a1:ea:b7:5e:4e:f0:a6:
7d:7f:55:53:3f:84:f4:c4:f0:53:4a:bd:8e:42:30:
87:79:4c:47:d5:ef:66:65:74:c2:ed:84:6c:07:fd:
5d:38:72:6f:25:bf:82:c0:79:d3:32:ee:2d:62:14:
17:94:0e:00:13:61:0b:18:d0:e2:38:55:dd:0f:34:
be:a3:6b:f5:b6:2c:a4:a4:31:89:53:e3:be:42:0a:
86:94:c6:d6:5b:c9:68:ad:ae:49:8f:71:8f:d3:b8:
3d:2d:7e:0d:8e:37:d0:99:9e:69:fa:08:7e:ce:ec:
3a:27:c1:b3:38:83:99:8a:6c:78:ac:83:9f:fc:bf:
3d:69:20:84:38:d1:50:04:2c:7d:ab:f2:83:28:d4:
f4:e6:9c:de:c5:dc:7b:1b:6b:52:02:11:ca:0a:3b:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:69:32:70:82:2B:87:56:26:02:6A:21:2D:25:56:76:51:9C:C3:09
X509v3 Authority Key Identifier:
keyid:47:C7:04:65:04:4A:2E:14:01:45:47:FA:79:BB:7A:54:FE:36:EB:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/R8cEZQRKLhQBRUf6ebt6VP42674.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8cEZQRKLhQBRUf6ebt6VP42674.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B80A/F8E722566D6A11EBB04F8620C4F9AE02/858F093E6D6C11EBA3CFBD21C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.226.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f3:f8:7a:d3:9b:60:f4:d6:bb:fe:6a:96:fb:ca:95:66:a2:
bd:3a:54:dc:af:2a:33:91:d7:19:75:1d:b0:48:5d:ef:ba:da:
34:98:9f:2c:0d:b9:0f:e1:9a:9d:0f:72:8d:c7:93:16:87:15:
dd:87:09:aa:a6:44:f3:ab:20:7f:93:ac:fb:71:6b:68:fc:ff:
dd:82:78:58:27:97:6e:fa:30:50:79:d6:e8:ab:35:6c:15:3f:
6f:7b:01:d3:0e:6b:8c:66:ca:d0:f3:de:b0:84:ac:34:6b:47:
11:01:6e:3a:fe:df:32:20:b9:0d:0d:df:9d:68:3c:83:44:d8:
8b:ee:aa:36:b4:d9:31:ae:28:3d:2b:d1:35:31:70:a7:1f:0a:
71:d9:b3:27:9e:f3:80:d1:c3:88:9d:34:a0:da:df:6c:97:a0:
55:23:07:5e:ad:1b:1f:b2:13:1d:e0:02:ce:f2:15:80:7f:20:
39:2d:4f:48:dc:90:31:b0:db:ef:99:81:ee:f0:a1:32:00:84:
db:73:54:b1:9e:46:5b:a0:3f:90:8b:5e:18:95:5d:da:6e:1b:
da:35:78:97:0a:87:0e:e8:c5:15:58:f6:1d:c6:d8:bb:4c:fa:
e0:42:28:b7:a8:02:ac:08:58:8e:de:3a:ef:68:1a:ec:f5:7e:
e4:1e:59:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:03 2026 by rpki-client