
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
File: EC61C060DDB411ED93355C4FC4F9AE02.roa (raw, json)
Hash identifier: 9JSzm9lf4Elq7GXzCtPh1TTKhYzIdjlENWgNE400fvg=
Subject key identifier: 11:52:FE:68:61:CA:32:AB:58:22:7A:2E:16:A8:33:C2:35:0D:C1:6E
Certificate issuer: /CN=A9141B5B/serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Certificate serial: 0229
Authority key identifier: 28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:29:37 +0000
ROA not before: Mon 07 Apr 2025 03:08:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3462
IP address blocks: 103.112.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141B5B, serialNumber=28848DC3F19E7729FFE37EF7E4F0A5C9C5B490E9
Validity
Not Before: Apr 7 03:08:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3eae1-6708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:7a:ca:c7:c7:c3:a2:71:54:b5:7b:e6:4a:
37:51:60:98:21:ab:9a:bb:15:67:6e:cf:5a:a6:c6:
7e:b3:c6:52:5a:92:65:49:d2:b7:3e:e6:d6:84:6e:
e1:68:6a:8a:ce:74:84:81:92:69:ec:92:11:b1:c0:
9c:31:d9:83:6b:35:d7:51:a8:80:76:26:2c:34:de:
1f:7b:19:46:74:5e:dc:1d:89:d7:5e:1e:40:c7:14:
87:19:79:82:d3:b7:53:9b:34:c7:39:4d:69:dc:c1:
dd:b2:1f:1b:8f:f4:b8:9a:57:b5:27:d7:34:9c:ba:
b0:c4:d5:ea:92:39:4d:e4:ea:82:30:3e:5c:1b:95:
c7:41:f2:53:1d:d9:1a:c5:b8:6b:75:77:a9:7d:0a:
07:87:d1:0d:cb:d9:27:60:75:27:85:00:ba:b9:c2:
d1:e8:1a:17:36:df:35:2f:ec:fa:4d:34:e3:8c:eb:
eb:43:61:78:3d:d8:14:a2:b2:ba:d4:17:78:2a:ae:
14:66:0a:b8:dc:f0:ff:e0:d0:9b:95:6d:38:38:cf:
54:b6:af:66:1b:39:cf:e9:47:f2:ce:72:90:e8:f9:
d5:d1:61:f3:51:74:55:be:92:43:5f:3d:fe:f0:51:
bd:3f:81:e3:83:85:47:7f:07:bf:7b:55:9b:fb:58:
5a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:52:FE:68:61:CA:32:AB:58:22:7A:2E:16:A8:33:C2:35:0D:C1:6E
X509v3 Authority Key Identifier:
keyid:28:84:8D:C3:F1:9E:77:29:FF:E3:7E:F7:E4:F0:A5:C9:C5:B4:90:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/KISNw_Gedyn_43735PClycW0kOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KISNw_Gedyn_43735PClycW0kOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B5B/8D57E17CDD9511EDAE8C6C7AC4F9AE02/EC61C060DDB411ED93355C4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.48.0/22
Signature Algorithm: sha256WithRSAEncryption
47:ed:27:b3:1d:ca:10:48:b9:19:15:f1:9f:7c:31:08:8b:b1:
e9:71:b2:38:a2:0b:ee:33:1e:a9:8a:37:b7:fb:fd:65:3f:49:
ab:79:ac:a2:9e:07:59:b4:25:ac:cc:d2:68:92:30:8b:fe:49:
c1:50:ff:5a:42:b8:01:d0:6d:25:d8:85:ed:90:76:0a:32:8e:
43:17:fd:e9:30:bc:44:47:f6:65:ea:a6:56:c5:e1:d7:0d:a3:
00:29:34:a3:18:07:e4:50:90:ca:d4:78:3f:89:be:e2:53:97:
d1:22:ef:b8:d4:a3:cc:52:b9:59:9a:34:58:54:25:df:10:cf:
c9:08:40:f6:62:42:9a:4a:6c:6a:08:a5:80:8d:c8:3e:61:13:
72:52:a6:b5:e5:f6:11:69:e6:ea:fc:3e:14:72:3d:6a:4a:15:
3b:91:c3:af:b2:0f:37:b9:01:bd:09:e4:a2:e5:10:9c:42:4c:
22:d4:b9:f3:cb:a8:a5:1e:18:6b:6e:0f:a3:d4:a1:a7:35:be:
c7:66:6f:ec:90:81:79:7a:23:36:b1:0e:ea:d8:50:d5:d4:90:
60:dd:a6:41:46:bd:b3:61:7d:54:34:26:a8:0d:6a:81:e5:b7:
a6:dd:ec:d4:eb:00:df:f3:2e:d4:cb:8b:fd:34:e2:c8:a9:ff:
25:5b:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:18 2026 by rpki-client