
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
File: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (raw, json)
Hash identifier: h+trzDuVn/VxJ7NUrcdT4bIR95bu+vkwOYNceyRvSr4=
Subject key identifier: DD:5D:54:03:CA:AD:34:74:C3:3F:EE:44:38:40:57:D5:8A:4D:BF:EC
Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial: 0253
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
Signing time: Tue 01 Sep 2026 02:51:55 +0000
ROA not before: Tue 01 Sep 2026 02:51:54 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 140958
IP address blocks: 103.153.200.0/23 maxlen: 23
2406:4ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Validity
Not Before: Sep 1 02:51:54 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a963dca-1353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:54:cd:45:7c:79:92:79:50:d7:c7:0a:4b:
7c:3f:63:0e:ea:10:8b:21:b9:6f:5d:88:2c:d2:8c:
bc:8c:c0:0d:64:1f:34:e1:3a:66:56:ce:91:06:01:
ff:21:de:d9:04:e8:aa:53:ae:b3:68:d2:39:d4:de:
6e:3c:88:7f:6b:98:8b:8b:10:3d:d2:b9:c8:8c:52:
d9:62:2e:0a:1a:7e:7e:5f:70:ab:8a:72:57:a8:61:
6d:93:94:53:f0:3d:f7:0d:c1:6a:bb:76:39:2f:c9:
64:c9:3b:a3:81:d8:02:96:6a:e3:ba:84:0e:88:6d:
6d:44:3e:df:1f:9d:d7:9b:0e:c1:19:40:db:64:ce:
a4:1f:34:64:4e:1b:38:34:2e:38:32:e4:40:23:f6:
b8:25:04:a6:01:14:1c:93:96:83:f9:6e:67:ca:db:
1a:67:f9:cc:a2:79:57:af:63:44:2b:0d:d6:23:d6:
a5:57:a6:90:1d:08:8b:9e:a2:78:4b:93:a3:42:af:
09:8e:53:6e:0d:f5:a9:ad:90:0d:99:6a:e3:5f:8d:
82:72:82:a8:0a:23:45:ee:88:04:1c:cc:4a:3d:44:
43:01:0b:bf:3b:cb:c2:81:99:50:d0:3e:2d:0c:d1:
49:d3:e5:57:d6:a8:90:44:c9:f9:99:dd:bc:cf:2b:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:54:03:CA:AD:34:74:C3:3F:EE:44:38:40:57:D5:8A:4D:BF:EC
X509v3 Authority Key Identifier:
keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.200.0/23
IPv6:
2406:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
2d:e2:cf:e4:fa:c9:0e:21:4f:66:91:8e:ca:d4:78:cc:55:1b:
be:8b:67:52:7f:36:4f:eb:26:42:d4:7e:c7:cf:b3:96:cb:e0:
16:55:ea:6c:05:27:47:ca:43:1b:6f:4b:db:63:02:d4:a0:c8:
85:4a:af:54:a5:e9:70:bc:28:e0:ef:0b:64:16:40:4a:8d:1e:
0f:a0:cd:bc:a9:3a:3a:c1:f9:f0:d9:3a:a0:41:2e:53:79:a3:
6f:00:7b:8e:2f:7f:c3:7a:be:14:84:5b:3d:d6:98:e7:14:83:
4b:65:b8:03:3d:a2:c6:8a:33:9e:a1:63:bd:30:e1:61:00:40:
44:8d:5e:07:d9:f6:3d:47:70:94:7d:07:bf:0e:db:15:2c:88:
55:cc:60:93:ad:83:6e:46:6a:8b:09:93:de:85:6c:86:70:ac:
70:25:32:f2:44:fd:d5:c3:8c:97:1c:df:74:40:5d:1c:aa:14:
18:05:d3:07:71:ea:02:eb:cb:e9:37:ae:47:e8:b1:0d:79:5f:
13:93:c6:92:fc:b7:c7:c6:df:fa:83:a3:10:df:0a:68:58:1e:
3b:7c:38:0a:71:e9:35:52:13:87:f6:ca:04:27:39:b2:10:f7:
b5:5f:71:11:be:8d:b6:b7:c1:9d:92:a8:65:c4:ff:8b:67:c1:
72:aa:c6:ce
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD
Qjg4MkQyQzkwHhcNMjYwOTAxMDI1MTU0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2M2RjYS0xMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2+FUzUV8eZJ5UNfHCkt8P2MO6hCLIblvXYgs0oy8jMANZB804TpmVs6RBgH/
Id7ZBOiqU66zaNI51N5uPIh/a5iLixA90rnIjFLZYi4KGn5+X3CrinJXqGFtk5RT
8D33DcFqu3Y5L8lkyTujgdgClmrjuoQOiG1tRD7fH53Xmw7BGUDbZM6kHzRkThs4
NC44MuRAI/a4JQSmARQck5aD+W5nytsaZ/nMonlXr2NEKw3WI9alV6aQHQiLnqJ4
S5OjQq8JjlNuDfWprZANmWrjX42CcoKoCiNF7ogEHMxKPURDAQu/O8vCgZlQ0D4t
DNFJ0+VX1qiQRMn5md28zyvNawIDAQABo4ICbzCCAmswHQYDVR0OBBYEFN1dVAPK
rTR0wz/uRDhAV9WKTb/sMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx
RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDg0NTYvNjA3QUQ5MjAzMUQ3MTFFRTlDMjAzQjIwQzRGOUFFMDIvQkVCMEJBNTAz
MUQ3MTFFRThERjZDQjIwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ5nIMA0EAgACMAcDBQAkBkrAMA0GCSqGSIb3DQEBCwUAA4IBAQAt
4s/k+skOIU9mkY7K1HjMVRu+i2dSfzZP6yZC1H7Hz7OWy+AWVepsBSdHykMbb0vb
YwLUoMiFSq9UpelwvCjg7wtkFkBKjR4PoM28qTo6wfnw2TqgQS5TeaNvAHuOL3/D
er4UhFs91pjnFINLZbgDPaLGijOeoWO9MOFhAEBEjV4H2fY9R3CUfQe/DtsVLIhV
zGCTrYNuRmqLCZPehWyGcKxwJTLyRP3Vw4yXHN90QF0cqhQYBdMHceoC68vpN65H
6LENeV8Tk8aS/LfHxt/6g6MQ3wpoWB47fDgKcek1UhOH9soEJzmyEPe1X3ERvo22
t8GdkqhlxP+LZ8FyqsbO
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:54:41 2026 by rpki-client