
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/EBFDD9B2BAE011F1AFD56E445411F970.roa
File: EBFDD9B2BAE011F1AFD56E445411F970.roa (raw, json)
Hash identifier: XPeH9DmGsgN2fCY2OFVHFmiytDLOlkawC3b0h0/GI70=
Subject key identifier: 4E:6E:E2:FF:EC:08:64:5C:CB:18:9D:38:40:DB:24:99:F1:AD:FE:F8
Certificate issuer: /CN=A9158A3E/serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751
Certificate serial: 22
Authority key identifier: 89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/EBFDD9B2BAE011F1AFD56E445411F970.roa
Signing time: Mon 28 Sep 2026 02:04:22 +0000
ROA not before: Mon 28 Sep 2026 02:04:22 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9336
IP address blocks: 103.182.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl
rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 08:48:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158A3E, serialNumber=89EDC2743455CE59AFEBAC31486DDFEBF7CD0751
Validity
Not Before: Sep 28 02:04:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ab9cb26-bfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5d:f9:29:8b:f9:b8:56:a2:30:30:54:5c:2d:
68:55:32:fd:31:13:9b:d2:92:cc:0c:5e:33:65:d5:
57:d8:e9:a8:23:83:11:bc:2e:a4:f5:44:5c:f0:ce:
42:9d:e4:38:c9:3a:b3:a6:ba:99:40:86:c6:51:d6:
62:9d:50:79:f2:fc:18:f9:30:35:e9:47:ce:32:87:
60:73:71:ba:3b:15:17:28:ac:aa:73:c6:d5:05:a8:
95:1d:21:54:36:5b:29:42:36:5c:48:7e:b3:08:1e:
b2:60:cb:54:e8:39:03:98:76:7f:6e:a5:ae:a5:4f:
82:10:4c:58:e2:ff:87:76:7b:9c:dc:2e:f6:a2:a9:
b6:df:af:1b:61:a1:cd:f6:c9:87:2f:28:fe:12:28:
ae:a3:10:f1:17:c8:d1:47:90:0d:c4:f7:b4:07:c0:
44:6d:17:34:7a:95:d2:42:f3:75:d0:4a:91:28:04:
c7:a6:46:fd:12:01:d0:92:7a:b3:4a:5a:ba:17:86:
f5:59:af:e8:5e:22:5e:90:03:6c:ac:ec:9c:2d:b1:
5c:cc:07:e9:3a:c0:6f:75:64:02:68:48:46:4f:6e:
40:da:c3:7b:21:0f:63:fe:1c:91:66:20:25:f4:c5:
72:bb:a4:11:b4:cf:50:f8:5e:4d:8b:d7:cc:6b:e2:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:E2:FF:EC:08:64:5C:CB:18:9D:38:40:DB:24:99:F1:AD:FE:F8
X509v3 Authority Key Identifier:
keyid:89:ED:C2:74:34:55:CE:59:AF:EB:AC:31:48:6D:DF:EB:F7:CD:07:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/ie3CdDRVzlmv66wxSG3f6_fNB1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ie3CdDRVzlmv66wxSG3f6_fNB1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158A3E/ED48689292FD11F1B74EB5E76C11F970/EBFDD9B2BAE011F1AFD56E445411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.182.152.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a9:a8:4a:63:5f:84:5f:d6:ae:d4:cf:8f:aa:b3:2d:43:78:
3f:f2:00:22:e8:71:ca:12:29:2f:d3:0f:c6:b0:21:d1:8a:b2:
a8:2e:cb:e0:92:e4:c9:d1:fe:8b:c5:0d:13:bf:d7:0c:6d:04:
6f:c8:c7:00:fe:1f:4b:4c:fd:e7:b8:ba:b3:67:0b:32:ab:f9:
c4:45:2e:ef:45:c2:11:aa:0a:f2:52:67:4c:b1:09:2c:a9:8c:
a0:43:f4:65:bf:d9:37:7b:85:6d:a1:c4:03:18:5f:05:09:ec:
3c:96:74:fb:24:8d:da:f2:02:42:c4:12:3a:e2:32:64:18:31:
d4:da:3a:43:38:61:0a:ba:5e:48:64:9d:f7:a1:74:dd:50:72:
62:40:84:8c:51:0b:fe:a3:6c:fe:3e:a9:45:68:35:0c:c5:a7:
05:e5:fc:03:96:6f:2a:c9:0a:f6:d9:b5:f5:53:71:1b:6b:30:
12:5b:aa:2f:a4:d7:73:87:a7:3b:f5:e5:f1:4f:ad:0b:07:86:
4e:03:bb:de:ca:77:73:a2:b8:69:d8:37:18:60:ec:46:43:27:
6e:51:54:e0:54:0d:ae:93:a4:08:2b:b0:86:34:70:eb:0c:b6:
06:2f:d9:f9:a9:25:9e:34:6f:62:f0:84:7f:68:a3:d0:76:a9:
6a:e1:d2:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:27 2026 by rpki-client