
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/2477AFC6D56511EDB2407741C4F9AE02.roa
File: 2477AFC6D56511EDB2407741C4F9AE02.roa (raw, json)
Hash identifier: ECRNOTg3OlzKxcpLyuORVjA7zDi9bxSHri4ICsSWxl8=
Subject key identifier: 65:91:49:99:17:3F:89:30:9D:D6:2E:71:E0:D0:9A:6D:B2:5B:6F:20
Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial: 0D5F
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/2477AFC6D56511EDB2407741C4F9AE02.roa
Signing time: Wed 18 Mar 2026 18:23:03 +0000
ROA not before: Wed 18 Mar 2026 18:23:03 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 150744
IP address blocks: 103.245.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3423 (0xd5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Validity
Not Before: Mar 18 18:23:03 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69baed87-ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:b7:0e:33:d8:b0:fe:99:68:2f:bc:30:18:
59:14:c4:df:8d:e3:64:f9:0d:2b:d8:11:70:5f:bc:
d6:63:70:eb:32:6f:26:41:a0:50:01:72:57:45:57:
1b:7c:99:82:a7:a9:76:42:b6:2a:33:73:23:9e:3d:
81:c6:d8:34:bd:ac:13:40:51:4c:a7:bf:54:43:40:
4a:d4:e7:46:ba:24:5c:7b:01:4a:55:4c:ef:d3:96:
a4:26:fd:64:8b:78:06:46:29:da:d3:91:28:b4:2e:
d8:7e:c5:c7:7a:87:37:2b:85:31:36:04:2d:98:bf:
1c:8d:3b:0a:71:b9:37:b7:76:3f:59:a4:b2:f4:ae:
8a:65:34:1f:1c:f2:53:48:55:27:4d:f0:82:99:50:
c4:df:79:b8:5d:a9:16:f4:a4:4f:7a:62:2d:34:7a:
c1:f2:25:f2:33:2c:70:d5:b7:87:4c:b8:47:33:c5:
a6:b3:78:33:a1:f5:bc:1f:c7:85:04:22:a2:f6:47:
76:b6:6e:00:4d:0e:65:82:40:08:74:ec:da:aa:5a:
30:19:4b:d9:db:ff:99:dd:75:25:c4:d3:a8:01:17:
ab:84:82:c8:f0:0e:96:9c:04:7c:70:a9:41:83:6e:
79:dc:b6:ab:95:dd:91:7e:9e:c9:6a:5e:7f:43:59:
9e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:91:49:99:17:3F:89:30:9D:D6:2E:71:E0:D0:9A:6D:B2:5B:6F:20
X509v3 Authority Key Identifier:
keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/2477AFC6D56511EDB2407741C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.245.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:8d:bc:63:5c:48:20:11:ed:e6:26:56:d9:3e:7f:e6:b9:e0:
c0:14:2a:2a:e6:bc:f2:f9:e9:d7:93:8e:49:be:10:03:5c:f4:
ce:bc:66:87:e0:ef:a9:f9:b8:7f:94:c9:28:1d:24:23:bb:66:
d9:86:21:4f:95:58:32:08:54:0c:3d:47:d9:d2:66:4f:74:a8:
ed:3f:18:6a:18:da:2a:63:22:91:8a:02:4a:01:b5:c1:73:2f:
05:6c:8a:75:83:ac:30:16:5c:99:0d:c9:a8:18:88:29:6d:6e:
d7:29:1d:34:70:68:6d:54:96:ce:3a:6a:36:e4:65:1f:6b:a6:
9d:f6:f7:6e:34:1b:10:af:a1:03:9d:b9:f2:72:fb:31:26:94:
8f:c9:0d:a5:d7:e9:0e:bd:2a:ba:8f:01:fa:ca:b8:79:37:d8:
ef:ff:2a:0b:62:77:0f:ca:b7:78:a8:62:42:55:c9:a4:ab:88:
62:d6:2c:24:e8:25:d6:9c:8a:90:73:0e:69:61:c2:31:8c:04:
a8:f8:b3:48:a3:bc:41:32:8e:eb:56:34:74:68:05:6f:6e:25:
e9:9b:a4:40:ea:5d:ab:52:11:3a:44:ed:04:4c:db:00:42:9a:
75:c5:94:f2:c1:1f:de:75:e3:06:24:fe:79:9b:34:b1:b0:76:
f1:46:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:38:14 2026 by rpki-client