
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/146898A4BBC911F1BBA6ECA16111F970.roa
File: 146898A4BBC911F1BBA6ECA16111F970.roa (raw, json)
Hash identifier: nQJYumQ/KxEeUdczAGo5w5cEQnY7UcPYCqQBag1GBwQ=
Subject key identifier: 3F:3A:74:2E:71:0B:8D:A4:71:1D:ED:6A:2B:5E:29:E0:98:5F:C0:B3
Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial: 3305
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/146898A4BBC911F1BBA6ECA16111F970.roa
Signing time: Tue 29 Sep 2026 05:46:13 +0000
ROA not before: Tue 29 Sep 2026 05:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153286
IP address blocks: 161.248.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 08:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13061 (0x3305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Validity
Not Before: Sep 29 05:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6abb50a5-8c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:46:c3:7d:83:c1:0b:41:5c:bf:7a:94:cc:
55:62:ea:45:d6:73:44:e2:b5:e6:a2:36:fa:c7:da:
75:72:ad:0d:aa:ca:7d:e6:13:92:ec:3a:a3:5e:5a:
31:66:4c:0c:27:b4:c4:75:26:82:eb:9e:d7:d1:8d:
2a:f0:b9:db:c3:63:a8:b4:f2:c3:19:f2:9c:ab:f6:
95:aa:bd:07:ed:3f:4e:82:82:c3:b1:50:f0:30:a1:
f5:c8:0e:8a:1a:18:d4:06:56:7e:ed:87:99:b2:46:
f2:01:45:f0:03:e8:a8:d9:51:71:f5:50:61:41:04:
e2:ec:9d:0f:12:18:47:9a:b3:06:a1:16:4d:80:ce:
d1:dc:c4:e9:a2:4d:f6:a3:0b:21:62:60:68:51:96:
08:69:54:3a:5c:86:35:5e:98:12:ac:16:bd:36:c2:
2b:24:2c:ce:b6:05:0c:f1:27:fd:1f:75:09:d4:ea:
a5:81:c7:c1:87:72:ba:1f:5c:7d:ad:41:92:4b:fb:
42:1f:b3:ef:72:ae:fe:bc:6a:7b:a2:aa:d7:d3:4d:
66:e6:da:7d:d4:09:01:e1:2d:8f:8c:45:e1:a6:53:
c1:47:a7:8c:6d:42:e2:fc:ce:f5:94:73:42:e3:c8:
69:1c:e6:62:0f:ed:73:cf:59:32:43:9f:b6:4b:41:
66:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:74:2E:71:0B:8D:A4:71:1D:ED:6A:2B:5E:29:E0:98:5F:C0:B3
X509v3 Authority Key Identifier:
keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/146898A4BBC911F1BBA6ECA16111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
161.248.48.0/23
Signature Algorithm: sha256WithRSAEncryption
80:fe:dd:d2:8d:32:f0:ff:0f:cd:f4:39:62:1f:a4:07:23:6a:
0d:30:ee:d8:ff:ed:70:5d:00:72:af:82:40:73:45:aa:9b:25:
d8:34:52:21:06:ed:3c:ca:aa:61:75:83:9b:ec:9d:d6:83:77:
22:2c:94:af:b4:44:1d:36:8e:dc:72:a4:ba:19:20:91:e7:ab:
8f:31:1e:ea:a0:1f:43:c1:89:6c:88:7a:5d:73:91:ce:b8:be:
ef:56:70:44:b4:cf:15:93:81:64:43:46:ae:90:ef:a1:ea:96:
17:eb:5a:aa:dd:f4:c8:96:29:28:82:c8:65:ee:1c:4f:6b:33:
93:31:da:5d:b1:fc:79:bd:4a:4c:22:cb:17:e5:08:da:b6:50:
e9:6e:87:dc:71:c4:33:a4:21:36:2c:37:17:43:58:08:47:2d:
1c:d8:89:f7:48:d3:19:83:c3:7b:0b:f7:f2:e8:69:09:8d:ee:
f5:66:5d:9b:89:fb:90:af:5b:eb:23:8c:92:4f:fb:fe:4c:c3:
9b:f7:00:08:37:29:07:4d:d3:36:4d:36:3f:99:bd:ae:f9:c8:
87:e5:95:15:aa:1e:ee:15:24:b7:fb:07:95:ec:19:7e:57:58:
d2:f7:72:12:8c:17:3e:fe:b7:0a:2e:1d:3e:78:2e:74:81:46:
77:e0:b4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 15:56:41 2026 by rpki-client