
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa
File: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (raw, json)
Hash identifier: ucHEuT9m2JLy9vhypgEzjXOTFhOgejYYL9jU6Z27C78=
Subject key identifier: 55:12:C8:91:40:A3:BD:F2:4E:BB:F0:CB:C1:59:D1:3D:92:35:7F:81
Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Certificate serial: 08F6
Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa
Signing time: Wed 28 Jan 2026 20:17:28 +0000
ROA not before: Wed 28 Jan 2026 20:17:28 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140900
IP address blocks: 103.153.38.0/24 maxlen: 24
103.153.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Validity
Not Before: Jan 28 20:17:28 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=697a6ed8-6385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:21:67:58:cf:2a:c8:3b:38:be:5d:a8:b6:
33:fe:2e:9d:3e:9c:50:f0:30:d0:9a:e5:f1:f8:59:
98:51:cd:37:db:2b:2a:25:b3:d3:64:18:d8:6b:c9:
f7:e4:dd:9a:64:c6:76:34:bd:ed:0d:31:7d:03:26:
25:17:b4:c3:fa:0c:6d:f4:56:29:0e:8b:25:ef:e0:
12:d3:77:6f:3d:1e:d7:15:67:2b:62:df:ca:32:e7:
ac:57:21:c2:fd:8d:f9:44:11:39:a7:ca:cf:1c:83:
ad:f6:c6:86:a4:80:1d:39:b0:fa:29:1d:de:e5:6c:
04:9f:78:9d:5c:ed:47:f6:94:05:c7:a5:17:83:a2:
6a:a9:17:8b:a9:4e:8e:96:3b:c6:12:35:8b:55:1b:
ff:13:94:4d:56:3c:55:c0:9e:47:4b:7b:a2:88:6c:
aa:e5:44:24:d9:c2:03:93:a6:b1:bb:b4:09:d9:06:
3b:c0:b0:ac:b8:8f:8b:26:07:04:55:f4:a7:60:5f:
af:d7:0d:39:cb:31:12:6d:07:1c:26:a4:54:b3:13:
9f:e8:10:e2:b2:06:df:77:0e:07:23:c1:bf:c6:ac:
f5:cd:20:3a:75:2b:e0:9a:bc:8d:c6:ad:d7:89:ef:
a7:97:c3:5a:1d:d4:e5:c1:85:43:e1:01:b4:2c:95:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:C8:91:40:A3:BD:F2:4E:BB:F0:CB:C1:59:D1:3D:92:35:7F:81
X509v3 Authority Key Identifier:
keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.38.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:ba:e1:66:ee:2b:2c:4d:07:b0:af:ca:47:97:4b:cc:f9:d7:
da:73:66:17:a4:51:fa:c2:64:0e:82:56:2e:2e:d7:df:31:3b:
72:ce:25:33:96:c4:10:db:a3:68:6f:d8:91:ea:ce:75:46:41:
0c:40:67:e6:af:e9:dc:f7:9c:1c:1e:da:c6:04:5b:50:0a:2e:
4c:66:1e:04:66:13:ba:85:0e:4e:ab:a9:fa:e0:51:0c:36:81:
a3:57:35:68:0a:48:f4:bf:ed:e2:38:29:18:25:0a:6e:cf:a2:
7f:61:c6:be:ef:25:15:89:59:6b:43:62:43:2f:11:c7:23:ba:
46:95:9a:b5:3f:e1:4f:20:54:1a:bb:3e:a5:e6:2c:f6:0a:87:
98:6a:67:ad:f7:d2:18:3f:de:9e:b9:e9:e6:a3:52:5f:3c:19:
79:2d:71:99:60:f7:eb:84:d5:ab:72:65:a3:44:b6:86:73:36:
98:7e:7a:29:e0:7e:1e:bf:56:e3:b5:0d:7f:57:15:ad:4b:84:
b9:b1:65:56:9c:0d:78:50:54:12:55:13:77:91:dc:f2:e2:2c:
b2:d9:35:ef:e0:4b:48:c1:3a:03:4e:7f:63:7f:45:dc:26:3a:
74:da:69:4f:d4:ce:44:d0:d1:6c:65:ab:ee:d9:e6:4a:7c:fa:
26:c6:d6:ab
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2
NUIxQTJEQUQwHhcNMjYwMTI4MjAxNzI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDDA02OTdhNmVkOC02Mzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDEhZ1jPKsg7OL5dqLYz/i6dPpxQ8DDQmuXx+FmYUc032ysqJbPTZBjYa8n3
5N2aZMZ2NL3tDTF9AyYlF7TD+gxt9FYpDosl7+AS03dvPR7XFWcrYt/KMuesVyHC
/Y35RBE5p8rPHIOt9saGpIAdObD6KR3e5WwEn3idXO1H9pQFx6UXg6JqqReLqU6O
ljvGEjWLVRv/E5RNVjxVwJ5HS3uiiGyq5UQk2cIDk6axu7QJ2QY7wLCsuI+LJgcE
VfSnYF+v1w05yzESbQccJqRUsxOf6BDisgbfdw4HI8G/xqz1zSA6dSvgmryNxq3X
ie+nl8NaHdTlwYVD4QG0LJV3vwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFUSyJFA
o73yTrvwy8FZ0T2SNX+BMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF
OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFBNkEvNjJCRTBBQzZDRTlFMTFFQTg4NTRBMTUwQzRGOUFFMDIvQjM3QTFBQjRF
MUE4MTFFRkJDMDVBMjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmSYwDQYJKoZIhvcNAQELBQADggEBAJ664WbuKyxNB7Cv
ykeXS8z519pzZhekUfrCZA6CVi4u198xO3LOJTOWxBDbo2hv2JHqznVGQQxAZ+av
6dz3nBwe2sYEW1AKLkxmHgRmE7qFDk6rqfrgUQw2gaNXNWgKSPS/7eI4KRglCm7P
on9hxr7vJRWJWWtDYkMvEccjukaVmrU/4U8gVBq7PqXmLPYKh5hqZ6330hg/3p65
6eajUl88GXktcZlg9+uE1atyZaNEtoZzNph+eingfh6/VuO1DX9XFa1LhLmxZVac
DXhQVBJVE3eR3PLiLLLZNe/gS0jBOgNOf2N/RdwmOnTaaU/UzkTQ0Wxlq+7Z5kp8
+ibG1qs=
-----END CERTIFICATE-----
Generated at Thu Feb 19 23:28:43 2026 by rpki-client