
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8DA5399A684D11F1BBB25DD59747A888.roa
File: 8DA5399A684D11F1BBB25DD59747A888.roa (raw, json)
Hash identifier: vYdGAaldDsQxveWE1qbJqCcJHQVSUfznx4SEkH0JzVI=
Subject key identifier: 15:7E:11:A1:E2:33:D1:FF:15:23:6D:83:E1:04:DD:CD:1E:19:94:34
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3D0B
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8DA5399A684D11F1BBB25DD59747A888.roa
Signing time: Mon 15 Jun 2026 00:02:52 +0000
ROA not before: Mon 15 Jun 2026 00:02:52 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 18340
IP address blocks: 103.124.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15627 (0x3d0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Jun 15 00:02:52 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=6a2f412c-2693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:88:cb:02:c5:ca:ed:0f:63:5e:00:29:25:
d2:10:28:2d:86:69:84:fa:d1:4c:51:f4:b5:5c:01:
75:7e:3a:73:b7:13:a3:e5:26:bb:4d:9b:e0:62:2d:
41:4b:f6:6b:6f:c9:a1:58:e2:05:dc:cc:53:61:5e:
a8:11:e8:29:b7:08:24:53:90:e2:33:99:7c:c2:09:
f8:74:b9:42:0c:b5:d1:c1:27:e9:6c:27:b6:f7:26:
63:57:b2:3e:e8:ab:a2:c7:44:22:7a:ae:fc:0c:30:
78:92:bf:7a:75:a1:3a:c2:78:4d:1d:af:75:c0:c2:
51:da:b4:64:d5:fd:16:d6:a9:1f:ff:32:08:29:f3:
5c:2e:a8:25:3c:e8:4a:27:86:b6:62:02:1e:80:2f:
11:0c:65:ba:97:79:95:0e:2a:f6:dc:ea:52:7d:1d:
c6:cc:32:a5:7d:26:4f:41:e9:a7:2a:6c:22:14:b8:
19:e9:64:6a:40:73:be:14:e1:cb:76:ba:67:52:cd:
6e:5e:8b:ae:e8:a1:4a:d2:5e:eb:a9:f9:b8:61:a0:
7c:f0:a2:cb:4d:d1:53:0c:f7:8b:f6:28:33:59:4c:
b4:ec:d7:3d:bf:48:6f:2c:bb:a0:c2:24:64:da:99:
73:a0:81:40:b4:d6:0b:48:4b:89:bf:9c:73:46:0c:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7E:11:A1:E2:33:D1:FF:15:23:6D:83:E1:04:DD:CD:1E:19:94:34
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8DA5399A684D11F1BBB25DD59747A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:b6:29:37:57:94:b3:d9:19:94:79:81:e4:72:72:f2:88:0b:
51:d8:0f:56:65:fb:fe:96:ce:08:dd:e7:81:7d:e8:69:89:d9:
d4:05:27:01:45:aa:0f:f7:c1:74:0b:12:67:0c:f2:5f:fe:27:
82:56:df:00:cf:97:32:51:9c:42:96:19:8f:57:50:d2:3c:e4:
12:88:b3:f5:02:bc:ef:6c:c0:74:cd:d6:78:f6:0a:60:88:3a:
f7:c7:db:65:9e:31:70:6f:a9:17:0f:91:31:97:83:69:59:e2:
29:9c:74:12:3a:fe:8c:d9:98:d4:db:b6:bf:75:bc:25:75:5d:
c5:f7:0f:c2:43:65:de:47:f4:3d:91:53:b0:55:85:81:14:fb:
a4:65:c8:7b:46:0a:0e:77:0d:23:3e:38:3b:69:73:cb:d7:e8:
74:a3:e6:0a:08:34:8e:73:2f:fb:12:77:2c:79:77:8f:b4:25:
f9:3c:81:f8:1a:ec:f6:c8:d3:41:ce:c5:37:dc:fd:8f:26:ee:
d1:0b:72:bb:4e:9a:73:c4:ca:59:63:d9:79:30:58:34:8d:fd:
41:4d:53:67:6a:b4:18:ee:84:2b:e5:e8:58:3e:41:4a:4d:d4:
8d:7c:26:63:f6:00:50:eb:17:10:87:21:de:60:6e:26:28:78:
4d:77:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:46:27 2026 by rpki-client