
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/297C7A6A3D4011F1B969C11BA0833773.roa
File: 297C7A6A3D4011F1B969C11BA0833773.roa (raw, json)
Hash identifier: Akfx5AbmqvjmZDuBriT/4TdCVZGAI91Zo1oNzA3wJSk=
Subject key identifier: AB:7C:71:29:90:92:C2:B9:D9:74:95:84:32:C4:E0:5F:74:74:FA:CC
Certificate issuer: /CN=A9110B36/serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Certificate serial: 09
Authority key identifier: 36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/297C7A6A3D4011F1B969C11BA0833773.roa
Signing time: Tue 21 Apr 2026 05:08:41 +0000
ROA not before: Tue 21 Apr 2026 05:08:41 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4771
IP address blocks: 103.23.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 08:58:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110B36, serialNumber=36FD1634C94F57B4753F973D5E845D28CABCFD3D
Validity
Not Before: Apr 21 05:08:41 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69e70659-e89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:c4:66:38:e4:1b:6f:f0:3c:1d:44:b7:c7:
ca:dd:93:cc:85:ba:0c:74:0c:43:89:ad:22:8e:7e:
74:42:97:5f:b7:8c:ca:64:e6:f6:93:48:88:95:3b:
07:02:0d:8a:66:06:9e:5e:1e:43:a5:34:33:c8:c1:
db:51:35:e5:64:9b:e9:73:7e:cf:78:d9:bd:f8:d9:
ad:2b:8e:6a:da:48:54:82:69:a6:d9:27:7f:5a:ea:
66:67:f6:f7:01:11:8b:86:a4:b6:8c:6e:ca:2b:98:
5a:d8:bd:65:d9:2a:0a:4d:82:4a:4d:5a:0f:51:9c:
ac:2d:ac:5b:75:07:f1:9b:84:71:61:1a:31:31:59:
cb:95:37:86:71:ad:d6:bb:84:47:5f:6e:d5:3a:dc:
2b:a4:cd:33:4b:0d:f3:fa:1c:6b:cb:46:7d:dd:a9:
a5:88:9f:c9:7f:ff:b1:19:8b:6a:bd:9d:65:c2:84:
44:38:1a:53:26:35:35:64:d6:28:58:a4:6a:17:e1:
2c:f7:23:b8:55:6d:be:d2:de:7e:b4:90:f8:74:3b:
a5:a6:07:d6:76:47:77:c0:e7:96:f4:db:0d:94:ee:
5c:9b:6e:46:99:d0:66:e7:40:5c:ce:58:87:40:cb:
b4:b4:6a:eb:7a:60:7f:ef:eb:1d:d3:b3:6d:9a:9f:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:7C:71:29:90:92:C2:B9:D9:74:95:84:32:C4:E0:5F:74:74:FA:CC
X509v3 Authority Key Identifier:
keyid:36:FD:16:34:C9:4F:57:B4:75:3F:97:3D:5E:84:5D:28:CA:BC:FD:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nv0WNMlPV7R1P5c9XoRdKMq8_T0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B36/019F198A3AAC11F194042254C3833773/297C7A6A3D4011F1B969C11BA0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.71.0/24
Signature Algorithm: sha256WithRSAEncryption
22:8b:ff:9a:9a:58:97:bb:d7:8e:b7:75:0b:e1:73:a6:c1:0d:
45:9b:99:f5:4d:d4:34:73:67:cd:3a:9b:f3:17:f0:9b:c0:78:
13:40:2a:54:91:08:4c:34:50:5c:31:bf:65:b4:b5:a0:e2:2b:
7e:77:0e:49:ac:cf:ec:08:85:8b:56:d6:cd:aa:10:88:ea:7e:
65:f6:1d:fb:05:21:29:88:9d:1f:75:fc:14:e8:ad:49:a4:ba:
d0:a9:aa:61:24:c9:4a:eb:45:bf:0c:24:14:13:cd:57:cb:4d:
66:25:a0:c8:a0:97:98:62:03:22:b3:81:e2:6e:a4:18:38:7c:
04:8f:ee:d9:82:5a:c7:6b:32:78:d6:2b:29:13:db:76:4c:ea:
36:54:e3:49:cf:c4:e6:4c:f0:21:c4:58:45:1b:95:75:a0:49:
1c:01:e8:18:ce:ae:d6:30:3a:d3:53:11:5a:ba:e0:46:5d:00:
7a:50:30:83:61:8f:c0:21:f2:70:91:84:7d:23:b8:73:3d:67:
d0:38:61:4a:46:e7:e2:f4:d6:df:1e:bc:5c:e0:1a:24:83:1d:
a3:7e:d2:1c:ce:b4:b2:1e:db:14:44:4a:55:79:28:2b:31:1a:
77:27:97:5d:d4:94:2a:a1:7b:88:f2:4b:08:8e:1d:31:d9:b8:
a7:3e:79:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 22 02:12:54 2026 by rpki-client