
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/D1D6719A10DD11EDBC7EA35FC4F9AE02.roa
File: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (raw, json)
Hash identifier: a2w/nBaSOFVCnyEX9As7G1AQDs2X3EerPQVXSLGjS1Y=
Subject key identifier: 21:37:18:C8:79:B6:C0:5F:65:FF:1B:9F:61:88:D8:69:99:71:AB:57
Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10
Certificate serial: 0355
Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/D1D6719A10DD11EDBC7EA35FC4F9AE02.roa
Signing time: Wed 05 Aug 2026 01:50:44 +0000
ROA not before: Wed 05 Aug 2026 01:50:44 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 139043
IP address blocks: 103.191.122.0/24 maxlen: 24
103.191.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl
rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:36:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10
Validity
Not Before: Aug 5 01:50:44 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7296f4-04bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:f6:8a:a7:dd:b3:38:dd:8b:83:cb:f4:59:
25:3b:2b:c9:da:ec:46:c5:de:f1:6c:bc:55:10:d3:
81:d8:8a:a2:fa:74:6c:cf:e5:f9:14:23:5b:4f:a9:
16:9a:1e:f9:a5:3b:22:16:0b:80:09:36:3d:12:3e:
9c:59:24:68:ee:b9:08:c1:44:ea:71:1a:0c:e5:46:
e5:43:d0:59:60:fa:69:ff:28:3d:94:35:ee:a8:8c:
7c:10:36:51:19:ea:1e:b7:77:ad:68:a2:4e:2d:7f:
ca:1b:e9:9b:9b:73:79:9f:b1:05:03:37:33:af:f8:
11:d3:27:c1:32:63:82:5a:0e:94:8c:48:61:d5:b5:
39:fa:bd:cc:57:2b:7b:42:7b:a1:e8:d5:64:e7:3b:
58:e7:44:ab:63:c9:5c:48:cf:05:9f:2d:1b:49:c6:
cc:0a:a5:80:eb:f8:ee:58:2e:1c:30:dc:4c:c2:c8:
41:b8:5c:9f:da:04:33:4b:a9:41:45:91:02:05:2e:
03:db:90:c9:b4:d5:10:be:31:a2:e2:f8:b3:95:c9:
8c:36:aa:5d:a1:cd:11:1e:81:a6:4f:7e:99:ed:30:
c4:89:be:fc:15:29:72:ad:42:c6:ef:7e:b8:54:36:
3f:78:a6:1c:62:c2:37:3a:5b:0e:df:67:14:99:d3:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:18:C8:79:B6:C0:5F:65:FF:1B:9F:61:88:D8:69:99:71:AB:57
X509v3 Authority Key Identifier:
keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/D1D6719A10DD11EDBC7EA35FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.191.122.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:a7:67:61:dd:57:71:d9:63:9f:17:82:80:15:d3:75:8a:3a:
c8:db:8d:a7:41:f7:cc:91:ff:dd:0f:1a:b8:1a:40:e6:57:0b:
2b:d9:fe:3f:33:24:ac:cd:2a:75:e1:0a:d5:89:c3:94:a8:b9:
ae:f2:df:e7:18:f6:4f:7a:e0:c0:b7:4a:7e:60:83:96:1c:60:
71:27:47:6b:95:52:78:e0:0e:0d:20:01:25:a8:bc:58:2d:a0:
2e:13:92:4d:2a:cc:b6:90:94:b7:7c:22:f0:1f:d9:ba:23:d5:
f2:bc:82:93:d4:24:d3:ca:f6:20:e6:e0:3b:e7:f8:27:73:0a:
fc:b7:29:92:3e:f2:4f:42:52:96:94:1a:b4:98:ed:c1:ce:5e:
e1:19:ca:7d:14:23:02:4f:32:4f:1f:57:87:6e:02:42:07:ba:
59:d7:4d:c9:e0:3d:9b:4e:dc:21:24:31:19:46:0b:bd:d9:98:
98:f2:2d:b7:5c:26:90:fe:11:8e:83:37:1c:20:1f:da:a6:f3:
b1:5c:a7:ce:c5:c1:8e:d3:38:e7:0b:3b:c0:e7:67:84:1f:73:
3a:58:27:e5:9d:14:55:87:14:24:4f:25:3a:d1:4c:fe:7b:c7:
a3:f5:b9:69:5c:ea:3b:ca:ca:aa:18:9c:f9:97:11:0c:3c:2f:
0b:d2:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:56:34 2026 by rpki-client