
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/77BA366C2D1A11F1A751EB31B4833773.roa
File: 77BA366C2D1A11F1A751EB31B4833773.roa (raw, json)
Hash identifier: p/66n2AFG6wI5+n7ZXbM6uycgVve50x9bVyNhh4jIvY=
Subject key identifier: 2D:47:FA:A0:23:F0:E9:16:49:57:68:82:C5:78:7F:94:10:80:7C:9E
Certificate issuer: /CN=A9118F69/serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Certificate serial: 02DA
Authority key identifier: 6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/77BA366C2D1A11F1A751EB31B4833773.roa
Signing time: Tue 31 Mar 2026 15:58:33 +0000
ROA not before: Tue 31 Mar 2026 15:58:33 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 150170
IP address blocks: 103.138.254.0/24 maxlen: 24
2001:df1:2bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 730 (0x2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118F69, serialNumber=6A1E56D5FE26C6BD2ECB0457817DC6BA3C0DE47D
Validity
Not Before: Mar 31 15:58:33 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69cbef28-26bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:47:78:9d:4d:aa:fb:db:d7:27:42:0d:80:ae:
1a:cd:a5:85:02:18:1e:22:c9:f0:bf:1a:02:4f:64:
73:64:85:9a:01:cb:a2:f7:c5:f2:98:c4:01:ec:06:
57:d6:75:12:0d:d3:88:2c:6d:f7:c3:92:f6:a0:82:
44:ea:03:58:28:0a:68:17:f3:96:01:7f:56:f1:e5:
b3:92:26:5d:1f:ab:83:49:34:6f:df:78:c4:16:bc:
22:07:45:7f:82:57:6e:af:2d:50:6e:d3:95:ff:25:
36:b9:78:72:ba:d5:7b:02:03:54:c4:1f:19:aa:73:
1d:81:80:31:c9:e9:a2:1b:d4:32:2c:07:be:be:49:
84:a3:d2:dd:59:bd:63:b9:cd:b3:91:65:cc:aa:dd:
7f:7d:b2:1f:e8:94:ba:f1:9c:ee:a1:ef:36:9c:ab:
e7:e9:c7:d6:fb:80:cb:08:b0:be:e4:bf:cd:c1:c7:
17:8f:eb:c9:54:c6:ba:3c:3e:68:c1:26:84:35:65:
a5:4d:ea:0b:a6:5e:f0:5a:ea:99:93:19:c8:df:0b:
28:d6:5f:fa:ec:2c:38:f8:a9:d2:20:f4:8d:bd:e1:
7c:42:cf:d0:1d:23:dd:ff:0e:30:0b:bf:92:a3:f5:
a7:73:63:b4:71:98:57:ce:f2:df:9c:a6:47:26:11:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:47:FA:A0:23:F0:E9:16:49:57:68:82:C5:78:7F:94:10:80:7C:9E
X509v3 Authority Key Identifier:
keyid:6A:1E:56:D5:FE:26:C6:BD:2E:CB:04:57:81:7D:C6:BA:3C:0D:E4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/ah5W1f4mxr0uywRXgX3GujwN5H0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5W1f4mxr0uywRXgX3GujwN5H0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118F69/B998DD3C290811EDBD262B28C4F9AE02/77BA366C2D1A11F1A751EB31B4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.254.0/24
IPv6:
2001:df1:2bc0::/48
Signature Algorithm: sha256WithRSAEncryption
b7:fb:ad:98:15:7b:0d:f1:c1:4d:4a:4a:05:35:70:5d:2c:e4:
93:85:83:91:b2:08:dc:49:8c:1c:24:cb:52:d9:de:d0:a8:cd:
c9:c1:3d:bd:a4:3d:30:60:c7:a2:ec:43:39:b0:de:97:31:e6:
a4:b2:08:ed:a1:9a:97:87:9b:ec:a0:37:2d:36:54:8b:79:69:
49:4c:ee:88:6b:c2:33:73:07:2d:37:03:71:75:0e:ae:b7:ef:
df:04:38:a7:12:5b:d8:8b:dc:ae:89:ab:ae:8b:25:59:21:f7:
44:d0:a6:73:73:ff:89:59:4b:e2:9c:dd:4b:1d:0c:4f:7b:07:
c8:1c:6f:8e:2d:51:07:7b:fa:72:51:c9:b8:aa:f5:e7:60:9a:
ae:11:cd:6e:15:7e:66:c0:92:0b:cd:79:ce:9a:5c:a8:74:52:
6e:5b:d0:b4:3c:5b:af:7b:02:07:c1:b8:06:1f:fc:86:5f:13:
dc:2f:27:6f:4b:7e:b5:4c:59:1a:60:23:a7:2e:33:3e:30:49:
dc:01:a2:dc:68:61:40:21:c8:9d:e8:2d:63:e2:57:f8:d1:51:
2e:da:1a:3f:4e:34:f5:e2:90:38:10:e6:1b:b9:1f:2a:b9:c3:
9b:77:92:9c:85:f7:ef:93:41:28:3f:24:de:c1:fe:dd:7c:af:
d5:85:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:23:29 2026 by rpki-client