
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa
File: 8F8C10F021B511F192BB9899183D8C67.roa (raw, json)
Hash identifier: Qspe0e/jD5ftFW6k2VBzPuJWxT8JG0kniB7v/aJxi4Q=
Subject key identifier: 40:96:0A:FC:70:0A:91:9D:2D:4E:1F:CE:6C:7C:AC:A6:A4:F6:65:A9
Certificate issuer: /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial: 63
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa
Signing time: Mon 27 Apr 2026 08:42:47 +0000
ROA not before: Mon 27 Apr 2026 08:42:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138941
IP address blocks: 103.137.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 08:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Validity
Not Before: Apr 27 08:42:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ef2187-eb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:71:93:53:0a:9a:d4:de:6d:c6:7e:c1:73:
7a:ba:ff:e7:d0:d4:5a:d6:c9:b8:a4:f8:c2:bc:de:
9a:31:c4:8b:15:8b:d8:7d:d0:27:86:53:0e:89:9d:
11:e2:98:0a:64:b6:de:86:42:f1:03:c5:03:5d:d5:
82:33:ce:bc:98:18:f5:5b:f3:69:08:9a:7d:df:10:
ed:75:79:a7:7b:fe:7e:b6:38:b4:1a:4f:e7:65:04:
17:4d:6b:b8:a4:b1:37:c0:21:e1:f8:13:7a:ef:93:
e7:fe:df:8a:e7:74:3a:af:15:72:f8:84:45:24:2f:
cb:c2:1d:c7:16:67:65:84:6c:b2:1c:05:8f:6b:22:
b4:3f:53:b1:f0:9c:8a:2e:87:00:64:c0:50:c7:ad:
15:d2:2f:70:89:ed:25:01:e9:39:8c:02:f6:73:6c:
b6:6b:3f:95:a8:79:ec:1d:9e:d3:ba:19:65:e9:8a:
4c:47:3e:cc:85:2d:8a:b9:1e:fa:1f:6f:97:98:23:
18:38:82:ca:b6:c7:55:98:0c:d6:53:86:6d:63:1d:
b3:80:61:38:51:c8:d9:ad:56:5b:94:a2:ad:99:4b:
9c:28:85:d0:a8:c9:13:ba:fe:7e:fc:d8:85:c2:ab:
21:dc:a1:52:aa:cc:bf:29:92:98:60:2b:26:e4:5f:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:0A:FC:70:0A:91:9D:2D:4E:1F:CE:6C:7C:AC:A6:A4:F6:65:A9
X509v3 Authority Key Identifier:
keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/8F8C10F021B511F192BB9899183D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.117.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d3:7b:2c:47:63:c8:a8:cc:42:6c:c8:1b:a7:69:e1:67:79:
ad:a0:a4:9b:93:42:b7:1f:a4:d1:51:3b:3f:9a:37:e9:f5:3a:
cf:41:cc:ed:d7:f1:15:b5:47:ac:74:28:a9:79:b1:cf:3f:8e:
35:7d:43:1c:d5:99:a4:98:9e:d2:3e:b2:74:20:b4:28:6c:ce:
fb:1f:73:76:2b:f3:d2:52:76:fe:c8:57:95:8c:1e:bb:77:c2:
6d:88:2c:ce:6e:ea:4d:c5:b7:24:89:64:d4:63:a5:68:0d:2a:
27:c3:0d:4b:cc:f5:45:f2:18:39:1d:19:11:4f:5f:12:2c:ef:
2b:25:2f:d5:f4:76:6b:09:9b:71:c0:46:1d:d4:32:0c:bf:70:
11:dd:77:75:28:9f:34:1d:ea:80:aa:52:67:8b:22:4f:bd:d5:
e7:64:99:9b:7c:0c:00:b1:c8:a9:95:4b:e3:b4:6c:84:d9:e8:
dd:47:4b:6b:5e:d6:07:d1:44:1e:2c:f0:5d:c9:63:24:1f:c0:
40:29:62:6b:c9:08:a4:a3:ee:02:30:f9:6a:9e:b9:70:cc:99:
de:6a:02:67:c2:0f:2b:41:3b:d0:66:59:ca:09:12:2d:c8:9d:
0c:db:f9:f5:a0:96:19:03:6f:ec:d0:3a:4c:5e:a1:01:30:64:
1f:84:a9:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 21 11:40:15 2026 by rpki-client