
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa
File: CDB51BDC739411EEB8BAE858C4F9AE02.roa (raw, json)
Hash identifier: FCrLiwYHO+gGxzV/UjjW2dmefunZUp5R/lmKyNKr/CI=
Subject key identifier: 0E:81:62:89:B4:BA:11:21:A4:61:D5:05:B2:99:97:05:64:7D:52:2B
Certificate issuer: /CN=A9126996/serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Certificate serial: 0227
Authority key identifier: 62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa
Signing time: Mon 31 Aug 2026 03:51:47 +0000
ROA not before: Mon 31 Aug 2026 03:51:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 58511
IP address blocks: 103.22.144.0/22 maxlen: 22
2401:3900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 03:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 551 (0x227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126996, serialNumber=6283BE9B31D29036B967BFF7B7E71BADD529A64E
Validity
Not Before: Aug 31 03:51:47 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a94fa53-a7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:5c:1e:e4:e1:99:66:e2:a3:cf:b3:a6:c8:
b2:01:63:1d:29:69:cc:37:e3:4b:5e:a5:b3:de:12:
0b:03:ca:5b:c8:b3:0c:3f:f5:88:d5:f8:af:0a:2f:
b6:e7:68:66:de:d3:25:2a:12:ab:ef:48:23:dd:cc:
65:28:1a:b8:ac:bf:ce:3b:62:57:5c:bf:6d:3d:15:
08:c8:07:ae:b6:6e:7a:4d:fa:ae:10:c8:2b:71:47:
82:5c:5d:79:bd:d4:c5:be:cb:4b:ee:d2:46:cf:fa:
06:ef:00:5d:00:5c:96:25:d9:83:64:96:f0:71:ae:
c0:6a:d5:95:f0:7a:64:c4:2e:02:2d:cd:9b:d4:39:
1a:3d:ec:66:8d:8b:bb:83:76:e9:99:40:68:c6:e7:
d8:99:e2:d6:a4:c4:77:33:31:9c:11:e3:43:40:f1:
eb:12:4a:fa:17:a2:b9:5c:a5:f5:ee:ee:41:a1:06:
0c:3d:a6:8f:67:9b:85:71:b5:15:eb:a4:65:ed:51:
d5:37:d0:d4:17:c8:c1:dd:e9:2b:96:e4:01:c1:86:
86:47:03:20:92:ca:fe:70:13:7e:50:86:eb:2b:83:
31:3f:7f:5e:91:e9:61:14:af:13:d1:e9:80:99:74:
89:d3:e9:24:a8:94:e8:49:69:06:70:20:37:f9:0d:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:81:62:89:B4:BA:11:21:A4:61:D5:05:B2:99:97:05:64:7D:52:2B
X509v3 Authority Key Identifier:
keyid:62:83:BE:9B:31:D2:90:36:B9:67:BF:F7:B7:E7:1B:AD:D5:29:A6:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/YoO-mzHSkDa5Z7_3t-cbrdUppk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoO-mzHSkDa5Z7_3t-cbrdUppk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126996/1231FC68739411EEA170384DC4F9AE02/CDB51BDC739411EEB8BAE858C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.22.144.0/22
IPv6:
2401:3900::/32
Signature Algorithm: sha256WithRSAEncryption
67:10:23:68:30:f8:12:9d:00:91:60:e8:51:b1:89:c9:16:66:
cf:f5:13:73:c9:35:cd:60:ca:df:09:2d:3c:2c:fa:b3:75:3a:
b4:4e:08:22:40:bf:62:34:4f:53:f8:0c:5d:8e:2a:5d:c3:87:
f9:17:c2:17:ec:0f:f1:6d:0c:e3:a2:31:21:49:28:8a:f8:1b:
60:8d:eb:bd:5e:17:61:c5:fe:3b:d0:ee:6a:6b:ca:40:ee:06:
26:61:09:e8:05:ec:44:e9:95:bf:91:12:2e:a0:9a:6b:09:87:
9f:a7:7f:a9:84:72:92:e0:0c:8f:58:c1:53:d1:52:7f:3b:3f:
b5:bc:32:b8:19:7b:b8:12:e5:3b:7e:01:d9:a4:76:90:95:4c:
b4:84:4c:58:b8:75:4d:cd:fb:71:41:c8:51:8d:fc:b6:f1:6c:
a4:6a:11:52:93:86:3d:cc:35:55:4a:43:b5:99:45:de:dd:76:
cb:64:23:c5:d6:a6:66:d8:c4:b2:dd:c8:56:b5:89:ed:a2:e7:
16:3d:65:2d:61:cc:e8:f2:fb:6f:56:45:6b:97:04:be:81:0a:
95:01:67:9e:5d:3f:60:e8:a1:c8:f4:9a:d8:5a:d9:fb:2a:93:
62:3a:66:bc:fa:d1:fc:ff:98:ec:c3:96:f7:eb:3b:f0:b5:b5:
ec:1d:7a:1f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OTYxMTAvBgNVBAUTKDYyODNCRTlCMzFEMjkwMzZCOTY3QkZGN0I3RTcxQkFE
RDUyOUE2NEUwHhcNMjYwODMxMDM1MTQ3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0ZmE1My1hN2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm+RcHuThmWbio8+zpsiyAWMdKWnMN+NLXqWz3hILA8pbyLMMP/WI1fivCi+2
52hm3tMlKhKr70gj3cxlKBq4rL/OO2JXXL9tPRUIyAeutm56TfquEMgrcUeCXF15
vdTFvstL7tJGz/oG7wBdAFyWJdmDZJbwca7AatWV8HpkxC4CLc2b1DkaPexmjYu7
g3bpmUBoxufYmeLWpMR3MzGcEeNDQPHrEkr6F6K5XKX17u5BoQYMPaaPZ5uFcbUV
66Rl7VHVN9DUF8jB3ekrluQBwYaGRwMgksr+cBN+UIbrK4MxP39ekelhFK8T0emA
mXSJ0+kkqJToSWkGcCA3+Q2JFQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFA6BYom0
uhEhpGHVBbKZlwVkfVIrMB8GA1UdIwQYMBaAFGKDvpsx0pA2uWe/97fnG63VKaZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk5Ni8xMjMxRkM2ODcz
OTQxMUVFQTE3MDM4NERDNEY5QUUwMi9Zb08tbXpIU2tEYTVaN18zdC1jYnJkVXBw
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvTy1tekhTa0RhNVo3XzN0LWNicmRVcHBrNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OTYvMTIzMUZDNjg3Mzk0MTFFRUExNzAzODREQzRGOUFFMDIvQ0RCNTFCREM3
Mzk0MTFFRUI4QkFFODU4QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZxaQMA0EAgACMAcDBQAkATkAMA0GCSqGSIb3DQEBCwUAA4IBAQBn
ECNoMPgSnQCRYOhRsYnJFmbP9RNzyTXNYMrfCS08LPqzdTq0TggiQL9iNE9T+Axd
jipdw4f5F8IX7A/xbQzjojEhSSiK+Btgjeu9Xhdhxf470O5qa8pA7gYmYQnoBexE
6ZW/kRIuoJprCYefp3+phHKS4AyPWMFT0VJ/Oz+1vDK4GXu4EuU7fgHZpHaQlUy0
hExYuHVNzftxQchRjfy28WykahFSk4Y9zDVVSkO1mUXe3XbLZCPF1qZm2MSy3chW
tYntoucWPWUtYczo8vtvVkVrlwS+gQqVAWeeXT9g6KHI9JrYWtn7KpNiOma8+tH8
/5jsw5b36zvwtbXsHXof
-----END CERTIFICATE-----
Generated at Mon Aug 31 13:11:08 2026 by rpki-client