
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
File: BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa (raw, json)
Hash identifier: Ds9vEagUQ0hZWk+8wqhGvKXIiqjSnO6i0xGwFyu2P2Q=
Subject key identifier: 58:1D:68:68:DA:A3:B2:37:61:CD:8E:5A:2D:FD:46:C4:22:5C:DF:20
Certificate issuer: /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial: 075A
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
Signing time: Sun 02 Aug 2026 22:44:02 +0000
ROA not before: Sun 02 Aug 2026 22:44:02 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 142063
IP address blocks: 103.166.102.0/24 maxlen: 24
103.166.103.0/24 maxlen: 24
2001:df1:b340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 22:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1882 (0x75a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131067, serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Validity
Not Before: Aug 2 22:44:02 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a6fc832-cd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:80:66:a5:6e:62:60:b6:1d:e5:a9:f3:b4:
fd:e6:cb:01:24:82:57:ea:5a:76:4e:02:66:ad:c9:
dd:dd:d9:be:10:e8:13:bc:fe:8b:b6:33:d9:6d:ac:
09:2f:2a:e1:c2:44:9b:9a:d9:4c:e1:3b:fa:f6:af:
b1:83:64:73:de:c4:00:9a:c5:68:2a:df:66:c2:d6:
94:61:8b:4a:ed:98:7c:de:52:72:99:39:4d:51:f7:
6f:74:d7:b5:dc:86:72:64:12:d5:9f:8e:61:bb:33:
24:3c:73:8c:61:5e:10:69:22:07:f8:6d:97:dc:52:
07:a8:d1:64:75:f8:b6:ca:7e:f8:08:c6:9c:6e:55:
28:2e:03:61:29:07:de:10:37:11:ac:27:ad:0d:4c:
6d:9d:cd:83:61:6c:bd:df:9f:3d:10:91:54:8b:d2:
b7:0f:6d:0a:bb:fc:67:05:57:37:72:84:91:4f:e5:
38:27:26:4f:7e:c6:7d:a1:f9:a5:8f:76:8b:69:0f:
3d:24:66:5b:bc:fd:ff:a7:91:4b:6b:cf:09:59:39:
93:98:a8:42:41:f5:0a:d7:93:52:69:76:a6:a2:65:
9b:6f:f5:a0:85:27:34:bb:1d:3c:7a:3b:d3:68:55:
82:ce:de:fd:30:d0:e8:41:8d:f9:02:bb:d5:00:a4:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1D:68:68:DA:A3:B2:37:61:CD:8E:5A:2D:FD:46:C4:22:5C:DF:20
X509v3 Authority Key Identifier:
keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/BD9AE4AE55D111F0A7CFBB2BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.102.0/23
IPv6:
2001:df1:b340::/48
Signature Algorithm: sha256WithRSAEncryption
13:29:e0:83:03:0a:19:29:e8:d7:bf:5f:41:ce:f9:cc:74:3b:
45:e4:4a:b0:61:7c:61:c6:51:2c:31:b1:2b:17:65:61:29:c7:
a0:b3:07:bd:ca:f8:02:5e:21:64:53:98:8f:2d:9c:2b:11:c4:
30:16:d1:ba:12:95:d6:35:21:c4:38:49:95:53:75:f5:43:d7:
76:34:25:3a:61:0c:c6:ef:87:3b:28:7c:b2:91:9d:fa:75:34:
fd:16:14:eb:99:75:c4:8b:4d:d8:bb:cc:28:d2:72:a7:d9:fa:
a9:63:4e:18:18:e5:56:b9:11:e1:ca:5f:79:33:7a:b7:a2:c9:
ed:26:63:30:6a:c8:1b:d8:32:c2:b4:de:cb:a1:f8:3e:61:af:
28:02:ba:09:fd:b5:12:d4:71:f5:b2:92:11:0b:e6:4f:f7:93:
a2:1f:47:32:a7:df:fa:91:1d:3f:44:37:29:2b:e1:2a:bd:99:
37:49:98:3e:6b:71:aa:75:51:49:4b:be:05:5f:36:b2:14:07:
91:e0:c1:a4:96:bf:46:85:18:e5:a1:1d:87:61:ce:8e:50:06:
86:96:10:b6:78:3a:5a:ac:b6:1b:4e:b3:c8:94:07:fc:58:2c:
14:23:d2:76:1a:4b:ff:d7:91:68:70:5e:f8:1e:08:ae:2e:e0:
c2:34:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:43:15 2026 by rpki-client