
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/CB09977AFB0D11F08355CD12746F56BC.roa
File: CB09977AFB0D11F08355CD12746F56BC.roa (raw, json)
Hash identifier: YImw3kG2tsoSq5Jg/QGVhgoG+IwwHtEUZCL22XeeZOo=
Subject key identifier: A1:4F:40:A7:5D:25:D2:20:79:65:00:67:D8:0A:FA:00:B9:A2:9C:36
Certificate issuer: /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial: C6
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/CB09977AFB0D11F08355CD12746F56BC.roa
Signing time: Tue 07 Jul 2026 08:35:37 +0000
ROA not before: Tue 07 Jul 2026 08:35:37 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 32043
IP address blocks: 103.95.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:24:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Validity
Not Before: Jul 7 08:35:37 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4cba59-2bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:08:76:a0:e9:f0:1d:df:05:51:70:d9:34:
92:52:91:9b:08:6f:38:6e:11:2a:81:27:c0:9d:b3:
0d:e6:da:bc:65:2a:d8:81:35:b5:24:c7:a3:83:0f:
4c:4f:8d:97:36:a0:92:79:68:52:be:9e:0f:24:87:
37:27:f5:33:95:2a:f0:cd:98:9e:b8:74:50:d3:28:
9b:06:50:69:76:79:55:55:f3:a1:88:76:2b:8c:e7:
f8:87:9f:ee:32:2d:a0:b2:54:94:4f:d7:6a:81:2f:
dc:d8:52:d6:0b:e2:e3:93:e1:64:c2:ce:e7:ba:a6:
c7:92:f3:eb:fd:4d:cc:14:65:17:79:d4:f5:0f:01:
74:3a:d4:96:b2:40:89:7f:75:f6:21:04:06:f9:a5:
e7:e8:65:f0:b7:c4:dc:d5:22:53:82:d5:4e:c7:56:
78:24:e9:bd:f3:a4:c1:61:8b:de:68:99:ea:4e:65:
19:d3:a8:bf:26:f5:05:bc:d2:0d:ed:fc:89:fc:c0:
60:f8:60:fc:42:96:ff:70:a2:f2:30:21:7a:8a:94:
24:9a:6d:fc:ed:af:d4:48:f5:12:54:78:b4:71:65:
2f:7d:c0:29:f3:20:2c:b6:d6:c1:60:6b:cc:15:af:
44:6e:df:54:3d:5d:16:bf:8d:ce:37:3d:e9:2e:3d:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4F:40:A7:5D:25:D2:20:79:65:00:67:D8:0A:FA:00:B9:A2:9C:36
X509v3 Authority Key Identifier:
keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/CB09977AFB0D11F08355CD12746F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.95.75.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c0:0b:3d:35:3b:69:d4:09:93:c2:2b:6e:9e:9f:7c:90:e2:
46:a0:6f:77:c1:27:1b:c7:ac:1a:11:47:28:a4:d2:64:2c:50:
d2:42:69:57:ed:f4:4d:50:b1:4c:48:c3:65:b8:14:86:a2:ea:
be:d6:6a:d4:7b:33:d5:6c:1c:e4:44:c5:11:c9:37:95:6d:73:
ee:c5:7d:93:fc:b7:d9:78:7f:f9:19:de:42:12:64:72:01:53:
43:27:c2:c3:fd:77:22:ff:59:b3:de:f4:82:3f:1e:14:5f:80:
5e:9c:07:fc:e4:64:f1:23:77:d1:19:8c:c8:50:68:68:6d:ac:
3f:30:ee:64:2a:cb:86:d4:8a:58:96:30:12:59:3d:aa:1f:fb:
96:9b:6b:bf:eb:86:1b:cc:63:3d:d2:56:8a:62:fa:f7:f7:27:
ac:ea:11:55:2c:01:67:6c:fe:93:d7:30:1d:18:a1:8e:d0:dd:
92:26:1d:01:a2:4b:47:ec:8a:cb:8f:bc:dd:a2:c3:31:f9:53:
32:c8:40:6c:13:fb:bd:5d:e1:28:8d:96:10:5b:47:d6:cf:e5:
86:75:5f:32:70:0f:cd:b9:da:e0:7b:35:cd:62:05:ee:fb:12:
49:ee:59:06:97:a0:49:46:c7:dc:d6:5b:42:fb:2d:89:1c:08:
f4:f1:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:29:02 2026 by rpki-client