
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/31A9E86E717711ED807F3C30C4F9AE02.roa
File: 31A9E86E717711ED807F3C30C4F9AE02.roa (raw, json)
Hash identifier: 1aEsNWuZSx2JEx3Yb1eSlF/QSpBuCxTwM5H1dfUZSyo=
Subject key identifier: 68:10:2C:9F:20:BD:05:0B:16:7A:A2:01:63:D5:B2:2C:0E:3A:AC:16
Certificate issuer: /CN=A9136592/serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Certificate serial: 0343
Authority key identifier: 8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/31A9E86E717711ED807F3C30C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:04:50 +0000
ROA not before: Thu 31 Jul 2025 02:08:43 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 63969
IP address blocks: 103.190.228.0/23 maxlen: 24
2001:df0:f340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 00:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136592, serialNumber=8ECF9FAE43F7D1CD6E1202834C0F41ACC1BE1C38
Validity
Not Before: Jul 31 02:08:43 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a42b62-fe47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:21:ba:69:b7:dc:23:09:8d:c6:13:95:e8:
f9:ed:cd:96:d1:38:fd:1e:05:ff:46:59:de:85:77:
84:e6:69:be:0d:04:e5:51:fe:1e:a6:bb:25:7a:29:
3a:d6:73:81:cd:0d:48:76:60:b4:ad:c4:93:23:67:
fc:9c:01:c5:d4:d5:25:0b:b8:b8:b5:9e:0f:d9:50:
9b:5f:ba:9c:33:cc:be:5d:43:c5:24:0a:03:3b:4c:
4c:26:74:f6:d6:3e:15:c7:fb:c2:71:f7:5f:84:46:
1f:1e:fe:77:a3:4d:4f:9e:3e:6d:e6:14:b9:bb:2d:
fd:03:29:45:fe:ce:4a:b5:a0:4e:78:2e:5f:33:1b:
25:2b:b8:cb:2e:b2:77:5a:aa:ea:45:4b:53:40:97:
b7:3c:e8:26:78:c3:c3:b3:a0:cb:8b:f3:b7:fb:14:
67:60:90:ca:93:3a:62:17:39:b2:ba:32:92:59:4e:
0b:c6:d6:44:ee:db:c8:b0:49:ad:20:00:05:d6:5a:
40:6d:8a:9a:b4:d6:b1:0e:07:56:12:f6:d1:bb:23:
5f:65:1a:05:fc:5c:ed:b6:76:fa:83:5d:ae:9b:f5:
c6:ba:53:d2:df:6e:88:73:02:6f:8c:43:ae:40:36:
28:1d:3e:7b:ef:d4:48:4c:7c:9d:21:17:48:3b:86:
ee:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:2C:9F:20:BD:05:0B:16:7A:A2:01:63:D5:B2:2C:0E:3A:AC:16
X509v3 Authority Key Identifier:
keyid:8E:CF:9F:AE:43:F7:D1:CD:6E:12:02:83:4C:0F:41:AC:C1:BE:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/js-frkP30c1uEgKDTA9BrMG-HDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/js-frkP30c1uEgKDTA9BrMG-HDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136592/D91531B6FEC811ECA7CD9369C4F9AE02/31A9E86E717711ED807F3C30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.190.228.0/23
IPv6:
2001:df0:f340::/48
Signature Algorithm: sha256WithRSAEncryption
b5:fc:65:ee:cf:de:ae:8f:3a:c9:64:7e:9f:b7:b6:a3:a6:56:
08:82:78:1f:c8:3b:8b:fa:64:a0:19:2f:3b:35:3b:fc:c4:53:
72:bf:90:a2:c4:62:e8:bd:a4:c2:e2:35:d8:25:9c:4b:d2:c5:
eb:94:a0:f9:ff:f2:a8:81:d7:11:10:c1:04:c4:f0:fd:a0:8e:
39:84:87:58:1d:19:b9:98:94:f2:26:21:02:27:0a:5f:1d:03:
f5:8f:5e:f6:aa:b3:af:ee:dc:87:01:be:19:5e:47:69:f1:59:
33:48:fe:df:64:7d:3d:3f:95:f4:d6:23:dc:a3:fb:39:02:3c:
df:06:aa:f1:98:fe:ca:19:f4:3c:db:94:42:fd:63:9d:bb:e3:
d7:a5:fd:a4:e0:9a:36:46:f9:52:1b:6a:90:47:b0:e5:44:81:
65:4c:45:6a:9b:00:18:32:63:a5:6b:3e:17:66:47:d9:b6:69:
b3:de:70:ae:99:2d:e1:d4:13:0e:99:31:33:1d:01:9d:cd:c8:
22:20:c5:61:e8:8e:65:21:82:c5:09:0a:c9:78:0d:2b:37:9b:
da:d5:c0:b0:b0:02:1b:8b:d2:4e:e0:53:47:a3:3e:5d:fa:d7:
01:05:2c:49:5b:7b:b0:7b:40:c4:22:cd:8a:4d:26:e1:ad:db:
70:82:b0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:20:25 2026 by rpki-client