
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa
File: 440FD944C56F11EE8FF5FF2FC4F9AE02.roa (raw, json)
Hash identifier: yMXreKIoxp5m8IU40Ud6zlAgFUqnP+YkdUJy299oz/w=
Subject key identifier: DA:0F:1E:AD:62:F2:79:15:26:6A:BA:61:D9:35:4F:D7:DB:43:A0:54
Certificate issuer: /CN=A9138A9F/serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Certificate serial: 0189
Authority key identifier: 2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:45:04 +0000
ROA not before: Fri 11 Apr 2025 05:10:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4826
IP address blocks: 103.136.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 03:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A9F, serialNumber=2ACE940B5DC30337D2E5421722191AB923AA75C7
Validity
Not Before: Apr 11 05:10:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a59460-982b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:c3:dd:8c:2e:8d:2c:49:83:5d:66:b4:83:
d3:f4:1b:4d:d9:e0:b6:0f:ed:f8:5e:80:68:a5:d0:
ff:93:54:00:ed:4c:fe:3a:32:65:41:b2:6f:14:11:
46:ec:6d:cd:91:bb:ec:aa:de:38:8c:a8:26:41:5f:
d0:e1:e3:a5:c5:db:4b:0b:d7:e6:fd:cf:14:3f:f9:
db:ac:81:9a:c3:4f:76:76:d3:eb:57:69:93:1e:87:
89:b0:27:56:00:ac:15:4a:8d:5c:10:8b:ca:99:a9:
84:ba:45:ca:c8:16:72:be:75:a9:df:d5:9b:11:50:
d4:60:b1:9f:24:40:87:49:35:82:d8:82:2b:1c:0c:
35:c8:49:7e:fd:e1:47:b3:62:8a:d6:7c:26:75:30:
99:ea:95:ea:b4:18:92:1a:ca:4a:4b:85:6f:ad:72:
03:e2:09:7f:99:b0:48:5f:cc:bb:d2:a9:a8:ab:c9:
75:09:e0:e1:1c:60:86:a6:28:6f:a6:8c:64:4b:8c:
92:c9:bd:74:41:dd:8a:cc:3d:3d:3d:45:62:5e:b1:
5d:51:b1:fb:9b:84:2e:cb:f9:0f:c9:ca:ea:3b:48:
10:a2:0a:99:53:4b:95:b3:97:64:3e:4a:d9:5c:d6:
27:e8:85:28:89:39:2a:25:c3:f9:ad:dc:2b:8d:a9:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0F:1E:AD:62:F2:79:15:26:6A:BA:61:D9:35:4F:D7:DB:43:A0:54
X509v3 Authority Key Identifier:
keyid:2A:CE:94:0B:5D:C3:03:37:D2:E5:42:17:22:19:1A:B9:23:AA:75:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/Ks6UC13DAzfS5UIXIhkauSOqdcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ks6UC13DAzfS5UIXIhkauSOqdcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A9F/82C67EA6C56D11EEB278534AC4F9AE02/440FD944C56F11EE8FF5FF2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:15:43:d5:ff:d0:a7:f3:e0:57:8f:55:58:76:4e:be:97:43:
09:55:71:67:67:3f:e6:02:25:d0:ab:61:f8:9d:f1:66:b8:59:
6f:92:bc:d2:87:41:a6:54:84:b7:f6:2c:4b:e0:6b:29:9a:5e:
5a:c1:c8:8c:c0:9b:35:d7:ac:8e:5d:f0:98:98:b3:53:a3:a8:
78:a8:83:14:6d:36:70:14:04:6a:cc:c5:62:c2:01:9a:91:d0:
32:b9:fc:92:bc:84:17:13:49:6a:f3:04:b9:10:74:bd:8c:2d:
1e:41:d0:55:e2:66:95:ef:48:6c:5f:f9:45:2a:3e:57:8f:b0:
7f:89:66:38:66:91:3d:4a:27:1a:aa:99:64:7c:63:d6:ce:97:
85:7f:45:13:83:d5:f0:99:40:f5:0d:e3:2a:e5:f2:42:4e:53:
63:e1:b4:d7:6e:02:f9:03:d2:34:96:ed:bf:f3:ea:e7:a6:9d:
88:33:3e:eb:ab:db:17:ce:28:43:e4:db:50:a3:4e:b2:bc:e6:
32:93:ae:10:21:95:2e:55:8e:d2:ca:0c:78:2d:25:25:44:31:
6d:2d:b8:e3:61:0d:bc:a4:27:6f:26:fe:4e:99:99:59:cf:7c:
0d:19:a0:40:ef:ac:05:b3:79:d3:5c:b1:95:d4:d1:f3:ca:7e:
3f:06:a5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:45:27 2026 by rpki-client