
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/CE899F0A66C311F08BE17B42C4F9AE02.roa
File: CE899F0A66C311F08BE17B42C4F9AE02.roa (raw, json)
Hash identifier: /8KsOuQDF6YCKq+9HViCWxyMxMdtmN7AwyTJXtJg/FU=
Subject key identifier: 9E:49:7E:72:7F:34:3A:01:E8:CD:8C:64:76:37:0A:18:7D:43:54:C0
Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Certificate serial: 081A
Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/CE899F0A66C311F08BE17B42C4F9AE02.roa
Signing time: Thu 04 Jun 2026 21:27:06 +0000
ROA not before: Thu 04 Jun 2026 21:27:06 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55884
IP address blocks: 103.8.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 17:25:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85
Validity
Not Before: Jun 4 21:27:06 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21edaa-d660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:0c:ee:67:a8:1c:95:85:bd:ff:91:a4:83:
ba:35:9e:29:ca:0b:9e:4e:c6:e6:6f:6e:37:01:06:
ea:56:e4:d6:c2:d0:9f:09:22:fc:c2:cf:42:5d:4e:
82:f3:c5:fd:76:2c:26:6f:31:31:07:a1:2b:95:a0:
cd:ae:d5:0e:c5:71:dc:c7:84:e4:9a:6d:ef:f3:e4:
70:30:1e:25:57:c0:08:6c:65:84:19:59:e2:fc:5d:
bd:82:db:4c:1f:6f:66:4a:74:1d:9e:11:41:72:65:
a0:ce:5b:25:92:ac:c2:37:bd:3a:2c:af:e4:c2:5b:
21:d9:94:ec:30:d7:16:e3:a3:6e:e4:91:69:29:e2:
e6:bc:f1:47:5c:44:7f:9d:1c:36:54:c9:a4:65:30:
8e:5a:e4:8b:69:d7:b7:5e:81:ed:22:7f:4d:cc:dd:
56:44:9d:38:b0:df:74:7e:19:e9:dd:e9:8f:b7:26:
24:be:36:f2:95:6f:f8:c0:e0:05:75:e8:16:bc:0e:
9b:b7:fe:94:42:15:f1:27:1a:f4:64:22:b5:86:72:
26:92:af:fa:f3:8c:07:b4:1d:ed:2d:95:ab:94:8f:
e7:74:2e:68:9e:85:e9:49:ed:45:8e:a3:18:16:a7:
ea:21:cf:6e:c1:04:22:29:8d:59:47:40:81:fb:29:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:7E:72:7F:34:3A:01:E8:CD:8C:64:76:37:0A:18:7D:43:54:C0
X509v3 Authority Key Identifier:
keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/CE899F0A66C311F08BE17B42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.8.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:83:be:b2:29:a3:a9:a8:ab:37:5f:3b:2b:f6:1f:a1:c6:0b:
39:fb:6f:e7:fc:de:b3:9b:48:35:00:a5:b4:23:ca:6f:3f:1b:
ce:86:bc:82:59:a5:73:d2:00:98:c7:c6:17:48:9b:7c:26:0b:
ec:93:e2:1b:32:bf:12:f4:30:27:26:62:39:72:89:cb:b0:c8:
d2:96:29:cf:17:0c:c4:62:2f:7c:55:b2:92:e0:c0:9e:ec:1e:
db:fc:00:56:ec:be:40:85:39:06:1e:4d:46:80:5a:55:93:81:
c8:df:6f:9d:13:92:a9:c2:f7:9e:ca:64:8a:fb:69:0a:76:0b:
47:fa:a5:6e:7f:be:a3:d5:a5:21:0f:f5:fb:0d:24:f2:8f:bb:
5d:f4:9a:fd:17:62:e1:7f:ef:f8:6f:96:7e:bf:37:58:1c:73:
8e:bf:34:e2:e6:58:df:cd:c6:aa:8b:ec:06:86:17:1c:4a:d9:
4e:3c:73:a7:19:e0:1e:35:e2:ba:5a:d6:31:eb:9f:7d:f3:04:
41:79:0d:65:6c:79:98:9e:a4:c7:b2:10:13:c9:49:fb:dc:f7:
ca:85:d0:c8:fc:d2:a4:7f:4b:bc:44:42:e3:fe:a1:9b:80:ec:
27:dc:59:53:b8:dd:25:c0:3d:65:a8:90:3c:d4:71:e7:69:fe:
89:cd:34:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 23:23:36 2026 by rpki-client