
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/A7EF5240597511F185BDC55FA6833773.roa
File: A7EF5240597511F185BDC55FA6833773.roa (raw, json)
Hash identifier: vMT6HIl8Z5EGx4usQl1z7aLkoXG0MO5waBi4qFCMQ7Y=
Subject key identifier: 5C:1A:2A:42:A1:9A:AB:68:A4:1A:69:C1:2F:9E:A8:59:F2:8D:BA:E3
Certificate issuer: /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial: 1C44
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/A7EF5240597511F185BDC55FA6833773.roa
Signing time: Fri 02 Oct 2026 17:29:20 +0000
ROA not before: Fri 02 Oct 2026 17:29:20 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 4837
IP address blocks: 103.3.132.0/24 maxlen: 24
113.9.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 16:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7236 (0x1c44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Validity
Not Before: Oct 2 17:29:20 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6abfe9f0-5b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:5f:79:d7:7a:4b:83:ba:b0:e2:93:39:61:
63:8c:30:83:af:38:97:1c:90:39:5e:19:0c:f2:37:
8e:7b:cb:f5:5b:50:57:65:99:08:d8:54:db:79:6f:
5e:bd:56:2e:8b:ba:aa:b5:ac:8c:a1:91:8b:fc:2d:
83:03:31:5b:9c:97:64:94:df:d6:9a:a3:60:9f:c5:
75:6e:d8:01:b6:19:7a:33:23:7f:76:66:93:2f:64:
f3:c5:bb:50:36:ed:d4:ba:9f:05:ac:56:4e:c1:84:
f1:9f:97:a8:f7:35:79:26:c1:1c:8b:04:bb:04:14:
45:9e:8b:be:34:96:96:d4:33:19:a4:53:df:a1:60:
bc:43:c7:94:bf:72:1d:29:46:18:cc:e0:03:ee:d7:
70:0b:21:f8:89:9c:9d:d0:4a:07:90:7e:5b:93:54:
cf:76:a2:12:d3:c7:6e:89:57:c3:71:92:15:32:6b:
44:84:ff:0c:8d:5a:51:31:bf:88:05:1f:23:5b:93:
af:c4:ed:ff:c0:5a:b7:1d:f4:0d:e6:c7:b1:0d:ef:
ac:e6:40:3b:37:a6:c3:ef:d1:4f:76:5b:58:fb:b2:
05:ff:10:5d:76:d2:31:4b:c9:c7:35:47:07:49:04:
71:ce:a5:4d:72:df:57:e9:89:87:c3:e5:de:1e:99:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:2A:42:A1:9A:AB:68:A4:1A:69:C1:2F:9E:A8:59:F2:8D:BA:E3
X509v3 Authority Key Identifier:
keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/A7EF5240597511F185BDC55FA6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.3.132.0/24
113.9.196.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1e:f6:27:c5:99:18:55:3a:46:ae:4c:79:a1:d1:b2:5b:2a:
0d:5b:b4:e6:da:04:d8:5b:e4:50:e1:50:3f:86:3b:86:e5:c4:
c2:55:31:1e:54:5a:f6:bb:76:81:9c:49:b4:0b:72:f1:cd:b4:
bd:24:d3:49:f4:6e:ac:6b:67:96:f1:65:8b:c0:a4:ea:ee:64:
16:f7:b3:30:e5:b7:58:af:f8:1d:50:67:16:27:12:17:b8:29:
95:40:06:a1:b4:1a:a7:09:58:a7:99:88:ab:ab:fc:65:87:68:
63:cb:b6:e4:3d:33:da:a0:79:66:e9:50:be:e0:9c:b2:ef:99:
db:51:66:58:fd:32:c6:24:47:64:4f:fd:fa:e2:9b:23:6e:77:
43:6d:b4:7e:d5:e7:4d:d2:f9:11:5a:03:b4:a1:9e:a0:cb:5d:
f3:9a:ce:1a:b5:73:57:41:ae:82:bc:73:f9:c1:8b:68:59:94:
f9:2e:25:85:95:4c:94:51:81:2f:18:e3:e9:ea:13:2f:34:fa:
72:62:4c:22:14:1e:9a:ed:80:fa:e7:ee:07:c5:b8:7b:f7:31:
3f:b4:71:47:5b:e9:e0:ff:ca:9e:cd:c0:26:ff:34:a1:70:ed:
a3:6a:1c:83:1e:41:c8:9d:37:48:1b:e5:3b:b6:22:cd:81:81:
fe:1b:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:44:40 2026 by rpki-client