
$ rpki-client -vvf rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/9DBC04A4C03111F0BF336D44C4F9AE02.roa
File: 9DBC04A4C03111F0BF336D44C4F9AE02.roa (raw, json)
Hash identifier: FZFm/uHWHjdUKTUMs6PEA6/rC5z72vRgk2jmyhr256s=
Subject key identifier: FD:04:36:D1:A2:E0:A2:67:D8:BD:A5:44:44:11:21:FC:1C:74:2A:8F
Certificate issuer: /CN=A9150A9C/serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
Certificate serial: 9B
Authority key identifier: 24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/9DBC04A4C03111F0BF336D44C4F9AE02.roa
Signing time: Tue 18 Aug 2026 20:39:47 +0000
ROA not before: Tue 18 Aug 2026 20:39:46 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 140711
IP address blocks: 103.152.18.0/23 maxlen: 23
103.152.18.0/24 maxlen: 24
103.152.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl
rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:39:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A9C, serialNumber=24B0FC18C1A7AFF53F83CAB26062535D2CC5EE6F
Validity
Not Before: Aug 18 20:39:46 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a84c312-50aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:6c:61:30:3f:0e:f5:dc:d2:1b:09:28:c9:
ec:c2:f7:ac:56:d5:6f:52:20:29:a6:07:1c:ac:d9:
f0:d8:49:59:d0:c2:37:f9:5f:ee:13:94:29:f1:d3:
f8:af:7e:9e:93:18:09:80:ae:26:6e:8e:78:1d:1b:
86:4b:b3:01:b9:e8:0e:2c:05:62:2c:de:99:9d:ca:
4c:65:4c:a8:9c:a4:5b:96:c6:3b:f0:26:63:16:89:
27:ac:19:c8:c9:b2:ee:b4:d5:72:a9:82:bf:d4:70:
b7:4d:85:9f:01:43:ca:c8:27:36:9a:16:66:eb:77:
f4:2c:a1:9f:5b:7a:ce:73:35:26:89:9f:01:7e:40:
ee:07:84:e3:53:a1:ac:2a:b7:49:01:ee:31:51:51:
02:3f:28:db:33:b8:cf:0b:a1:0f:16:38:39:15:45:
b9:cf:81:70:27:bf:c1:65:f9:52:40:24:79:9d:3c:
f9:41:dd:df:52:33:84:e5:26:70:5a:cc:dd:8c:9e:
c4:49:a0:ef:f3:e6:f1:67:e6:53:a6:af:03:65:55:
cf:71:a1:b2:70:0e:24:9d:bb:ae:1d:2b:7e:a4:9e:
79:a5:3f:ea:b8:37:89:64:dd:a7:dc:26:43:01:98:
de:72:29:92:c5:51:bd:df:64:67:bc:e6:2f:68:dd:
10:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:04:36:D1:A2:E0:A2:67:D8:BD:A5:44:44:11:21:FC:1C:74:2A:8F
X509v3 Authority Key Identifier:
keyid:24:B0:FC:18:C1:A7:AF:F5:3F:83:CA:B2:60:62:53:5D:2C:C5:EE:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/JLD8GMGnr_U_g8qyYGJTXSzF7m8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JLD8GMGnr_U_g8qyYGJTXSzF7m8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A9C/2A29484CABA811EA95CE2C16C4F9AE02/9DBC04A4C03111F0BF336D44C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.18.0/23
Signature Algorithm: sha256WithRSAEncryption
94:b9:1f:af:41:be:da:4d:99:5c:20:8b:a2:25:3a:28:e6:e4:
03:ba:cd:06:45:f0:49:6c:70:99:b6:0a:3c:ea:86:2d:ec:a4:
46:6f:af:a7:6b:45:be:e6:2f:9f:99:2e:2f:a4:cb:ed:78:3a:
a3:d1:d9:d5:62:82:a6:cc:99:69:d1:96:ed:00:64:69:7f:90:
64:a6:49:cf:2d:89:40:4b:71:00:ce:75:6a:59:fa:65:24:38:
9c:7c:a8:f3:7d:32:b6:24:f0:44:14:fb:70:cb:ab:e7:1e:66:
3d:ca:53:4b:3d:88:8f:cb:38:60:ec:ca:71:2f:23:9c:5a:e1:
a0:57:d5:14:22:ea:49:dc:20:25:c2:9a:c4:62:12:9a:c2:2a:
61:c5:59:58:77:7e:41:de:ad:89:79:12:66:c8:78:18:a3:44:
84:93:c4:40:5e:df:37:5d:bd:d7:d7:4e:67:51:6f:4d:32:8d:
c4:1a:62:b2:ab:d6:75:77:ed:52:c4:2d:c6:a5:c0:5d:65:3a:
6e:5c:6d:21:dc:6b:f1:f3:3b:c9:82:4e:61:55:e3:a4:4b:25:
80:58:05:b8:c5:38:bf:b0:c0:a7:1f:de:98:01:be:16:33:08:
39:4b:52:c0:a6:46:03:ec:0f:56:d6:db:be:1f:ab:a3:34:e6:
10:51:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:45 2026 by rpki-client