
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/5B102332845711EEB3DC4A5EC4F9AE02.roa
File: 5B102332845711EEB3DC4A5EC4F9AE02.roa (raw, json)
Hash identifier: MfSrUeG5zlLQwVfLUtX7EadU02b5P4ETvocuCMNtMPM=
Subject key identifier: A8:DE:33:22:84:78:3A:5C:F6:90:8F:90:86:EC:F6:C7:09:D6:FE:D5
Certificate issuer: /CN=A9156021/serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Certificate serial: 2E81
Authority key identifier: AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/5B102332845711EEB3DC4A5EC4F9AE02.roa
Signing time: Wed 28 Jan 2026 16:12:39 +0000
ROA not before: Wed 28 Jan 2026 16:12:39 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 133201
IP address blocks: 103.255.44.0/22 maxlen: 22
103.255.44.0/24 maxlen: 24
103.255.45.0/24 maxlen: 24
103.255.46.0/24 maxlen: 24
103.255.47.0/24 maxlen: 24
202.61.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 15:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11905 (0x2e81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156021, serialNumber=AA4C9B7FFB7760D134DA34FA31129DE11A1DE2AE
Validity
Not Before: Jan 28 16:12:39 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697a3576-3d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:1f:73:b3:f7:a4:6d:38:5a:bf:0d:c3:3e:
f9:b6:b9:dc:3c:8b:c9:cd:f2:9a:ef:59:27:96:c5:
40:7e:56:a9:9f:61:f4:0b:6e:10:fa:53:06:d7:65:
38:ee:0d:02:e5:c3:2f:ba:13:4f:a3:d7:cb:1e:55:
09:1c:a8:f5:61:9b:fa:4b:b4:e7:2f:6f:f7:45:e4:
e1:eb:39:30:da:07:f5:1e:95:f5:b8:ed:27:8f:e5:
ad:d8:48:30:30:4b:b2:2d:e4:f2:fb:34:a4:42:0c:
75:7b:b8:e8:e8:d9:0d:42:d9:4b:22:95:b5:3d:18:
9e:16:c8:1a:9e:9a:7a:12:7a:d8:da:46:e4:8e:0f:
da:04:86:72:36:f4:99:6d:9f:93:c5:1e:22:40:b5:
07:61:65:b4:1e:14:da:7f:07:9c:29:33:6c:0f:c3:
27:83:22:17:47:c4:e1:67:ed:be:c2:ae:79:93:75:
65:ea:a7:43:8c:81:40:6e:41:12:a8:a8:a3:83:67:
d8:b2:46:1b:69:79:1a:b8:7e:ef:78:b6:23:ef:bc:
16:16:73:96:b4:6a:66:77:62:81:55:b4:e1:10:90:
3b:2f:a2:49:e3:4f:83:7b:58:51:ef:b8:8e:2c:be:
e4:8b:aa:90:e8:2b:96:3a:ed:e0:16:7d:af:e2:90:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:33:22:84:78:3A:5C:F6:90:8F:90:86:EC:F6:C7:09:D6:FE:D5
X509v3 Authority Key Identifier:
keyid:AA:4C:9B:7F:FB:77:60:D1:34:DA:34:FA:31:12:9D:E1:1A:1D:E2:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/qkybf_t3YNE02jT6MRKd4Rod4q4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qkybf_t3YNE02jT6MRKd4Rod4q4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156021/D98761D4692E11E388C8252E5911EA32/5B102332845711EEB3DC4A5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.44.0/22
202.61.84.0/22
Signature Algorithm: sha256WithRSAEncryption
97:34:b6:b6:ff:3b:9d:18:44:6d:61:15:68:d6:f6:d0:0e:ae:
3d:76:9a:9e:90:6b:a6:2a:d5:86:76:14:b9:d7:f6:b4:80:f4:
31:15:7b:bf:5e:0b:b4:f4:b9:08:31:dc:92:30:dc:b3:4f:6e:
57:01:73:67:49:8d:aa:03:8f:ec:c7:ca:6f:de:1c:ef:5d:1c:
d7:3f:c7:3d:b5:5e:2e:aa:d0:ea:36:62:cc:1b:74:82:5c:1e:
f5:32:94:11:bb:a5:e3:32:e6:6d:3d:a5:5f:eb:d5:50:39:27:
ab:9a:8a:f5:ce:f7:3a:4f:42:f1:2d:8b:4a:93:86:4a:6d:c2:
4c:cf:dd:4d:b5:4a:d7:4c:8c:c7:e5:e0:4f:47:4d:69:62:0d:
df:7e:ad:a7:7f:c5:ad:bd:03:ba:89:ea:00:f0:fb:2f:19:c4:
08:43:fc:dd:60:b6:4f:87:ff:b2:f7:f1:1e:cf:25:18:13:fc:
9a:bc:14:d3:dc:74:c2:32:af:5b:2a:f4:16:7b:43:6f:5a:cc:
6f:7a:d5:75:d9:d4:54:27:6e:93:b4:4d:92:40:c3:64:b3:f8:
f3:5e:3f:83:ec:ae:88:05:93:34:25:6e:0a:9a:0a:b3:48:3b:
0b:30:1e:7f:d6:ff:3a:77:f0:70:70:17:4e:29:d0:20:43:50:
6f:cd:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:34 2026 by rpki-client