
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/37BAE214429111F18FB6D217B2833773.roa
File: 37BAE214429111F18FB6D217B2833773.roa (raw, json)
Hash identifier: TikzjA15ppHGlwVrXhcoq24IxvkoI+ipL6VWCbwJgsU=
Subject key identifier: 44:EB:53:DE:37:37:58:04:2F:7D:31:8F:9C:52:C9:3D:F8:59:04:49
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2CE2
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/37BAE214429111F18FB6D217B2833773.roa
Signing time: Mon 27 Apr 2026 23:31:30 +0000
ROA not before: Mon 27 Apr 2026 23:31:30 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 133401
IP address blocks: 103.9.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 15:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11490 (0x2ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Apr 27 23:31:30 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69eff1d2-a952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:10:ed:26:5d:1f:8d:68:29:dc:93:ae:9b:
b7:4d:24:ea:97:bc:16:d5:20:61:8e:9c:23:1a:bc:
ea:66:b3:b7:7b:df:d9:4b:bc:55:84:af:7c:45:e5:
94:92:6b:5f:7e:69:db:09:1d:2f:45:15:db:b2:3a:
94:f5:c9:9a:0b:e4:11:a2:46:78:98:3b:1d:c1:a8:
3f:3b:64:5d:a9:1a:65:00:b7:f4:90:df:8f:6a:41:
ff:56:5b:4a:e8:b2:b7:63:0a:d3:84:11:1d:14:4b:
25:54:bb:01:df:d8:7d:f3:5c:0b:25:28:78:e5:58:
38:c7:3f:ae:d6:23:45:47:42:74:93:8a:20:5a:c9:
1d:1e:aa:ce:6e:6b:4e:ab:ee:7f:50:a3:25:69:39:
18:d3:70:b8:20:f3:63:36:88:1b:65:a9:8a:0a:fa:
91:59:2f:3f:50:69:9c:4b:52:48:72:b8:51:02:e2:
d9:33:40:4e:47:44:21:70:a4:92:48:9d:44:90:c9:
81:a9:b3:d3:9b:9e:e5:e7:9c:4a:20:8a:47:27:fd:
85:08:df:7b:fd:67:f9:d3:24:5e:b8:41:eb:e6:b2:
7b:7a:6b:8d:1c:d5:94:d2:2b:57:fb:87:ec:32:e4:
cb:ee:f5:12:be:9e:64:3c:0f:59:2e:f2:35:d4:43:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EB:53:DE:37:37:58:04:2F:7D:31:8F:9C:52:C9:3D:F8:59:04:49
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/37BAE214429111F18FB6D217B2833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.236.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:98:81:9f:c6:15:1b:b9:0b:77:ab:48:b0:56:8d:69:f6:fa:
fe:85:49:3f:fc:51:5d:bb:0c:7b:53:38:b9:49:f0:e5:9e:c8:
19:64:f6:93:42:9e:86:49:2e:06:f4:6f:96:e1:78:af:65:ea:
8d:5d:7a:36:c0:11:44:1d:b4:9b:88:cb:87:75:9d:e5:5e:59:
3e:31:5a:78:46:16:0f:e3:e0:7b:3b:83:5a:13:cb:73:83:0c:
69:2c:c4:bb:6f:8c:45:19:63:e3:3b:cf:99:93:bf:cd:5e:84:
84:5e:2e:6d:70:7d:17:62:84:86:ba:cc:7a:12:ae:59:05:9c:
3e:d7:d1:7e:90:60:fb:9f:08:1d:2b:74:6e:fd:7e:6e:d2:2c:
c5:c9:e5:5d:a4:7f:b8:c4:8b:2f:23:c4:7f:15:a1:05:d7:4a:
14:4d:e6:b5:41:61:97:64:2a:24:9f:f6:03:7a:cf:d8:74:49:
ef:82:45:bd:1a:81:de:84:92:83:73:46:eb:79:4d:82:99:8b:
45:1e:4b:26:0a:12:f2:c7:4f:2b:8c:07:ae:56:ea:d5:fa:a2:
4e:ec:3c:c6:8f:56:a5:26:d6:85:62:a3:40:3a:fb:a5:e7:0a:
a3:21:32:0b:b6:a8:b1:24:66:ef:56:75:b8:aa:a9:e6:53:9b:
17:b6:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 14:32:32 2026 by rpki-client