
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
File: C435900ACF7C11F0AAC14644C4F9AE02.roa (raw, json)
Hash identifier: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=
Subject key identifier: CA:18:A7:5B:8E:8A:A1:C7:E0:F8:72:E0:C4:DD:B8:ED:DF:AB:2D:79
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 11F3
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:17:02 +0000
ROA not before: Tue 02 Dec 2025 12:45:22 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 8796
IP address blocks: 103.140.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:22:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4595 (0x11f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Dec 2 12:45:22 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4829e-f936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:03:3a:b4:0e:c8:f7:97:f7:e8:52:4c:06:
5d:65:f6:94:c4:09:11:75:14:69:07:14:6a:1e:ce:
4b:0a:c1:af:1d:be:b9:fc:3d:37:95:95:f6:dd:32:
dc:b4:0a:55:23:f6:86:2c:a6:e9:42:8d:69:4f:9b:
79:d1:41:1b:ba:cd:be:0e:ff:75:da:8e:73:55:63:
50:72:90:05:ef:16:11:6a:c8:32:9f:b2:c5:31:1f:
16:f4:8c:db:a2:e0:d2:8e:da:91:3f:e3:b9:7c:f5:
fd:d6:b8:ae:bf:da:0f:05:a8:4d:57:d1:c2:e6:64:
d2:9d:a3:d3:96:ca:49:3f:04:59:d1:14:2b:df:0c:
42:2e:96:07:8a:c3:9f:d3:02:13:e2:9a:5b:2b:f7:
e4:d4:f2:13:3c:91:42:eb:b6:75:aa:37:86:fe:3a:
85:3a:bb:cb:aa:b0:0e:c9:01:67:62:10:67:54:3f:
cb:00:4e:bd:94:39:a8:30:8e:7d:7e:5c:51:c9:a1:
16:f1:f8:59:ee:fd:06:c6:b6:32:2f:3d:48:da:26:
5e:d5:9e:34:35:57:12:3d:95:e7:54:d5:e1:05:e3:
70:8e:91:23:31:e2:ca:9e:4d:24:6a:13:bb:b3:00:
37:45:1c:9e:55:45:c7:86:b6:15:ed:90:6e:41:7f:
c7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:A7:5B:8E:8A:A1:C7:E0:F8:72:E0:C4:DD:B8:ED:DF:AB:2D:79
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/C435900ACF7C11F0AAC14644C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.9.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7c:cb:e0:a6:dd:a9:bb:3d:1c:0e:ff:c5:4d:1b:cf:b3:ff:
2e:21:dc:21:09:51:65:85:ce:93:0f:62:bb:91:eb:8c:47:cb:
de:37:81:ed:ea:64:5e:03:a8:fc:04:e5:2f:9e:97:1d:b4:7a:
2d:68:98:bd:9d:60:dd:92:ef:41:3a:8e:cc:93:9a:cd:5b:44:
f1:a3:3d:52:06:73:d9:33:a3:31:30:5b:d5:b7:0d:59:d2:bf:
19:a3:c9:0c:5e:68:65:77:b1:b8:c9:20:50:99:ad:b4:b9:d4:
c6:11:e0:2b:58:12:6e:60:ab:dc:c8:a0:74:61:5b:3c:cb:e4:
7e:af:cb:b6:40:4d:7d:82:50:92:fd:59:04:ee:bc:ef:92:f2:
9d:c2:78:cf:07:90:49:69:48:0a:11:e4:bd:ce:63:e8:8f:17:
f2:a9:2c:e3:0f:e7:cd:14:a5:a5:65:fe:cf:d4:6f:6d:79:08:
1a:d7:a2:cf:a0:ec:9b:5d:51:5a:be:06:cc:9c:2d:46:62:f8:
19:2e:75:a8:62:d6:c8:4e:d1:f5:1f:27:6b:46:c6:91:27:d0:
a3:b3:37:20:31:88:e5:0e:ff:bd:b5:66:28:2a:ff:be:b0:f7:
25:e9:cf:19:49:6f:fa:be:ea:ab:fb:80:45:d5:6a:c0:59:91:
b9:dd:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:26:17 2026 by rpki-client