
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/287F8AB66EE711F188E2493274A30FBC.roa
File: 287F8AB66EE711F188E2493274A30FBC.roa (raw, json)
Hash identifier: p3rqmlcnr95+9LQycnMCQfkme4qnC7QnEIn3AlhnU+s=
Subject key identifier: 95:A6:71:66:6C:0A:0A:0E:ED:25:8F:31:CF:E0:E5:29:12:FB:53:9B
Certificate issuer: /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial: 085B
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/287F8AB66EE711F188E2493274A30FBC.roa
Signing time: Thu 06 Aug 2026 21:41:41 +0000
ROA not before: Thu 06 Aug 2026 21:41:41 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137580
IP address blocks: 103.154.12.0/23 maxlen: 24
2001:df1:ffc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:34:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139 (0x85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Validity
Not Before: Aug 6 21:41:41 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a74ff95-0c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:26:0a:d6:cb:89:c4:71:db:8c:bd:b0:ef:cb:
03:c6:f8:5a:e2:92:07:6c:1e:9b:c6:c7:81:99:22:
73:de:a0:6c:b3:c6:0b:17:d9:c6:dd:62:53:19:ba:
a4:61:ca:01:22:9e:df:bf:43:fa:9d:43:4d:18:7c:
b3:68:2f:c6:ab:e3:18:6f:1e:a6:98:d9:8f:04:92:
df:0b:95:09:cb:17:ca:30:9b:b6:96:a7:ec:c1:95:
13:a6:62:01:bc:c7:da:0d:aa:c2:a8:57:52:09:84:
dd:c3:d6:93:00:d2:88:b5:39:34:d5:8c:3e:21:37:
b4:b1:cc:1a:7f:6f:d6:1f:1c:3f:1a:99:fd:f1:93:
d2:e5:4c:c3:65:5d:7b:2b:21:a9:82:c5:14:98:22:
5e:59:ba:95:36:83:6d:75:6d:dd:5f:84:6f:a0:86:
fc:00:d6:8b:e8:63:6c:f7:4f:66:9c:6e:97:9d:c4:
80:6f:90:eb:ef:a0:10:1b:8d:9e:cf:b1:09:57:af:
48:e7:d0:5e:c3:ce:1e:0e:e2:68:a7:0d:f1:ab:00:
e1:0d:3e:19:c5:ea:d5:ad:62:ad:ad:b8:ce:62:16:
c9:81:18:c0:b0:97:bd:17:78:61:35:9e:0c:c3:0b:
9e:1c:f8:10:eb:18:68:ce:02:ce:81:8c:0e:88:dc:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:71:66:6C:0A:0A:0E:ED:25:8F:31:CF:E0:E5:29:12:FB:53:9B
X509v3 Authority Key Identifier:
keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/287F8AB66EE711F188E2493274A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.154.12.0/23
IPv6:
2001:df1:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
22:ed:fe:c0:10:9d:3c:27:db:3f:45:7a:1b:8c:cf:28:4a:41:
a3:c4:d7:ef:bc:ab:a6:09:88:91:83:56:aa:81:14:77:cc:b4:
de:c3:da:58:1e:58:4c:44:28:ae:2a:cb:92:ae:a3:71:de:e4:
83:7a:e0:7a:53:a3:3f:fe:ff:fe:5b:4c:7b:60:82:a0:dc:50:
06:e4:7a:60:fa:96:1b:ab:16:c4:5d:49:f8:95:55:10:60:18:
02:ab:34:1e:92:f2:24:fe:ad:8c:0d:a7:b2:9f:7e:91:6d:4c:
8b:6c:a7:50:48:58:19:82:4f:20:f1:a7:89:2c:7c:66:c5:c7:
3b:5d:1c:72:ed:60:24:d4:28:3d:57:37:9d:e0:9a:cd:3a:f3:
22:02:06:49:e1:42:f3:c0:a4:d6:0c:33:60:eb:fc:0d:52:84:
6b:01:bc:3e:87:9c:ec:e2:81:12:05:7f:cc:b1:16:8b:02:2c:
c9:2b:66:a1:51:63:0f:96:8d:5a:72:82:be:f9:69:9b:f1:d0:
b1:e9:c5:f4:72:75:4e:ab:b5:a4:11:99:ea:80:c9:e1:cc:de:
12:1a:71:57:96:2d:5c:39:c7:78:c0:60:c3:3c:3d:18:5e:99:
65:2b:a0:61:e7:6b:4d:c8:f6:64:1b:bb:38:d2:3b:f7:4a:ea:
9d:3b:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:29 2026 by rpki-client