
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
File: 23B27B60F68011E982571C3EC4F9AE02.roa (raw, json)
Hash identifier: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=
Subject key identifier: 1D:CB:83:9D:2A:3A:25:DD:99:A7:BE:98:0A:2F:72:8E:86:20:D9:53
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0CA8
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
Signing time: Wed 30 Apr 2025 18:27:42 +0000
ROA not before: Wed 30 Apr 2025 18:27:42 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138651
IP address blocks: 103.135.136.0/24 maxlen: 24
103.135.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Nov 2025 18:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3240 (0xca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Apr 30 18:27:42 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=68126b9d-0e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:93:27:06:a2:f8:6a:30:8f:f6:b0:72:a7:
65:a4:64:d9:f7:8e:10:e9:ca:50:94:d4:74:89:59:
54:11:21:3f:ae:e1:b2:45:72:cd:3c:56:2d:65:ec:
c8:95:71:e5:ff:e8:c3:f9:c3:b6:41:b4:27:ac:d4:
9d:eb:4b:3d:47:fb:1e:7a:43:8e:33:62:65:a4:d6:
8b:b4:29:f0:53:e4:15:77:16:1a:64:0b:15:20:61:
47:8a:bf:56:9e:08:70:ec:84:7d:c6:e3:b1:52:c1:
04:91:c9:f1:8f:f8:bd:85:a1:c1:b5:84:7f:b4:03:
06:ec:97:ab:11:00:a6:b2:09:3b:c8:39:dd:0e:74:
fa:cf:d0:94:ce:1e:b3:6f:e7:d5:a5:b0:ef:d3:5b:
d6:f1:bc:73:87:4e:3f:fa:f2:7d:7a:91:15:8c:f3:
4d:4e:58:ad:a3:64:d7:03:c6:00:1d:d5:a4:7f:ee:
39:68:3b:5f:d4:a0:d4:a2:e6:5b:8d:02:b7:7d:ce:
ba:c0:ff:1e:1f:4e:ee:b2:b1:92:de:f3:c8:87:6d:
2a:82:df:1b:a3:22:36:85:53:79:c2:3a:39:d7:0e:
cc:a1:ec:9c:fb:bc:61:f4:18:74:35:e7:63:e9:f0:
1e:8c:79:07:a1:c0:09:03:83:26:46:ad:e7:63:4e:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CB:83:9D:2A:3A:25:DD:99:A7:BE:98:0A:2F:72:8E:86:20:D9:53
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.136.0/23
Signature Algorithm: sha256WithRSAEncryption
f1:76:3a:54:13:bd:41:f8:8f:1e:00:88:6e:78:31:6e:4f:ff:
04:92:da:f2:68:c7:6a:82:24:ef:de:d8:70:d7:4c:4b:28:ff:
4a:92:25:c7:51:08:c2:d4:f9:04:49:d1:9d:35:af:59:95:28:
0e:5c:07:a4:a3:1d:b1:a5:4c:80:7b:7b:99:f5:4a:ca:1a:9a:
12:57:01:45:19:17:86:ff:9b:35:17:02:33:6a:7c:30:ca:32:
52:c9:85:d4:35:f7:ce:10:ef:25:1f:b5:ce:fe:1e:cc:e5:25:
ab:bd:5b:7a:f6:d2:66:12:6e:79:12:ba:ae:1c:7e:e0:3b:a4:
30:e1:ba:c5:7e:b9:02:4e:83:cb:05:df:82:aa:22:f2:d2:af:
16:d4:e4:5b:cd:d0:c9:55:06:61:c8:2b:c5:6c:86:85:6d:2d:
21:99:81:5b:9a:43:6e:7e:2d:42:03:db:b2:7d:40:f6:a5:17:
a9:de:e0:df:18:67:73:20:89:7c:de:2b:85:90:ec:de:2a:d7:
ad:24:b9:14:08:ab:4e:21:c0:71:5b:60:1e:ae:44:cf:b0:cd:
7c:68:7d:c6:2f:e0:01:52:e8:93:77:8b:42:ce:c0:30:6e:5c:
96:11:1d:bf:3f:a0:da:e6:ae:53:c6:97:c3:3d:ba:c9:9e:25:
72:f4:21:61
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE
QjFBNTBEQTQwHhcNMjUwNDMwMTgyNzQyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODEyNmI5ZC0wZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5KTJwai+Gowj/awcqdlpGTZ944Q6cpQlNR0iVlUESE/ruGyRXLNPFYtZezI
lXHl/+jD+cO2QbQnrNSd60s9R/seekOOM2JlpNaLtCnwU+QVdxYaZAsVIGFHir9W
nghw7IR9xuOxUsEEkcnxj/i9haHBtYR/tAMG7JerEQCmsgk7yDndDnT6z9CUzh6z
b+fVpbDv01vW8bxzh04/+vJ9epEVjPNNTlito2TXA8YAHdWkf+45aDtf1KDUouZb
jQK3fc66wP8eH07usrGS3vPIh20qgt8boyI2hVN5wjo51w7Moeyc+7xh9Bh0Nedj
6fAejHkHocAJA4MmRq3nY05O7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFB3Lg50q
OiXdmae+mAovco6GINlTMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2
N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvMjNCMjdCNjBG
NjgwMTFFOTgyNTcxQzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnh4gwDQYJKoZIhvcNAQELBQADggEBAPF2OlQTvUH4jx4A
iG54MW5P/wSS2vJox2qCJO/e2HDXTEso/0qSJcdRCMLU+QRJ0Z01r1mVKA5cB6Sj
HbGlTIB7e5n1SsoamhJXAUUZF4b/mzUXAjNqfDDKMlLJhdQ1984Q7yUftc7+Hszl
Jau9W3r20mYSbnkSuq4cfuA7pDDhusV+uQJOg8sF34KqIvLSrxbU5FvN0MlVBmHI
K8VshoVtLSGZgVuaQ25+LUID27J9QPalF6ne4N8YZ3MgiXzeK4WQ7N4q160kuRQI
q04hwHFbYB6uRM+wzXxofcYv4AFS6JN3i0LOwDBuXJYRHb8/oNrmrlPGl8M9usme
JXL0IWE=
-----END CERTIFICATE-----
Generated at Thu Oct 30 08:18:05 2025 by rpki-client