
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/EC375FE2BDFC11F19D1840375011F970.roa
File: EC375FE2BDFC11F19D1840375011F970.roa (raw, json)
Hash identifier: ojIde5t9f+XU6bADI4ErDKUmz7DbHGtcIB4yBy5KvV0=
Subject key identifier: 71:64:99:03:0D:E8:C3:36:6F:43:F1:8C:B9:3E:C2:E4:D6:F4:85:98
Certificate issuer: /CN=A919A8DA/serialNumber=F16D522E87CB1E2C2CDF8E57F2DE28B8DBD31E98
Certificate serial: 02
Authority key identifier: F1:6D:52:2E:87:CB:1E:2C:2C:DF:8E:57:F2:DE:28:B8:DB:D3:1E:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W1SLofLHiws345X8t4ouNvTHpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/EC375FE2BDFC11F19D1840375011F970.roa
Signing time: Fri 02 Oct 2026 01:02:22 +0000
ROA not before: Fri 02 Oct 2026 01:02:22 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 133120
IP address blocks: 103.251.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.crl
rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W1SLofLHiws345X8t4ouNvTHpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 09:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A8DA, serialNumber=F16D522E87CB1E2C2CDF8E57F2DE28B8DBD31E98
Validity
Not Before: Oct 2 01:02:22 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6abf029e-2760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:74:61:e9:d1:b6:0e:fe:ac:9e:ff:d4:57:
bc:f6:d2:6a:7c:07:dd:0e:7f:e3:0a:6b:5e:d2:2f:
23:5b:74:c2:4f:a8:84:6f:a2:32:79:bd:ce:76:a2:
bd:d4:52:11:5d:ee:d3:56:a1:28:c1:13:9d:ca:29:
e2:75:02:e8:2c:69:92:7d:dd:17:38:94:b5:b1:4c:
ed:d1:31:01:ce:82:9b:db:14:ad:c6:89:70:31:61:
bc:dd:80:9c:3c:74:13:bf:e4:6f:8d:05:6e:4e:f3:
98:26:a3:17:4f:2a:b3:5c:09:14:30:1c:61:09:c6:
a5:7b:a6:01:22:f5:f2:e6:e1:24:1f:1d:4d:60:65:
2b:57:7f:f7:f4:33:d8:2d:97:a4:ce:6b:21:2f:90:
3c:b8:84:eb:4f:71:bd:e4:a1:99:86:9f:2c:6e:cf:
96:4b:35:b2:71:8d:23:d7:0b:dc:4f:1a:56:20:c5:
c9:79:d5:0c:8c:70:ec:8c:3d:e1:0f:a9:a1:59:16:
a1:48:30:b6:1f:dd:2a:ae:6f:58:cb:ed:38:36:23:
8e:5c:c1:38:bc:56:94:15:f6:df:65:cf:af:79:fe:
d1:cc:d3:da:13:24:7c:6a:c5:c0:f0:ac:ce:7c:bf:
0b:33:d5:b6:50:93:af:0a:a4:f7:91:40:4f:08:4f:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:99:03:0D:E8:C3:36:6F:43:F1:8C:B9:3E:C2:E4:D6:F4:85:98
X509v3 Authority Key Identifier:
keyid:F1:6D:52:2E:87:CB:1E:2C:2C:DF:8E:57:F2:DE:28:B8:DB:D3:1E:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/8W1SLofLHiws345X8t4ouNvTHpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W1SLofLHiws345X8t4ouNvTHpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8DA/2713B7B0BDFC11F19B27FEC74F11F970/EC375FE2BDFC11F19D1840375011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.251.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:78:f6:4e:fe:13:8c:5e:82:59:d2:63:c9:69:6d:35:ea:ec:
f6:65:c3:02:af:a6:db:43:af:85:d2:ed:26:94:12:cb:d9:b5:
fa:f1:df:c2:6a:08:23:da:6e:1e:70:1b:e3:d0:06:fb:a0:f6:
da:94:ec:69:ae:79:86:eb:de:4c:65:12:f4:a9:d4:f9:8b:0d:
9b:9a:30:ba:cc:3b:c1:3b:6c:4a:3e:ef:e8:f7:53:00:b0:20:
8f:72:d9:ab:f9:24:ef:2e:01:d1:2d:48:15:5d:8e:c0:08:bb:
db:cf:a9:4f:4c:e2:37:5b:66:06:1b:b9:6a:10:d4:fc:72:cf:
79:12:7e:3a:1c:55:e8:22:2e:00:36:aa:56:6a:50:e7:71:2c:
86:2a:02:de:19:d3:ff:ab:98:93:98:28:e0:f0:d1:0b:0d:87:
7e:8a:77:b5:ed:f2:d3:23:71:3e:a2:d7:d6:9a:65:0e:5a:51:
0e:e3:c5:ee:ef:fb:88:85:53:98:3e:3b:35:fe:cc:11:f1:55:
6c:9c:26:eb:e5:fe:21:ed:e5:8a:b6:19:d2:63:da:3f:6b:17:
94:f0:b2:59:47:fa:9d:53:d5:c9:ab:a3:e1:31:de:95:c0:47:
f1:83:74:17:72:05:9c:ff:a0:ab:da:8c:f2:db:24:89:48:36:
b8:31:8d:19
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QThEQTExMC8GA1UEBRMoRjE2RDUyMkU4N0NCMUUyQzJDREY4RTU3RjJERTI4QjhE
QkQzMUU5ODAeFw0yNjEwMDIwMTAyMjJaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYmYwMjllLTI3NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYx3Rh6dG2Dv6snv/UV7z20mp8B90Of+MKa17SLyNbdMJPqIRvojJ5vc52or3U
UhFd7tNWoSjBE53KKeJ1AugsaZJ93Rc4lLWxTO3RMQHOgpvbFK3GiXAxYbzdgJw8
dBO/5G+NBW5O85gmoxdPKrNcCRQwHGEJxqV7pgEi9fLm4SQfHU1gZStXf/f0M9gt
l6TOayEvkDy4hOtPcb3koZmGnyxuz5ZLNbJxjSPXC9xPGlYgxcl51QyMcOyMPeEP
qaFZFqFIMLYf3Squb1jL7Tg2I45cwTi8VpQV9t9lz695/tHM09oTJHxqxcDwrM58
vwsz1bZQk68KpPeRQE8IT/afAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUcWSZAw3o
wzZvQ/GMuT7C5Nb0hZgwHwYDVR0jBBgwFoAU8W1SLofLHiws345X8t4ouNvTHpgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlBOERBLzI3MTNCN0IwQkRG
QzExRjE5QjI3RkVDNzRGMTFGOTcwLzhXMVNMb2ZMSGl3czM0NVg4dDRvdU52VEhw
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOFcxU0xvZkxIaXdzMzQ1WDh0NG91TnZUSHBnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QThEQS8yNzEzQjdCMEJERkMxMUYxOUIyN0ZFQzc0RjExRjk3MC9FQzM3NUZFMkJE
RkMxMUYxOUQxODQwMzc1MDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJn+4gwDQYJKoZIhvcNAQELBQADggEBAHt49k7+E4xeglnSY8lpbTXq
7PZlwwKvpttDr4XS7SaUEsvZtfrx38JqCCPabh5wG+PQBvug9tqU7GmueYbr3kxl
EvSp1PmLDZuaMLrMO8E7bEo+7+j3UwCwII9y2av5JO8uAdEtSBVdjsAIu9vPqU9M
4jdbZgYbuWoQ1Pxyz3kSfjocVegiLgA2qlZqUOdxLIYqAt4Z0/+rmJOYKODw0QsN
h36Kd7Xt8tMjcT6i19aaZQ5aUQ7jxe7v+4iFU5g+OzX+zBHxVWycJuvl/iHt5Yq2
GdJj2j9rF5TwsllH+p1T1cmro+Ex3pXAR/GDdBdyBZz/oKvajPLbJIlINrgxjRk=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:03 2026 by rpki-client