
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa
File: 9F95B0B4232811EBB98A6C1AC4F9AE02.roa (raw, json)
Hash identifier: 5i6ST2LSrizD9I4LghvulNLuuamd82AI+Ulzn/hcuIs=
Subject key identifier: 21:C3:69:E5:77:EE:C4:92:93:9D:94:87:CF:EE:45:54:0C:0D:79:2F
Certificate issuer: /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial: 0992
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa
Signing time: Mon 24 Aug 2026 20:39:55 +0000
ROA not before: Mon 24 Aug 2026 20:39:55 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137969
IP address blocks: 103.153.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 20:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Validity
Not Before: Aug 24 20:39:55 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8cac1b-b2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:3b:d6:bf:0b:e4:07:a2:32:f1:bb:79:17:
d4:81:70:f7:06:c1:46:7a:20:1c:d3:bb:ef:22:66:
eb:9e:4d:ec:82:40:83:dd:e8:e4:c2:3d:04:3d:68:
81:52:d2:55:66:94:a2:32:7d:2a:0b:cf:8d:2f:32:
0d:9b:27:f5:cb:01:c7:59:d4:fb:0b:cf:94:56:a6:
f6:3c:b0:bf:ea:eb:f7:e3:d1:1e:09:79:30:e9:6d:
00:77:4c:f2:81:9e:6f:59:9f:78:43:27:a5:40:b8:
b7:7c:be:fc:4f:63:10:11:55:bf:88:b2:09:87:a0:
87:04:f0:e5:f4:bd:90:65:a6:b3:0c:10:35:94:78:
51:9a:c5:9f:19:d3:a7:2e:97:1c:03:b2:e0:06:4e:
7b:75:0a:ec:b7:12:35:c3:95:56:43:39:6e:50:d8:
ad:cf:09:be:6c:52:ac:01:95:53:95:e5:f0:68:65:
65:d7:d4:06:b2:dc:a7:17:b0:fa:80:aa:00:09:be:
fe:21:70:f9:cf:08:cd:e3:2b:e7:ac:5f:b7:de:f9:
38:6d:12:7e:88:2b:35:68:1c:42:d1:06:38:ab:3e:
da:e9:c0:40:db:5e:be:21:22:ab:db:1e:c3:f6:a5:
4c:0c:4e:01:c7:29:47:76:0f:0e:64:00:0f:90:64:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C3:69:E5:77:EE:C4:92:93:9D:94:87:CF:EE:45:54:0C:0D:79:2F
X509v3 Authority Key Identifier:
keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.36.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:f7:b7:63:67:32:e2:a3:0d:59:de:41:8c:86:12:c2:cb:41:
1d:d3:22:a4:7d:e2:ec:27:1e:63:08:e1:f1:c6:a5:3d:1a:48:
f0:ae:21:f5:9b:6a:5e:16:b9:f2:23:ac:d1:8b:8f:8b:88:91:
de:93:cc:28:d6:1a:b7:ae:ab:bd:9f:e9:57:b6:7d:56:dd:94:
d0:83:7f:fe:f0:92:20:06:d9:d7:23:f5:e2:d5:50:a3:43:e4:
75:c8:36:00:9c:a2:ea:3c:84:ff:45:00:97:ee:5a:0b:50:46:
76:e1:81:68:03:de:f1:43:01:5e:d7:81:1f:09:13:f5:ce:c5:
fd:60:b5:2a:bf:4b:0e:b6:fb:8d:05:1e:86:d2:c8:cb:f4:21:
67:ca:b3:ad:2d:53:c3:f1:1c:7e:fb:ae:26:db:ee:9e:3a:01:
c3:74:0c:ac:fa:8d:ff:9f:c7:da:fe:34:5e:8a:f7:26:b2:da:
e5:f6:38:7d:75:83:31:78:68:41:09:29:6d:b9:8c:b8:4e:c1:
18:9d:f0:c8:db:27:79:af:72:ea:4c:ff:61:e3:09:c0:98:9c:
f7:a4:00:5c:b9:53:ee:a5:0c:71:1d:92:54:43:d3:f1:a1:6b:
ef:a8:3f:23:f5:dc:9d:de:57:ba:52:4f:b9:fc:60:d8:0c:b5:
21:2b:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:50:28 2026 by rpki-client