
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
File: 28BC5490487F11EAB8C7545FC4F9AE02.roa (raw, json)
Hash identifier: gqHandgTQfiQ8xRxCOHBOz8Fw9wJVOkwc20SZ1B8E3U=
Subject key identifier: 42:75:FD:FA:1E:66:1C:41:F8:DF:CD:60:7D:6F:77:D9:81:DD:27:FE
Certificate issuer: /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial: 0EAB
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:40:29 +0000
ROA not before: Sat 02 Aug 2025 18:27:35 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3755 (0xeab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Validity
Not Before: Aug 2 18:27:35 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5934d-b963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:58:22:d3:3f:1d:e1:aa:7b:91:fc:25:2c:b3:
16:e9:3b:89:e0:46:97:72:d5:fe:3c:8b:09:79:b4:
2c:a9:a3:71:7a:ee:b8:38:a1:75:73:70:94:bc:41:
23:13:26:46:53:4b:d0:b3:7b:a5:81:5f:b8:61:53:
bf:5e:4e:b7:9a:f2:cc:68:90:f6:00:b9:b6:08:c9:
bc:f7:bd:2a:47:42:f3:eb:9e:fa:1b:b1:62:d1:77:
56:70:18:7a:ca:a3:f0:b4:ae:1b:9e:09:80:b1:7a:
38:24:69:d4:9c:0b:df:d5:2f:77:3a:fe:52:c4:fc:
8b:95:1c:a0:97:83:b1:6d:ed:9d:87:0b:c0:ad:ad:
37:0b:8b:f6:dd:15:ce:1d:9f:5f:64:fd:bd:43:59:
fd:48:eb:1f:35:6b:8d:da:c3:0c:c5:49:3e:4b:b1:
1f:e6:2a:79:fa:34:5b:c2:61:65:07:89:83:32:44:
d3:aa:2c:90:68:5d:50:fa:20:b9:7f:99:3e:c4:c4:
3e:cd:95:b3:61:a6:89:e7:e5:f0:fd:67:56:31:46:
b0:59:8b:4c:a0:bd:3e:f2:69:ac:39:fb:11:bd:cf:
5c:41:f4:73:65:65:c3:85:79:4f:c7:bd:f9:b5:1a:
63:a5:da:37:cd:d5:40:07:fa:44:a6:fa:3f:6b:3c:
e2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:75:FD:FA:1E:66:1C:41:F8:DF:CD:60:7D:6F:77:D9:81:DD:27:FE
X509v3 Authority Key Identifier:
keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/28BC5490487F11EAB8C7545FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.120.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e3:02:9e:fb:1a:3a:9b:ac:db:13:f0:24:58:68:a0:21:31:
0e:cb:42:90:3a:7b:ad:bd:cb:3e:73:d6:a7:bc:05:f3:ce:d7:
fc:c2:87:e3:36:83:66:8c:71:ed:4d:89:a3:8e:6b:ce:63:3a:
36:a3:6e:ac:85:a8:43:11:55:91:4b:ef:bd:35:ef:bc:1e:6f:
97:99:fb:c1:e2:a9:3e:f9:1c:25:99:d2:c7:cc:57:08:c0:a6:
f7:88:6e:0f:b9:10:00:6e:1b:b9:3b:9c:0b:d9:4c:70:4e:a8:
2a:06:4f:2a:d7:1c:f5:91:87:bf:72:ca:e0:70:90:82:21:78:
66:88:90:aa:37:53:8c:0d:0e:fd:09:73:24:49:67:56:5d:d5:
bf:30:7a:15:54:67:27:89:a9:30:df:d4:11:4a:79:61:a4:8d:
65:71:df:50:13:7b:a6:f4:8d:d6:64:bf:24:72:12:8b:76:0d:
e8:bb:f4:dd:fe:3a:d3:ca:68:7b:59:38:b8:e7:c8:e2:0f:05:
8c:3b:c5:30:05:e2:c4:71:b2:45:f8:69:ca:a7:51:11:0b:f0:
56:a8:ea:f0:89:b7:ed:64:e2:5a:94:58:a3:d6:c1:ae:7a:5e:
2e:f8:8b:f5:cd:0a:3b:a0:85:87:61:e0:dc:5b:bb:88:f6:26:
e7:ac:eb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:35 2026 by rpki-client