
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa
File: DB87E692ADB211E99AAEE879C4F9AE02.roa (raw, json)
Hash identifier: q+2nyrLMqXsqCxGEfxTLEI4wzW4kiplsQd3yatXIX2g=
Subject key identifier: 8C:96:49:08:8B:0B:E9:79:60:52:5B:65:F9:61:59:2C:27:7F:1E:7F
Certificate issuer: /CN=A9113153/serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Certificate serial: 0EAA
Authority key identifier: 48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:40:28 +0000
ROA not before: Sat 02 Aug 2025 18:27:34 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 139339
IP address blocks: 103.141.120.0/23 maxlen: 23
103.141.120.0/24 maxlen: 24
103.141.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:34:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3754 (0xeaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113153, serialNumber=48C27FFFB6424712FC6FC62871D536C531FEF19B
Validity
Not Before: Aug 2 18:27:34 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5934c-5e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bb:a6:f3:96:1c:cf:7f:0a:56:58:ea:63:dd:
0d:69:94:d6:3b:24:d5:2f:97:24:73:c4:43:e1:a0:
b7:be:75:72:fa:5b:f7:73:f1:a1:30:b2:d9:eb:0f:
64:d0:98:f5:ce:1d:dc:77:c9:53:6d:1b:10:cf:cc:
9a:a3:f0:6e:50:11:f4:57:ba:20:c5:73:ac:b4:6b:
db:11:30:41:e6:a2:ff:9e:c5:79:4b:fc:af:51:9a:
19:06:b3:5f:ed:bd:cd:2e:6a:c9:89:63:01:81:b2:
81:e4:55:07:7a:5c:78:24:66:24:e0:1e:a4:d6:99:
99:88:00:3d:79:df:8c:91:8f:61:86:76:c8:12:d1:
b5:31:3c:82:6f:f5:ee:d4:a5:8d:1e:da:95:50:6f:
a5:1c:7d:6a:5c:06:3f:b3:17:0b:cd:86:6b:06:c4:
7e:76:68:e5:24:6f:15:43:a8:26:ad:9f:58:42:46:
f3:65:e1:ce:ed:04:69:91:90:a1:0f:55:7d:14:a7:
fb:28:3a:4d:2c:e2:4b:06:58:e5:c4:b6:d8:b2:2d:
0a:d7:5a:b4:2f:55:16:a1:e5:76:7d:f6:3b:54:29:
43:93:37:cc:3d:a4:5b:a5:53:50:7f:a0:a0:fa:2c:
66:37:d3:70:02:50:d6:f8:28:18:7a:9e:8c:89:93:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:96:49:08:8B:0B:E9:79:60:52:5B:65:F9:61:59:2C:27:7F:1E:7F
X509v3 Authority Key Identifier:
keyid:48:C2:7F:FF:B6:42:47:12:FC:6F:C6:28:71:D5:36:C5:31:FE:F1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SMJ__7ZCRxL8b8YocdU2xTH-8Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113153/86077980ADB211E98DAEC479C4F9AE02/DB87E692ADB211E99AAEE879C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.141.120.0/23
Signature Algorithm: sha256WithRSAEncryption
77:32:53:4e:f9:64:6e:d6:9a:d8:f6:af:cc:97:89:9e:de:86:
fb:d4:10:15:2b:9b:98:43:ae:e8:9b:9e:dc:56:bb:87:3e:29:
49:df:4c:27:cb:d7:4a:8d:8c:77:95:d5:0d:fe:7e:25:07:20:
74:9d:58:2c:8a:d6:43:93:2e:f2:56:6c:e3:bf:22:8b:04:8d:
52:ee:84:62:ba:16:43:1c:58:e5:96:e2:1b:b7:73:22:d5:ae:
54:27:8c:1c:6b:bc:b8:1d:76:67:0f:5e:aa:32:42:1e:dd:ef:
67:35:7c:ac:cb:4d:74:f2:e7:50:d5:18:91:13:e9:d5:c1:ab:
7b:e6:63:3b:70:59:f6:7d:21:3e:48:39:f5:c3:ba:16:51:b3:
81:27:2f:7c:6c:f2:07:26:34:19:f1:39:5c:54:9e:d5:9b:17:
82:4b:eb:d2:3d:04:cf:40:a9:80:2d:92:93:30:4c:c5:e3:08:
4c:29:a8:90:2d:24:59:84:7e:64:70:b6:04:a1:c3:73:8e:92:
2f:3d:e0:2e:cb:b6:7a:5b:a1:67:b4:ea:2e:8a:8a:30:10:84:
86:ab:d5:97:d1:4a:08:85:52:e6:c8:e0:82:02:0f:bd:3c:1c:
a3:a9:76:ad:fb:e4:6b:c5:94:13:3f:f5:14:26:1b:8d:22:fd:
18:c8:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:53 2026 by rpki-client