
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa
File: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (raw, json)
Hash identifier: 5/C78J7CGduYZZHMWLrqDIi3wwIwSEbHrU1i1xBS0wY=
Subject key identifier: A8:98:6F:67:EA:78:CC:51:A5:CF:25:3D:A4:29:82:C2:5A:9F:44:D0
Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Certificate serial: 0407
Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa
Signing time: Fri 01 May 2026 01:31:21 +0000
ROA not before: Fri 01 May 2026 01:31:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149775
IP address blocks: 103.186.22.0/23 maxlen: 23
103.186.22.0/24 maxlen: 24
103.186.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl
rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 00:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031 (0x407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Validity
Not Before: May 1 01:31:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f40269-7c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:cd:f4:29:77:83:03:15:e7:93:3b:02:01:
2d:3b:ee:7c:84:c6:3d:12:d4:b0:a3:79:a5:de:c5:
b6:25:2e:ef:5b:93:99:a6:86:93:04:76:fc:2f:41:
02:6e:2c:7f:ad:b0:6f:85:a0:37:0a:18:a3:c0:44:
4b:65:cb:8f:69:6f:30:2a:b6:89:f5:69:8f:9e:aa:
ae:a5:b9:db:e3:86:f9:86:00:f4:72:5d:85:e2:81:
1b:ef:f1:b8:aa:86:25:e7:bf:4a:79:01:15:75:52:
24:15:e1:04:dc:f1:71:c9:f5:2c:14:b0:8e:6a:be:
69:5a:f3:1b:1c:cc:c9:b4:53:d8:ea:c4:be:4d:6b:
d3:f7:19:1f:fe:68:20:c8:20:38:3a:ae:41:74:cd:
0a:d6:48:eb:18:b6:88:d1:37:a4:35:7f:70:4a:c0:
01:97:0b:d7:87:89:73:91:4c:c4:b0:91:2f:44:f3:
20:3f:12:95:0c:70:43:26:02:19:dd:1e:df:7a:45:
80:f6:d4:0b:a1:42:e7:d6:8d:99:1d:12:e8:e6:c6:
f8:b9:c0:9c:17:04:30:2c:29:a5:19:4a:d0:df:80:
ee:b6:0b:51:a9:c3:95:ef:36:e2:54:07:42:f1:f5:
7a:b7:84:85:1d:11:09:77:95:69:da:06:c0:53:db:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:6F:67:EA:78:CC:51:A5:CF:25:3D:A4:29:82:C2:5A:9F:44:D0
X509v3 Authority Key Identifier:
keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.22.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:f9:ec:a6:9d:6b:3c:70:58:08:0f:e1:49:d9:d6:62:5f:a9:
7b:d9:2f:82:21:fd:21:f0:d6:85:2c:12:d7:9e:90:67:b2:ed:
fe:0f:f4:31:d5:52:c8:48:de:23:7e:c3:09:fe:9d:01:2e:b6:
86:dc:c1:8b:1d:5b:1b:50:54:59:d3:02:a9:f8:9f:92:af:60:
9e:42:00:8f:ad:94:26:f4:1c:ff:1c:d7:a4:e8:eb:72:a8:17:
9f:51:32:de:bd:39:67:b0:95:65:8a:22:b3:47:83:90:3d:ed:
ee:f8:2c:ee:04:91:14:00:97:1e:08:fd:e7:26:bb:92:e8:56:
e4:ba:40:da:f5:5e:09:01:41:1b:9a:90:d8:86:16:c9:78:bf:
ce:cd:a5:69:df:a7:3c:a3:5a:e4:9c:d6:ed:b8:66:07:64:e6:
ec:25:4c:56:77:8a:23:d3:87:b3:fa:9c:61:ce:76:65:b5:89:
58:53:53:1a:f6:6c:c1:fa:a2:ae:b5:3e:5f:fa:33:de:26:66:
75:06:52:8f:b6:91:76:18:e9:ff:78:57:34:3e:b5:28:76:c8:
27:1c:79:20:e3:84:fa:7b:a6:1e:37:98:57:4d:18:d0:fb:bb:
a7:77:20:42:20:e7:04:10:08:b2:99:ff:fb:3b:f9:a9:da:34:
05:f9:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:40 2026 by rpki-client