
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa
File: 05F74AC4B99C11ECA1344C85C4F9AE02.roa (raw, json)
Hash identifier: fPiSn9EKp07Pksf7OzdvkznMDYTa4tFQoVJ+7TRcTvU=
Subject key identifier: 54:35:9F:5C:73:B0:87:65:0B:D0:55:B6:CC:DA:E8:1E:86:39:82:D5
Certificate issuer: /CN=A9118E3A/serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Certificate serial: 03E2
Authority key identifier: 1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:03:13 +0000
ROA not before: Mon 07 Apr 2025 01:05:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149775
IP address blocks: 103.186.22.0/23 maxlen: 23
103.186.22.0/24 maxlen: 24
103.186.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl
rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:10:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118E3A, serialNumber=1D642ED28ECEA5F2AACF347B16097F9D9241D76D
Validity
Not Before: Apr 7 01:05:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40ee0-8ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8d:75:e0:5d:71:e1:a9:05:ac:20:b5:bc:22:
cf:a8:b3:24:b7:dd:69:4b:80:52:5d:04:a5:c7:a3:
5e:21:48:60:bb:38:2b:6d:2d:7d:3c:58:ac:06:87:
a5:ff:a0:11:dd:be:36:3f:7b:bc:57:26:2d:42:32:
fe:a8:48:d9:e0:cf:0a:88:07:47:b9:4f:52:e6:f3:
04:4d:df:07:97:77:12:0c:5c:de:15:6f:3a:f0:c6:
6a:98:c2:b9:3d:08:66:ef:5e:f5:47:94:01:2b:57:
d6:0e:0c:d6:fc:2a:5f:d9:5b:2b:76:ff:3d:9e:66:
cb:e7:79:5d:7d:d7:70:b7:60:10:5e:c2:5c:1d:2c:
dd:9c:c0:e2:f2:0a:20:ee:69:d6:68:b7:43:3d:f4:
96:d5:7d:65:0c:72:a7:19:4d:05:06:2f:c6:ce:64:
04:3f:45:51:c4:a5:35:9f:ab:b2:1a:47:92:f6:33:
11:aa:98:d8:6a:31:ae:76:2a:61:84:73:5a:6c:93:
b3:26:6e:c4:e9:70:b3:f0:11:da:8f:a0:30:cc:47:
a3:03:fb:e6:3c:25:88:7c:bd:71:37:3c:bd:94:ff:
f2:aa:44:e7:1f:50:b7:73:f6:5e:9d:02:47:cf:86:
b6:e0:7c:fa:62:69:a2:32:4a:75:25:11:dc:a4:79:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:35:9F:5C:73:B0:87:65:0B:D0:55:B6:CC:DA:E8:1E:86:39:82:D5
X509v3 Authority Key Identifier:
keyid:1D:64:2E:D2:8E:CE:A5:F2:AA:CF:34:7B:16:09:7F:9D:92:41:D7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/HWQu0o7OpfKqzzR7Fgl_nZJB120.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWQu0o7OpfKqzzR7Fgl_nZJB120.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118E3A/A7AB0A8AB99811EC8DBE9281C4F9AE02/05F74AC4B99C11ECA1344C85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.22.0/23
Signature Algorithm: sha256WithRSAEncryption
59:12:d9:e8:83:ef:a8:e1:c1:0f:dc:6e:4d:1b:8a:76:0f:b2:
f6:a1:a5:01:88:5c:d9:aa:ab:90:62:7a:0f:cd:84:71:df:89:
d5:a2:52:b3:41:23:07:99:af:67:9c:3f:b0:52:c0:9f:a2:06:
07:71:b2:38:e4:a9:28:12:f1:04:a5:c0:19:47:5e:34:ca:eb:
ed:9d:ac:20:cc:d1:1b:ad:de:d5:46:74:87:f0:d8:73:47:68:
89:5e:f5:40:15:57:c6:a2:86:b3:32:d9:e6:56:fa:ef:de:14:
26:ed:44:52:81:d9:2a:8b:d5:00:91:07:fd:87:4d:f6:92:ac:
dc:9f:4a:ba:4b:58:62:ea:f4:04:8a:f5:26:fd:ae:37:5c:73:
5c:8f:c8:c8:51:cf:4b:c7:40:5f:27:49:4b:dd:a8:47:65:a1:
df:fc:a2:35:29:2a:a6:c7:c4:04:e0:b8:83:2a:1d:78:f7:50:
d6:ad:06:94:e0:ec:4b:b8:89:ab:74:c8:af:92:9a:92:a2:18:
6f:7f:e8:b8:a6:46:cc:3c:89:96:88:c5:4e:22:4e:c3:71:8b:
f6:48:25:dc:c9:e5:ed:1b:e5:ab:3c:8b:8c:f9:d6:fb:c6:58:
a8:f5:81:43:34:ec:ed:e7:b6:dd:d8:1f:cb:ec:f5:c1:16:69:
b0:3f:c2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:59 2026 by rpki-client