
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/960BB902A6F111EF9E720A74C4F9AE02.roa
File: 960BB902A6F111EF9E720A74C4F9AE02.roa (raw, json)
Hash identifier: 0BHjFrVtUcubPeDUELO7XGsmK4kC0L8wRrstiUFcUS0=
Subject key identifier: 0F:43:3E:41:11:91:35:F2:93:3D:3D:19:63:64:6E:21:0A:9E:B6:E2
Certificate issuer: /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
Certificate serial: 011D
Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/960BB902A6F111EF9E720A74C4F9AE02.roa
Signing time: Wed 29 Apr 2026 00:31:53 +0000
ROA not before: Wed 29 Apr 2026 00:31:53 +0000
ROA not after: Fri 28 Aug 2026 00:00:00 +0000
asID: 136969
IP address blocks: 103.163.48.0/23 maxlen: 23
103.163.48.0/24 maxlen: 24
103.163.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl
rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 285 (0x11d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
Validity
Not Before: Apr 29 00:31:53 2026 GMT
Not After : Aug 28 00:00:00 2026 GMT
Subject: CN=69f15179-d4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:aa:85:f4:e0:e7:53:e5:6c:19:cd:19:ac:
85:28:4d:d0:51:8e:49:47:ec:c4:0f:14:ad:ce:0e:
5d:de:b1:68:d4:49:68:3a:9a:c7:ca:88:19:f2:dd:
c8:7b:54:03:77:22:c3:ec:96:b1:7f:85:15:17:8a:
9c:c3:4c:45:97:ec:9f:d8:f7:a0:47:ff:75:84:d0:
69:49:6d:14:3e:af:06:50:f6:df:ce:de:59:74:a9:
17:e3:f2:c6:ad:28:f1:0b:f8:f7:fb:da:3c:2f:0f:
0f:51:23:34:6d:84:f6:ed:57:2a:2b:50:11:fc:b3:
5f:74:29:34:85:97:43:d1:cb:76:9f:8b:12:87:04:
db:a0:e4:72:0f:5e:b5:24:a7:53:f1:da:2e:3e:ad:
c3:af:7e:9c:53:df:9b:d0:4b:e6:71:57:e0:2f:80:
78:06:7b:3e:d9:44:e3:0d:06:e4:6f:db:de:f2:8b:
19:c3:5d:22:ea:55:f6:84:63:30:12:ff:2d:d8:cb:
aa:b4:c2:93:05:6d:7c:86:79:5d:94:91:3d:d4:e5:
2b:38:82:b2:1f:91:3a:3f:ad:4e:ca:fc:c1:88:95:
75:02:0b:c3:e0:77:0d:e0:11:03:a2:d4:9c:d6:86:
ed:1c:a9:6a:24:45:b0:3a:75:18:26:3c:96:d4:7e:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:43:3E:41:11:91:35:F2:93:3D:3D:19:63:64:6E:21:0A:9E:B6:E2
X509v3 Authority Key Identifier:
keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/960BB902A6F111EF9E720A74C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.163.48.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:51:d9:73:08:a5:0f:13:8d:5f:20:dc:4c:5e:88:27:74:88:
2e:62:97:50:2b:30:33:7f:22:18:af:8f:80:b3:bd:2b:69:bc:
05:90:c6:ef:3c:ca:43:0e:e4:4e:6b:35:fb:99:57:2b:e1:04:
75:c2:f3:4a:b4:83:3e:01:5e:7e:ef:03:1f:f2:33:d8:69:40:
b5:a6:ce:34:55:2d:d1:7a:aa:4b:21:d4:92:8b:d0:15:f0:5e:
7d:23:1b:86:6e:c7:7e:f3:29:3d:d1:69:e8:de:e0:ce:4a:fc:
a9:af:60:a6:dd:d3:10:e8:d4:a7:44:2f:a0:7c:eb:53:75:3d:
04:3f:cf:94:d7:30:87:fb:03:3b:4b:12:9f:27:ff:b2:21:79:
e4:2f:df:5e:28:a1:0f:88:bc:f4:44:63:c7:cb:b8:1e:99:73:
16:7e:b2:c6:d4:7e:4f:b0:73:df:38:e6:83:78:e1:66:51:a6:
1a:1f:a7:27:ce:44:fe:f0:f1:58:81:4b:ef:4b:d0:9d:81:f1:
6b:92:d5:71:ad:c6:19:bb:f1:52:b4:6f:0b:62:6a:b7:f8:eb:
78:b3:9f:b6:1d:9f:bd:f0:9d:f9:c6:ee:99:62:70:1a:f1:53:
4e:61:a3:b3:10:40:e8:0d:fa:e1:47:1f:ef:5c:f4:b0:b9:c3:
0a:c5:dd:61
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzNjMxMTAvBgNVBAUTKDc4OEZCNEQ5NkI2MDFEQkE2MTZERERDOTlDRkU0NjVE
NjBDMzhGMjEwHhcNMjYwNDI5MDAzMTUzWhcNMjYwODI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYxNTE3OS1kNGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy0uqhfTg51PlbBnNGayFKE3QUY5JR+zEDxStzg5d3rFo1EloOprHyogZ8t3I
e1QDdyLD7Jaxf4UVF4qcw0xFl+yf2PegR/91hNBpSW0UPq8GUPbfzt5ZdKkX4/LG
rSjxC/j3+9o8Lw8PUSM0bYT27VcqK1AR/LNfdCk0hZdD0ct2n4sShwTboORyD161
JKdT8douPq3Dr36cU9+b0EvmcVfgL4B4Bns+2UTjDQbkb9ve8osZw10i6lX2hGMw
Ev8t2MuqtMKTBW18hnldlJE91OUrOIKyH5E6P61OyvzBiJV1AgvD4HcN4BEDotSc
1obtHKlqJEWwOnUYJjyW1H7y9QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA9DPkER
kTXykz09GWNkbiEKnrbiMB8GA1UdIwQYMBaAFHiPtNlrYB26YW3dyZz+Rl1gw48h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD
QkExMUVDOEFBMTNFMjRDNEY5QUUwMi9lSS0wMld0Z0hicGhiZDNKblA1R1hXRERq
eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VJLTAyV3RnSGJwaGJkM0puUDVHWFdERGp5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzNjMvMzFFQURGQTQ1Q0JBMTFFQzhBQTEzRTI0QzRGOUFFMDIvOTYwQkI5MDJB
NkYxMTFFRjlFNzIwQTc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ6MwMA0GCSqGSIb3DQEBCwUAA4IBAQDDUdlzCKUPE41fINxMXogn
dIguYpdQKzAzfyIYr4+As70rabwFkMbvPMpDDuROazX7mVcr4QR1wvNKtIM+AV5+
7wMf8jPYaUC1ps40VS3ReqpLIdSSi9AV8F59IxuGbsd+8yk90Wno3uDOSvypr2Cm
3dMQ6NSnRC+gfOtTdT0EP8+U1zCH+wM7SxKfJ/+yIXnkL99eKKEPiLz0RGPHy7ge
mXMWfrLG1H5PsHPfOOaDeOFmUaYaH6cnzkT+8PFYgUvvS9CdgfFrktVxrcYZu/FS
tG8LYmq3+Ot4s5+2HZ+98J35xu6ZYnAa8VNOYaOzEEDoDfrhRx/vXPSwucMKxd1h
-----END CERTIFICATE-----
Generated at Wed May 13 03:09:23 2026 by rpki-client