
$ rpki-client -vvf rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/995AA100551611E9BDD3CB66C4F9AE02.roa
File: 995AA100551611E9BDD3CB66C4F9AE02.roa (raw, json)
Hash identifier: ix8Y0mmn+/uiIe+QXDDaxKrAmCa1p4V0bjpTh/sxjE4=
Subject key identifier: 8F:AF:B1:2A:CE:F8:E3:74:1C:0E:CA:76:8E:61:2B:54:89:D8:7B:FC
Certificate issuer: /CN=A912190F/serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Certificate serial: 10E0
Authority key identifier: 34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/995AA100551611E9BDD3CB66C4F9AE02.roa
Signing time: Tue 12 May 2026 08:01:34 +0000
ROA not before: Tue 12 May 2026 08:01:34 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 138699
IP address blocks: 103.136.220.0/22 maxlen: 22
103.136.220.0/23 maxlen: 23
103.136.220.0/24 maxlen: 24
103.136.221.0/24 maxlen: 24
103.136.222.0/24 maxlen: 24
103.136.223.0/24 maxlen: 24
118.26.132.0/24 maxlen: 24
2404:9dc0:c002::/48 maxlen: 48
2404:9dc0:cd01::/48 maxlen: 48
2404:9dc0:cd02::/48 maxlen: 48
2404:9dc0:cd03::/48 maxlen: 48
2404:9dc0:cd04::/48 maxlen: 48
2404:9dc0:cd05::/48 maxlen: 48
2404:9dc0:cd06::/48 maxlen: 48
2404:9dc0:cd07::/48 maxlen: 48
2404:9dc0:cd08::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4320 (0x10e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912190F, serialNumber=344FB499A6A37D26329AB7D5FF526251098E5DF2
Validity
Not Before: May 12 08:01:34 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a02de5e-0b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:2c:d7:19:25:ce:7d:6c:c9:5e:71:5d:f2:
69:c3:73:85:70:ec:5b:5c:58:34:6d:2a:55:d2:13:
f8:55:96:3c:cc:e5:c8:9f:0e:57:4a:a1:54:85:37:
89:fe:04:b5:a4:36:44:44:d7:20:52:89:30:8d:95:
ce:39:fd:52:40:06:98:89:9a:e8:6d:e9:89:d8:68:
30:1a:3e:29:86:54:2d:a5:ce:b8:4d:92:7a:83:5a:
99:5f:12:a6:6c:36:a1:8c:fa:25:c4:6b:ae:d5:75:
e2:9f:b3:b0:02:77:34:83:c6:7d:75:72:42:35:f0:
80:6e:c6:a1:1d:5e:3c:09:83:93:81:97:74:0c:0f:
17:fc:b2:04:23:e4:ec:dd:71:ac:99:eb:74:6e:24:
3a:a6:e9:46:46:ae:bb:2f:ec:17:df:3c:a6:c0:1e:
23:89:0a:a9:e6:42:9e:1b:f3:df:42:ec:62:1a:7a:
46:2b:59:5c:3d:3f:58:5c:02:98:c4:80:6c:8f:ed:
fa:d1:a0:82:fd:cd:c9:64:e9:76:eb:5a:08:4a:2d:
c1:98:b8:0a:7a:e9:33:41:48:c6:01:62:82:d5:dd:
c5:67:c2:b8:5f:63:10:d9:73:24:20:a9:8e:c3:69:
3b:8a:e9:f5:9e:84:22:3e:89:37:f9:6a:32:8a:c2:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:B1:2A:CE:F8:E3:74:1C:0E:CA:76:8E:61:2B:54:89:D8:7B:FC
X509v3 Authority Key Identifier:
keyid:34:4F:B4:99:A6:A3:7D:26:32:9A:B7:D5:FF:52:62:51:09:8E:5D:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/NE-0maajfSYymrfV_1JiUQmOXfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NE-0maajfSYymrfV_1JiUQmOXfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912190F/6CC0F9F447B111E99FCCA059C4F9AE02/995AA100551611E9BDD3CB66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.220.0/22
118.26.132.0/24
IPv6:
2404:9dc0:c002::/48
2404:9dc0:cd01::-2404:9dc0:cd08:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c2:a3:9f:3c:37:36:7a:e4:2a:cb:c6:27:71:1a:80:7d:af:5e:
4f:32:74:47:e4:80:bb:f4:9c:1a:e2:a8:8e:cc:bf:c5:89:92:
2a:59:53:3a:08:f3:95:75:64:a1:bc:7e:d8:5a:60:19:e9:ef:
b9:13:cf:a1:62:3b:6d:94:db:bc:a3:5f:7b:cf:d0:dd:92:38:
d4:6f:1d:d1:31:22:23:49:cf:15:9e:de:bb:ad:8c:f0:8a:7a:
7a:d7:05:4d:12:f7:c8:46:36:a5:c1:ef:d5:c4:e5:37:26:f0:
90:6d:51:4a:79:c8:cf:fa:01:3b:56:05:5d:7f:e0:e3:33:71:
0a:6a:e1:a8:ce:33:cd:10:da:97:01:5d:9a:cd:ef:ca:2a:a5:
93:e3:6b:e3:26:8c:e7:41:53:7a:20:1e:7b:ca:34:7b:77:26:
3d:29:6c:1a:4d:0d:bd:0b:52:31:c8:68:90:3e:2b:e5:f1:2b:
69:b9:fb:d3:8f:f1:6e:d8:41:9e:d3:48:b8:f0:40:45:40:76:
62:d4:e8:3f:8a:d8:0b:46:ac:d7:da:7d:13:a3:55:6e:db:c5:
2d:2e:f0:c5:5d:9c:27:c2:80:0d:4e:d8:77:e7:d8:04:86:68:
c8:0a:e6:b4:40:ee:33:6b:4d:4f:c2:d7:64:57:4f:aa:0c:0a:
ec:ad:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:30:26 2026 by rpki-client