
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa
File: B70383D6385411E9A0023656C4F9AE02.roa (raw, json)
Hash identifier: 7vWFkGFq5uxVXCbfQZ/86ifw+qgZ8YrPvE/ofrwS5C0=
Subject key identifier: B9:F5:E8:EB:1A:6D:85:A6:A8:03:DF:71:6A:D3:51:89:45:77:34:40
Certificate issuer: /CN=A9129B9E/serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Certificate serial: 112D
Authority key identifier: 25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa
Signing time: Tue 30 Jun 2026 18:20:53 +0000
ROA not before: Tue 30 Jun 2026 18:20:53 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 136598
IP address blocks: 103.93.90.0/24 maxlen: 24
103.96.234.0/24 maxlen: 24
103.96.235.0/24 maxlen: 24
103.122.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:22:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4397 (0x112d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129B9E, serialNumber=2504E9F80A9842B54A49269CC2F4B1AC2B6E854C
Validity
Not Before: Jun 30 18:20:53 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a440905-cc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:10:31:fa:03:d4:55:94:0e:81:b0:8c:ae:
25:93:47:3a:32:9d:e8:6a:97:4e:76:e7:41:57:d7:
73:6a:3e:3f:f5:3b:66:bc:71:4e:54:a5:72:3e:7a:
04:27:f9:65:76:d8:73:b8:bb:e2:07:b2:ef:fa:07:
88:77:de:76:56:3e:12:59:31:27:41:08:8e:35:3d:
f3:15:6b:99:6d:c4:a1:14:c7:85:a0:b9:88:92:4a:
ad:fc:3d:73:32:71:e4:f1:01:f6:ee:6d:2b:09:cc:
1f:5c:67:bf:d1:0c:5d:f0:19:a7:74:be:69:af:48:
30:ca:88:ed:6d:70:34:1f:8a:09:4e:d8:8e:e1:f6:
f0:e0:5b:48:49:79:77:db:dc:93:bb:f9:6e:43:11:
af:f0:30:56:0f:bc:ac:68:2b:3d:9a:fe:42:e2:b2:
e8:2d:f6:3a:aa:53:ec:8d:d6:c0:6b:86:3a:97:3a:
02:87:03:41:44:3c:fc:f8:10:53:fe:4c:a6:76:c9:
33:e2:ad:fe:44:6a:8c:62:2e:68:51:47:3f:23:f3:
30:bc:94:8d:7b:be:01:39:eb:f5:23:48:af:f2:26:
99:82:23:a4:05:56:99:7b:79:38:4f:73:96:2f:35:
2e:14:09:60:f9:93:55:cb:09:ae:e3:94:57:ff:4e:
d3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F5:E8:EB:1A:6D:85:A6:A8:03:DF:71:6A:D3:51:89:45:77:34:40
X509v3 Authority Key Identifier:
keyid:25:04:E9:F8:0A:98:42:B5:4A:49:26:9C:C2:F4:B1:AC:2B:6E:85:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/JQTp-AqYQrVKSSacwvSxrCtuhUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQTp-AqYQrVKSSacwvSxrCtuhUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129B9E/98B57D86385311E9AD442852C4F9AE02/B70383D6385411E9A0023656C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.93.90.0/24
103.96.234.0/23
103.122.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:02:e4:1e:ba:e7:11:44:f8:68:f4:40:53:09:a8:cc:23:f0:
6b:00:44:a3:30:2c:9b:67:1f:eb:77:47:4c:b2:ee:cc:af:75:
10:22:2d:0c:d5:16:7a:e6:b5:7d:19:a3:88:fa:ed:b4:6c:82:
b6:07:a6:46:24:89:9a:7f:f1:7d:cf:3c:cf:c6:fc:37:81:1b:
8e:ff:01:14:ea:bc:ae:11:11:4f:d7:9c:22:39:8c:1c:3c:36:
07:54:56:05:12:67:5c:f2:9d:ea:74:0f:c0:29:4a:ff:9e:8f:
56:6b:e9:69:8d:6e:32:e8:8d:26:0e:2f:7f:5e:b5:a0:c4:aa:
88:fe:7f:e4:0d:ae:57:70:51:f6:e7:a6:92:71:30:b5:80:be:
bb:6e:b5:88:c6:e2:45:04:2b:b2:ff:59:05:b6:11:20:d4:d0:
a3:82:a1:f7:60:d3:8b:18:97:fb:46:57:d2:7d:d8:31:75:e7:
c3:0a:8d:96:78:21:6c:ed:88:ba:33:2c:01:2f:62:e9:77:77:
03:5c:09:22:0e:14:15:e5:26:0d:78:30:ea:97:73:89:a3:de:
cb:40:f7:cb:53:4a:40:5b:0d:85:77:16:8a:c8:7d:8c:c7:2f:
10:4b:b4:27:31:47:fb:55:d3:4b:a0:e3:b9:40:e4:64:75:9c:
25:cd:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:00 2026 by rpki-client