
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/59B22D68909111EABF08FC4FC4F9AE02.roa
File: 59B22D68909111EABF08FC4FC4F9AE02.roa (raw, json)
Hash identifier: p5tHceUGggVzp/JRsrpIxwd9XbhGqbw9afNYTWBImQI=
Subject key identifier: BE:AF:2D:97:D4:AB:11:C3:72:85:0F:7F:C7:00:CF:EA:B8:A2:3E:1E
Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Certificate serial: 0A11
Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/59B22D68909111EABF08FC4FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:48:46 +0000
ROA not before: Thu 08 Jan 2026 20:16:18 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133331
IP address blocks: 103.225.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577 (0xa11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Validity
Not Before: Jan 8 20:16:18 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a451ce-7c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:c9:43:de:3d:fb:dd:7b:25:d0:a8:24:72:
0d:f4:d3:14:e3:e8:3b:10:8a:8d:0c:a3:77:67:46:
6a:f0:b7:2b:99:9f:03:69:bc:5b:0e:3e:f2:29:50:
79:b2:bb:4f:3a:70:48:6f:4e:af:6c:c9:fa:db:cb:
bf:95:a2:74:17:f2:03:cc:1c:89:89:8e:56:0d:e9:
d9:60:10:c5:70:12:e0:f0:e2:8a:8d:79:ae:62:29:
c1:13:2e:00:ee:50:ae:4e:c7:c3:78:33:60:2d:bb:
98:3f:b6:56:ff:8c:8e:49:64:4b:22:c0:0c:a4:45:
66:f0:f0:33:ea:a5:1d:d7:f9:6c:22:ef:36:0f:55:
a8:8a:41:86:eb:ca:29:c9:4f:8d:4f:82:64:0e:46:
26:6e:a2:38:d8:d0:c8:e9:99:de:e4:a8:a3:e8:d3:
e1:4c:22:4d:2a:43:57:8b:2e:92:f0:3c:4c:86:90:
3b:32:ab:a1:05:46:40:1b:a4:dd:74:b3:58:8a:bd:
30:c7:6e:37:66:9d:9a:98:da:27:ab:eb:93:f9:8b:
97:97:c8:54:5a:b1:fb:ba:8c:b8:47:55:a0:6c:1e:
48:38:63:ff:81:b8:9f:8e:38:a9:5e:b4:84:ee:7f:
5e:82:3c:bd:62:51:c3:ea:31:9e:a3:39:3e:68:45:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AF:2D:97:D4:AB:11:C3:72:85:0F:7F:C7:00:CF:EA:B8:A2:3E:1E
X509v3 Authority Key Identifier:
keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/59B22D68909111EABF08FC4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.225.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:c3:e8:56:85:29:4f:2c:fc:d8:24:35:ed:7b:4f:b4:4a:69:
34:fd:2d:30:8e:6e:2b:e8:40:53:ba:6d:f1:6a:42:af:e0:35:
77:b6:01:b6:07:f7:63:0f:7c:be:97:97:f7:1a:3d:69:8e:e7:
08:ca:66:3d:4a:cc:e2:92:2d:b6:0d:88:69:a8:0b:ae:5b:ec:
3a:50:ca:8a:08:d1:e5:09:27:4e:02:fd:68:dd:59:e4:a2:45:
d8:45:ec:7b:79:57:2f:7f:06:f3:08:76:a9:93:98:02:a9:39:
3d:7b:26:ea:09:67:48:c3:5f:90:4c:5a:98:3d:76:35:8f:4b:
1b:28:bb:d1:d6:d4:58:0e:06:b8:53:a3:b3:0a:69:65:67:f3:
87:64:a2:08:68:df:63:57:ca:01:66:36:02:37:8d:00:f7:ca:
46:e9:13:61:6a:58:d3:f9:18:45:3f:6b:a9:c1:e7:60:1a:d3:
ad:30:6d:06:9b:31:5b:50:23:fc:85:70:5f:24:6e:5f:dd:e1:
04:1b:98:0a:f7:a7:b9:ff:4e:74:11:e9:c7:38:fc:e8:27:c3:
f1:81:e7:86:5a:f1:58:40:f9:6e:b6:ef:02:fc:6a:ca:8d:42:
e8:d0:b7:e0:64:8a:e5:51:c6:9c:fa:06:40:85:4d:2b:27:af:
ae:84:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:48 2026 by rpki-client