
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/08CD1510027011EB98FEC44BC4F9AE02.roa
File: 08CD1510027011EB98FEC44BC4F9AE02.roa (raw, json)
Hash identifier: +IMdgWTdcA1g1fqND4+7nCJIPD1lLydbWWaRQ1akOWM=
Subject key identifier: 7C:5C:2E:AA:FD:80:A2:8F:5C:C9:01:F0:72:64:24:42:3E:32:07:B0
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 1063
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/08CD1510027011EB98FEC44BC4F9AE02.roa
Signing time: Wed 29 Apr 2026 08:57:54 +0000
ROA not before: Wed 29 Apr 2026 08:57:54 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 137443
IP address blocks: 103.133.176.0/22 maxlen: 24
103.151.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4195 (0x1063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Apr 29 08:57:54 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69f1c812-be92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:77:da:9e:11:f8:7a:f7:07:07:5a:5f:97:
e8:bb:e6:58:ee:70:ef:36:6b:ba:6d:47:47:e9:42:
ed:47:1a:42:86:9f:af:b7:9e:4f:32:74:ef:36:04:
a0:07:91:34:9c:06:81:0a:f1:ed:d0:30:81:0f:2d:
7c:8e:18:76:38:db:74:98:9b:20:54:a9:1f:f8:60:
a9:aa:bf:7e:16:d1:64:7b:0c:f5:ad:9d:92:c2:8d:
0f:dd:a2:c6:26:75:c0:83:03:22:7e:15:72:20:6d:
8e:97:c7:cc:c6:9e:dc:05:4d:2a:ba:d1:65:33:a8:
21:ba:29:f5:69:e2:e3:aa:d4:06:58:10:b0:45:76:
fb:5e:fb:df:34:85:a7:23:2c:72:9a:4b:cd:0d:21:
03:27:47:94:a0:68:90:51:76:bc:ef:0e:5a:47:bb:
64:16:5a:97:53:bc:b6:60:f3:79:e3:67:f1:9d:77:
5c:b2:bf:ac:9b:a0:34:a1:d9:92:b1:42:20:fe:0c:
f4:61:9e:f3:d9:a8:06:3d:9c:9e:44:34:4f:d8:9d:
d0:c1:5b:83:ab:eb:56:02:3c:0c:c1:52:32:53:ef:
70:b5:94:21:8e:e0:30:51:ea:92:dd:8c:46:da:67:
d5:45:9e:4c:06:7c:b8:c6:42:55:75:31:2f:22:c5:
fb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:2E:AA:FD:80:A2:8F:5C:C9:01:F0:72:64:24:42:3E:32:07:B0
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/08CD1510027011EB98FEC44BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.176.0/22
103.151.216.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:db:e2:aa:d4:6d:f3:bb:5e:af:9d:fe:1a:85:2a:3f:f9:e7:
b0:97:bd:38:ad:a6:90:6d:a6:40:1f:0e:88:5e:26:14:5d:5f:
93:0e:70:2e:b8:9d:16:0a:99:56:f1:36:aa:a5:d4:de:b0:4e:
77:52:4c:50:86:fa:ea:87:33:9d:5e:a5:63:e8:2e:16:7a:92:
7d:bf:60:0e:b5:6d:7d:bd:e3:54:2e:db:50:dc:3d:a6:eb:e5:
81:e5:b9:7b:da:ab:0d:52:db:a4:c8:71:6c:45:af:a8:6f:32:
2a:02:0e:36:fa:cc:e7:6f:91:9c:37:eb:b9:63:df:ae:99:b6:
e9:76:dc:93:f1:c8:d5:4a:30:97:c8:f4:be:7b:57:46:71:a5:
69:d6:fc:0a:f9:16:10:2e:99:86:a3:59:a2:e3:34:16:fc:0b:
ec:8f:03:c5:da:d5:ee:db:f6:e5:b7:bb:4b:bf:6b:6a:c5:06:
10:97:a2:53:06:2d:2f:5a:6b:75:38:e1:e1:04:6e:89:77:0a:
0e:db:56:a3:9b:a8:78:5c:c0:7f:8d:7b:5b:13:c9:f1:59:16:
85:02:de:32:40:5f:16:11:ee:50:86:1a:a8:8d:24:f5:4c:73:
a7:fe:46:a9:59:63:9a:59:91:ee:bc:89:72:ce:22:3d:c8:13:
cc:3a:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:51 2026 by rpki-client