
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa
File: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier: UFtgLJp8H69yZx4HPXt6+xleZLi+o5QDWEezYOkAgV8=
Subject key identifier: 8E:8A:32:1E:51:73:9C:40:87:0F:5D:6C:9B:34:2B:E6:C1:E3:74:9B
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 1062
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa
Signing time: Wed 29 Apr 2026 08:57:53 +0000
ROA not before: Wed 29 Apr 2026 08:57:53 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 135386
IP address blocks: 103.133.176.0/22 maxlen: 24
103.151.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4194 (0x1062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Apr 29 08:57:53 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69f1c810-db70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:6d:15:9c:b3:60:86:c3:97:60:ed:16:4f:
0a:7f:b4:02:66:b0:1e:e4:94:f7:a7:57:1a:58:1c:
70:11:af:d9:8c:ed:fa:31:dc:d8:07:0f:c1:0b:c6:
5e:ed:bf:b0:67:10:59:08:bd:81:5f:48:45:7a:e1:
c7:f2:68:4f:26:34:17:1c:52:bd:7d:2a:1c:bd:62:
43:35:2c:69:80:48:3a:76:a6:6c:4a:ba:ef:43:e1:
1a:b0:86:e0:47:40:e2:c4:02:84:cb:2c:73:c3:e4:
f0:1d:83:fa:3e:79:9c:be:fa:aa:97:6a:82:a5:b0:
0e:0a:58:b0:89:6a:73:57:28:0e:5d:fc:d6:82:74:
7f:bb:70:dc:82:a1:a8:a7:62:91:c2:5e:27:ac:fc:
a7:06:bc:0c:29:a1:05:10:f8:c8:d0:49:f3:5f:cb:
09:65:ce:2f:a3:d0:0f:e1:29:aa:73:19:78:1d:d6:
34:9c:c9:8a:36:a4:59:14:87:77:c0:f0:4c:fe:d8:
02:1d:9e:e0:f9:bc:e2:cf:82:8c:b1:06:ec:57:ca:
6c:83:d2:73:ff:6f:88:86:1f:0c:86:a5:30:85:10:
92:7a:33:42:dd:6b:13:c3:f1:71:95:b6:cb:34:a0:
d5:1c:58:dc:a5:91:30:78:8d:c5:b5:34:90:df:e0:
a9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8A:32:1E:51:73:9C:40:87:0F:5D:6C:9B:34:2B:E6:C1:E3:74:9B
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.176.0/22
103.151.216.0/23
Signature Algorithm: sha256WithRSAEncryption
65:82:00:bb:b0:70:47:4d:92:ac:f1:b2:46:05:3b:2d:65:cd:
59:c6:f6:a2:60:a8:9d:ef:42:86:5b:af:94:ed:6e:ec:32:cc:
45:d6:22:81:a2:d9:c8:98:fd:3b:76:8a:ff:8e:96:f5:d8:6a:
d9:d8:69:9b:b8:59:d5:3d:c5:0c:92:4c:99:76:01:80:3e:8e:
d2:62:32:db:f7:a3:83:8b:80:49:97:dd:64:6a:bb:07:25:a1:
84:c7:b7:fb:49:99:38:5c:0d:68:63:4e:7d:5a:11:82:45:2e:
91:0c:7c:e8:67:c1:72:fc:39:6e:6d:60:75:7a:47:c2:40:8d:
8c:18:81:38:ff:d0:1d:74:8a:a1:cf:38:15:dc:40:1e:aa:88:
ed:85:e7:e0:be:8d:ad:de:18:de:32:57:e3:4a:52:0c:d9:db:
1f:70:98:9b:0f:ba:cf:78:6d:a3:2d:38:73:c1:b9:8d:9c:3d:
d6:c1:1d:52:6e:62:7e:0b:fb:ae:52:4e:3b:17:a0:db:ca:c2:
f1:8f:c5:da:27:55:4b:1c:d8:15:e0:fd:55:4b:40:bd:fb:82:
6b:40:3c:91:ea:57:d5:53:87:34:f5:10:20:a9:4d:e7:ab:96:
26:6d:2d:05:2b:33:09:1d:3f:85:2a:26:2b:7c:a8:96:18:44:
38:68:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:20 2026 by rpki-client