
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
File: B47C278021D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier: YAVJ3KSJGZy5BW+wsOCfkHC/9utYf+L5rdo1d3HvAbs=
Subject key identifier: CA:B2:3A:83:21:8E:3B:3F:C7:DA:E7:B8:2A:32:68:62:12:7A:DA:FB
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 1065
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
Signing time: Wed 29 Apr 2026 08:57:58 +0000
ROA not before: Wed 29 Apr 2026 08:57:58 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138538
IP address blocks: 103.133.176.0/22 maxlen: 24
103.151.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:27:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4197 (0x1065)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690, serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Validity
Not Before: Apr 29 08:57:58 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69f1c816-fc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:ed:34:a7:d2:b1:91:1e:7f:6e:7e:11:07:
90:eb:44:66:d6:f6:8c:5c:23:80:db:7a:30:51:d2:
18:39:6e:40:68:9e:20:ae:74:40:f0:fd:b5:af:91:
66:65:2c:b0:63:2e:7a:3a:c5:dd:07:45:f6:cf:5c:
f0:87:87:a0:21:15:0f:fc:c2:ad:d7:04:36:1b:ac:
b4:5d:79:98:29:de:4f:5e:23:29:e4:cd:8e:3a:de:
d8:16:12:65:7a:76:d1:25:69:5e:3e:76:15:dd:e0:
c1:97:77:47:57:42:35:03:b2:d7:c6:38:68:7c:1b:
7f:05:94:b5:dc:1b:98:a9:7f:0d:46:cb:17:01:2f:
2a:78:2d:6f:08:b1:21:18:42:8a:0b:05:4d:77:54:
3b:b4:9a:9f:53:48:47:43:93:5d:81:0b:9c:28:47:
b7:f2:90:7f:fa:75:b3:97:31:55:5b:44:64:30:80:
cb:e4:6a:49:dd:22:34:44:6a:ab:a0:89:09:c4:f0:
3e:eb:af:d5:ae:90:75:ad:31:13:68:49:3c:fa:fd:
7a:48:ae:3b:e2:62:32:bf:21:fb:c7:e6:e3:d7:08:
d0:3e:66:81:a5:89:6d:a7:a4:83:fb:8b:c5:fe:1b:
c7:41:1c:22:8e:c1:3e:14:e4:f4:f3:e4:a5:f5:c4:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B2:3A:83:21:8E:3B:3F:C7:DA:E7:B8:2A:32:68:62:12:7A:DA:FB
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B47C278021D711EB9CFAC46EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.176.0/22
103.151.216.0/23
Signature Algorithm: sha256WithRSAEncryption
08:bc:35:95:a6:ae:4e:d0:e2:0e:86:f6:ee:4a:d0:89:bf:85:
23:3b:fb:db:0a:40:ba:02:63:81:6f:05:df:66:cc:74:05:f3:
ff:dc:63:56:61:f1:19:14:79:bf:0d:f0:11:a0:ed:78:4f:cc:
92:30:56:78:9c:99:2a:7e:92:89:96:1f:49:52:0d:6f:b9:30:
05:9f:d6:d2:aa:8b:6e:eb:fb:43:71:ec:97:39:61:01:0c:78:
bc:b8:97:8f:9d:cb:a2:48:2d:e4:74:e2:94:58:9e:46:a8:09:
97:2f:f7:d5:ce:7d:51:4e:56:d1:37:bc:a7:32:60:c5:c4:e6:
f3:42:29:ff:e3:f0:f4:e4:86:7d:4e:13:f9:6e:11:ed:e0:5e:
a9:44:ed:e8:31:fa:67:ce:39:f8:01:7f:f2:6a:ff:72:ff:7e:
d1:f5:39:56:8a:13:d9:4d:6a:20:92:5c:1b:46:c1:77:e0:67:
91:60:b7:66:0e:41:58:b7:64:a8:47:71:7c:20:83:12:c5:d2:
72:12:39:00:e7:79:f2:cb:7c:4b:11:83:21:1b:72:38:fc:06:
c6:1f:a7:bc:f9:d4:eb:c6:29:68:31:0d:c2:9e:4b:f3:38:29:
ca:eb:78:51:9b:32:12:60:58:1e:09:e9:e1:7d:be:61:2c:eb:
a1:09:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:50 2026 by rpki-client