
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/B7E5ADEE7B2111EB89BB2347C4F9AE02.roa
File: B7E5ADEE7B2111EB89BB2347C4F9AE02.roa (raw, json)
Hash identifier: WY3x/TF8wOzd/tQDCwF675Sw6UGR3+jgorWVd9u06hE=
Subject key identifier: 6D:B8:5F:2D:18:20:A6:B0:48:E4:C8:0A:F0:73:F2:2E:BB:59:BB:8E
Certificate issuer: /CN=A9131940/serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F
Certificate serial: 0717
Authority key identifier: BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/B7E5ADEE7B2111EB89BB2347C4F9AE02.roa
Signing time: Tue 24 Mar 2026 22:29:20 +0000
ROA not before: Tue 24 Mar 2026 22:29:20 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135081
IP address blocks: 103.208.192.0/22 maxlen: 24
137.59.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl
rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131940, serialNumber=BD0CB3C48F30C1F3AB3F301AECDE6ACC022EB55F
Validity
Not Before: Mar 24 22:29:20 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c31040-350b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:f2:84:5e:a8:aa:0e:dd:7a:ac:8c:60:ef:
f9:08:a6:06:f0:3a:33:3c:e2:c0:80:0c:d1:98:0a:
dd:35:da:3c:69:5a:79:ef:6d:f6:4c:50:1f:26:7a:
1e:ae:68:6b:fc:07:52:6d:fc:d4:b2:06:aa:fb:e0:
5f:f9:30:72:dd:9b:f2:21:8e:96:8c:39:75:92:ec:
29:cb:9c:90:95:ae:a6:da:9b:54:5e:9d:0b:ad:f9:
9c:59:16:e8:d0:89:30:d6:6e:f0:9f:6f:79:00:35:
e9:ee:88:2e:e4:fd:19:8f:ff:bb:04:6e:d6:5d:f1:
30:86:80:64:84:96:db:77:d1:96:f7:94:ea:af:17:
9b:c8:3d:3a:fb:f8:28:4c:3e:78:43:8e:7a:0a:b4:
e9:22:ba:ee:f0:fc:6e:01:b0:d7:38:d0:69:75:a4:
dc:9a:60:07:7b:a3:81:8d:2f:34:61:7f:71:b5:c0:
a3:6d:f0:94:59:78:2e:55:27:e5:55:a0:c6:db:f4:
f1:b9:e9:19:e2:20:8a:c5:f0:2d:a7:a5:78:52:5e:
c3:37:8d:ca:8b:d6:91:3a:76:e7:79:88:96:36:b4:
e6:6a:4f:71:a9:2e:af:f9:b2:ee:7c:8f:c5:59:67:
56:7d:43:f0:3d:00:b4:28:f1:84:e9:12:f7:01:54:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B8:5F:2D:18:20:A6:B0:48:E4:C8:0A:F0:73:F2:2E:BB:59:BB:8E
X509v3 Authority Key Identifier:
keyid:BD:0C:B3:C4:8F:30:C1:F3:AB:3F:30:1A:EC:DE:6A:CC:02:2E:B5:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/vQyzxI8wwfOrPzAa7N5qzAIutV8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQyzxI8wwfOrPzAa7N5qzAIutV8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131940/9CF60BB07B2011EBB0C8DC46C4F9AE02/B7E5ADEE7B2111EB89BB2347C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.208.192.0/22
137.59.208.0/22
Signature Algorithm: sha256WithRSAEncryption
98:db:cf:9c:8b:59:e3:48:d0:fd:2f:8e:5f:1b:ab:c9:ef:dc:
a1:7e:ab:8e:3b:64:8d:e5:4e:20:f9:ea:b9:cc:c4:55:b0:a2:
ba:9e:50:3f:94:fd:eb:d8:72:62:b9:a0:30:76:c4:1a:34:77:
f5:88:df:56:80:bc:5e:eb:ae:29:13:82:92:ce:20:69:4a:81:
fa:c1:18:ed:f7:80:f7:5f:ff:4b:7c:78:67:4a:ae:d3:45:a1:
7c:10:bf:47:a2:b2:21:74:22:7a:3e:a0:04:d1:e5:e7:0b:0d:
25:fc:fb:a5:5e:91:45:57:40:1c:85:83:a2:04:96:7b:4b:f9:
7b:db:33:15:51:38:5a:0c:09:f4:1c:b2:89:4e:dd:de:66:6f:
dc:11:92:37:63:81:02:5f:a0:e3:71:3a:b4:8f:e4:fb:36:7f:
fc:33:c6:db:86:18:a7:af:15:05:73:f2:3f:2d:12:d5:93:42:
91:7a:b2:19:37:4f:ae:e2:29:7e:52:26:a0:0d:0f:90:62:62:
ad:90:0a:92:02:40:0d:b8:a7:31:e6:2b:73:96:1c:72:f5:0f:
5a:cd:76:62:92:d4:c4:99:1b:af:d1:46:c6:97:0b:fe:d5:e0:
13:d0:e6:36:fa:f2:5a:ba:9a:8d:95:d4:6a:00:3b:d7:21:a8:
d2:88:df:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:47 2026 by rpki-client