
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/29E38708B6DC11F1ABAE44C35911F970.roa
File: 29E38708B6DC11F1ABAE44C35911F970.roa (raw, json)
Hash identifier: hVeqKJzrVGxJ3NNY0BfqeBXzVsvx+nTJK5T5DlTsjmY=
Subject key identifier: 70:89:9E:48:68:1A:94:D9:44:E3:B5:E9:A9:8C:2C:67:13:40:F2:71
Certificate issuer: /CN=A9135033/serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
Certificate serial: 0E21
Authority key identifier: 0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/29E38708B6DC11F1ABAE44C35911F970.roa
Signing time: Tue 22 Sep 2026 23:20:14 +0000
ROA not before: Tue 22 Sep 2026 23:20:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 197537
IP address blocks: 103.131.66.0/24 maxlen: 24
103.131.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl
rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 23:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3617 (0xe21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135033, serialNumber=0DE596CB2C60CB757DB8F40EB86F247652C13A30
Validity
Not Before: Sep 22 23:20:14 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ab30d2e-e068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:b8:2e:f7:d7:e8:a7:46:89:d9:ab:1c:0c:
b4:52:48:57:21:cb:42:b2:dc:0e:47:46:4f:d6:e3:
0e:d8:dd:5d:f6:f8:f9:93:ae:00:3a:fe:2d:21:42:
94:59:31:b2:df:f9:bb:91:dd:ac:b0:1f:aa:50:1d:
ae:b4:fe:c7:92:aa:6a:1c:a5:46:cf:7a:6f:d8:9b:
50:94:d3:2e:57:d0:a0:e4:51:cb:83:89:3f:d7:24:
7c:31:d5:b3:bb:a7:e6:d3:5a:68:06:32:36:da:68:
56:b4:a5:93:39:4f:27:43:32:31:3b:6c:82:fe:07:
bf:e8:b2:82:bd:b3:5d:8d:70:72:a9:16:32:cb:ea:
09:01:d3:e8:6e:2e:8c:a6:fd:db:7d:77:a4:30:17:
cf:40:ce:4a:ab:ed:39:50:cf:5e:b4:89:5c:2e:50:
c4:48:d2:13:01:29:48:2e:7c:9e:35:e6:99:88:fe:
58:87:64:6c:41:95:00:4e:f2:e0:92:b9:64:88:e6:
c8:28:a0:33:d4:e8:42:6f:bb:2d:fc:b7:9b:7f:58:
bb:b0:e1:0c:36:5e:a9:57:71:13:ff:5a:48:34:68:
ec:d4:14:8b:5f:39:6d:fe:b9:5b:1e:03:86:ed:54:
00:c4:5f:66:a0:0a:d2:38:ef:ac:d2:95:76:81:82:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:9E:48:68:1A:94:D9:44:E3:B5:E9:A9:8C:2C:67:13:40:F2:71
X509v3 Authority Key Identifier:
keyid:0D:E5:96:CB:2C:60:CB:75:7D:B8:F4:0E:B8:6F:24:76:52:C1:3A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/DeWWyyxgy3V9uPQOuG8kdlLBOjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DeWWyyxgy3V9uPQOuG8kdlLBOjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135033/5D00AE52DD4C11E9A6D4BB1DC4F9AE02/29E38708B6DC11F1ABAE44C35911F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.66.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:9d:ce:0e:31:3e:5a:a1:ca:a9:64:07:cf:5b:b6:4e:24:22:
ba:10:68:88:27:6b:87:70:ae:9e:17:6b:76:94:d0:6c:e8:a0:
c2:b8:13:84:0c:7e:e6:2b:5f:01:b5:c1:0c:b4:81:91:d5:3d:
5c:81:ca:e1:03:13:1a:51:03:55:c9:0a:b0:f8:41:7a:fb:a6:
56:2b:10:52:35:fc:3a:54:72:8e:ff:8b:58:b7:98:4b:49:7b:
23:d7:f6:70:1c:8c:11:44:36:34:a3:75:a6:17:0c:a3:2e:d3:
ca:29:43:59:14:c1:82:65:99:52:74:65:5f:69:bf:3b:13:09:
49:ca:ff:c8:30:a1:86:dc:82:02:3b:09:29:9f:c6:db:ac:88:
47:4c:84:d9:1d:0d:d2:f6:33:91:65:00:c4:bb:19:6f:94:ad:
85:7d:80:91:bd:db:5b:e4:d2:74:31:1a:e7:ef:5d:49:f9:21:
01:37:92:b1:05:c3:90:0d:b6:26:22:85:d6:b7:aa:e7:ac:60:
1f:e2:aa:bd:01:87:1f:61:9e:8f:71:cb:48:85:0d:a1:37:50:
cb:37:a9:9e:27:ce:7f:4b:d5:b7:70:f5:ba:5f:86:ce:a6:df:
1d:ee:af:0f:9f:bc:9b:a0:b4:e2:95:93:c3:1e:a4:73:2d:a4:
68:ea:48:63
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzUwMzMxMTAvBgNVBAUTKDBERTU5NkNCMkM2MENCNzU3REI4RjQwRUI4NkYyNDc2
NTJDMTNBMzAwHhcNMjYwOTIyMjMyMDE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzMGQyZS1lMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCy4LvfX6KdGidmrHAy0UkhXIctCstwOR0ZP1uMO2N1d9vj5k64AOv4tIUKU
WTGy3/m7kd2ssB+qUB2utP7HkqpqHKVGz3pv2JtQlNMuV9Cg5FHLg4k/1yR8MdWz
u6fm01poBjI22mhWtKWTOU8nQzIxO2yC/ge/6LKCvbNdjXByqRYyy+oJAdPobi6M
pv3bfXekMBfPQM5Kq+05UM9etIlcLlDESNITASlILnyeNeaZiP5Yh2RsQZUATvLg
krlkiObIKKAz1OhCb7st/Lebf1i7sOEMNl6pV3ET/1pINGjs1BSLXzlt/rlbHgOG
7VQAxF9moArSOO+s0pV2gYL/4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHCJnkho
GpTZROO16amMLGcTQPJxMB8GA1UdIwQYMBaAFA3llsssYMt1fbj0DrhvJHZSwTow
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAzMy81RDAwQUU1MkRE
NEMxMUU5QTZENEJCMURDNEY5QUUwMi9EZVdXeXl4Z3kzVjl1UFFPdUc4a2RsTEJP
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RlV1d5eXhneTNWOXVQUU91RzhrZGxMQk9qQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzUwMzMvNUQwMEFFNTJERDRDMTFFOUE2RDRCQjFEQzRGOUFFMDIvMjlFMzg3MDhC
NkRDMTFGMUFCQUU0NEMzNTkxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4NCMA0GCSqGSIb3DQEBCwUAA4IBAQBPnc4OMT5aocqpZAfPW7ZO
JCK6EGiIJ2uHcK6eF2t2lNBs6KDCuBOEDH7mK18BtcEMtIGR1T1cgcrhAxMaUQNV
yQqw+EF6+6ZWKxBSNfw6VHKO/4tYt5hLSXsj1/ZwHIwRRDY0o3WmFwyjLtPKKUNZ
FMGCZZlSdGVfab87EwlJyv/IMKGG3IICOwkpn8bbrIhHTITZHQ3S9jORZQDEuxlv
lK2FfYCRvdtb5NJ0MRrn711J+SEBN5KxBcOQDbYmIoXWt6rnrGAf4qq9AYcfYZ6P
cctIhQ2hN1DLN6meJ85/S9W3cPW6X4bOpt8d7q8Pn7yboLTilZPDHqRzLaRo6khj
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:38:09 2026 by rpki-client