
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/D3EE2024F42211EA8FE7AE53C4F9AE02.roa
File: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (raw, json)
Hash identifier: Sm8cDlO+Bn4wmHjiuhnBl2Ebz4v6i98Fbv6/A7UD98o=
Subject key identifier: 7B:A4:34:F1:FE:AC:72:67:FD:CB:AD:43:4C:DD:FD:26:A4:AA:39:9C
Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
Certificate serial: 0872
Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/D3EE2024F42211EA8FE7AE53C4F9AE02.roa
Signing time: Tue 24 Mar 2026 21:27:22 +0000
ROA not before: Tue 24 Mar 2026 21:27:22 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135299
IP address blocks: 103.112.146.0/24 maxlen: 24
103.211.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl
rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 20:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00
Validity
Not Before: Mar 24 21:27:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c301b9-c2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:45:c1:db:ca:12:8f:c5:ac:36:f6:e7:ae:c5:
18:70:3a:17:8e:70:5e:4c:c7:b1:83:7f:7b:49:63:
33:88:f9:91:47:eb:7f:f0:b0:04:da:2b:3c:52:86:
64:16:31:f6:f2:78:07:3d:95:e6:08:57:f5:f2:80:
98:ee:be:92:19:3b:ed:eb:13:ab:34:13:85:97:95:
6b:58:21:5a:ae:55:e5:bf:cb:85:c0:79:71:58:7b:
06:e1:e5:ae:0b:df:41:00:71:3a:dc:5f:65:e1:94:
b1:5c:ac:1c:14:d4:2f:4f:69:45:ca:03:da:c3:de:
15:8a:65:f7:6a:ce:4a:8d:c1:cf:94:11:1e:90:09:
f2:62:58:74:a0:28:5a:a5:3b:7f:3b:9e:bc:02:93:
3e:2f:e1:88:df:db:95:ec:e2:19:95:94:1d:9d:2f:
92:c8:38:3d:32:76:8e:81:f1:e2:4a:da:ce:99:cd:
24:44:a0:ce:82:31:34:04:bb:d3:e8:03:45:7b:d1:
36:df:c7:c5:ac:62:62:4c:ef:31:eb:fd:37:a9:4f:
f6:8e:17:cd:5c:a3:f5:58:2b:6c:7a:7c:c1:51:fc:
05:4f:3c:bd:b0:60:7b:f1:0a:e6:85:f9:42:dc:96:
eb:2b:01:6c:b4:b7:5d:2b:d3:d6:52:bd:d2:de:4c:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:34:F1:FE:AC:72:67:FD:CB:AD:43:4C:DD:FD:26:A4:AA:39:9C
X509v3 Authority Key Identifier:
keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/D3EE2024F42211EA8FE7AE53C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.146.0/24
103.211.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5c:ea:3d:77:9f:be:c4:5b:c5:18:28:01:dc:f3:c5:0d:47:
df:33:1c:bb:d4:8d:85:39:eb:e7:68:7d:e1:01:c0:5e:31:76:
9b:2e:cf:20:ec:9d:7d:f3:a1:f3:5a:fb:58:4c:47:85:44:1b:
cc:d2:f4:ec:45:ac:f6:a1:05:af:82:e6:3f:14:37:f1:f4:8d:
09:74:04:01:af:29:b1:ba:ab:f7:9f:42:8c:82:98:fc:f4:a3:
12:52:b5:dd:91:35:c8:5c:4b:38:f7:a5:68:0b:39:0b:26:98:
73:7c:cd:40:0b:3c:a9:69:15:a0:a5:65:87:13:c4:be:0e:ac:
c9:f1:a7:ad:c7:93:07:0c:15:97:77:92:d0:9b:68:07:5f:eb:
58:72:33:a8:13:6b:a4:56:19:6a:69:58:11:a7:7f:94:52:f8:
0d:22:92:22:5e:53:a4:11:40:ef:3d:b8:65:71:42:d0:50:a8:
fd:46:4a:35:35:fa:43:38:18:c3:c2:41:60:26:fd:3d:aa:22:
da:28:cc:0d:a8:4a:2e:4a:44:23:04:3b:0c:7d:23:b3:fe:13:
46:5e:8b:a2:fc:35:ed:33:55:df:91:2f:f3:05:22:28:c0:a5:
55:28:ec:e9:ca:73:00:a1:7b:c6:24:8c:5a:42:0e:79:6d:0f:
ef:de:d9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:09:15 2026 by rpki-client