
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa
File: 31E51BB65FD311EC9AA5DA4EC4F9AE02.roa (raw, json)
Hash identifier: QGxKWKuwU4koWUT3cHCTo7iWv57eqY9PU0NUcULxizU=
Subject key identifier: F7:EC:94:D6:DE:6F:3C:D6:74:EC:D2:7F:BC:D8:11:11:29:E0:6F:16
Certificate issuer: /CN=A9138D62/serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Certificate serial: 04CB
Authority key identifier: 62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:47:44 +0000
ROA not before: Thu 25 Sep 2025 00:47:22 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58697
IP address blocks: 103.15.238.0/23 maxlen: 23
103.242.50.0/24 maxlen: 24
103.242.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138D62, serialNumber=621B81C109E5AA78D829F30A57DA353308254F69
Validity
Not Before: Sep 25 00:47:22 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a43570-93a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:cd:a9:72:a0:30:50:ed:a7:b4:88:2c:41:
29:66:0e:49:b9:62:86:51:0d:bc:6f:b9:63:1b:1c:
72:44:1d:fa:3a:d3:ea:bf:59:5a:f8:7a:55:bb:f1:
ac:5b:ad:27:4a:95:b3:2a:64:a4:58:16:57:a8:ea:
4e:b5:12:f4:1a:c4:72:bd:2e:66:02:4e:d7:c2:0c:
ca:c7:39:cf:41:5f:8d:d8:b8:c2:26:fc:95:65:f7:
35:f1:b5:a0:8b:b7:2e:68:56:4e:2a:a9:db:98:7b:
e8:a8:10:7c:2b:4f:9a:51:54:b7:a9:75:f8:59:e2:
02:63:87:96:16:b1:c0:a2:26:42:86:e7:6b:d8:51:
64:5f:27:af:cc:97:a8:b7:62:9b:4f:49:44:a8:cf:
ce:8d:12:16:8d:61:44:ad:00:b0:12:63:34:e0:0e:
ae:83:f3:41:6f:96:ef:ed:1a:97:e4:e5:8b:ea:75:
ac:06:83:0e:b9:f8:9a:3a:98:f6:9c:2d:19:6d:f2:
33:d3:d9:e1:b8:c8:74:d8:45:49:3a:aa:f7:90:52:
da:9b:05:c6:e1:11:99:1a:91:e3:bb:7d:6a:9c:c1:
6b:6c:b1:68:07:ea:ad:0c:ba:f0:d1:ea:a1:6f:b2:
86:ca:1d:e6:e0:bb:ba:0b:10:9b:75:d7:65:ff:f5:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:94:D6:DE:6F:3C:D6:74:EC:D2:7F:BC:D8:11:11:29:E0:6F:16
X509v3 Authority Key Identifier:
keyid:62:1B:81:C1:09:E5:AA:78:D8:29:F3:0A:57:DA:35:33:08:25:4F:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/YhuBwQnlqnjYKfMKV9o1MwglT2k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YhuBwQnlqnjYKfMKV9o1MwglT2k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138D62/BCB40A585FCF11EC8CF1E07BC4F9AE02/31E51BB65FD311EC9AA5DA4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.15.238.0/23
103.242.50.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:7d:74:16:81:d6:62:df:87:3f:b7:de:9d:b5:32:af:47:38:
7f:00:bd:8e:33:4f:8f:4f:7a:c0:39:f8:20:c7:d7:5e:4f:25:
1d:3f:52:da:13:d7:fa:e8:b7:3a:5a:b8:25:4c:bf:4e:02:e1:
10:f4:5c:23:d7:94:c0:16:c6:4b:3f:a1:2b:b0:de:fe:eb:b0:
60:ed:d5:3d:c9:80:79:cc:78:b6:85:bc:ec:c2:8d:68:24:01:
d0:12:b8:1d:0d:76:b2:0d:3d:11:6b:ff:ba:38:41:bb:22:2e:
6c:81:62:5e:5f:d7:e5:85:c8:33:6a:82:26:3d:9f:30:6b:b1:
3a:89:8e:8f:2e:ba:8c:51:87:d9:1e:c7:b9:95:63:3b:5c:46:
b0:2a:ea:90:db:37:7b:a9:a1:97:9d:5e:18:33:33:bf:9d:24:
54:9a:80:3b:1e:5f:f8:4a:5b:3a:95:96:30:99:54:5b:d2:37:
39:2d:58:21:be:21:b2:30:46:f6:5a:0c:62:dd:e3:c7:84:16:
5d:c0:85:75:95:79:6d:8f:d8:c8:18:10:71:da:a3:5f:a7:16:
a4:75:c0:6d:dd:24:fa:a8:88:6b:fd:dd:a2:e9:5b:43:fe:5c:
20:8f:d0:e7:7a:c5:e2:3e:a7:1f:ae:8a:0a:ab:30:3f:50:76:
28:b6:62:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:43 2026 by rpki-client