
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa
File: B37A1AB4E1A811EFBC05A21AC4F9AE02.roa (raw, json)
Hash identifier: SpuS0e+sM5PsHPKj4v1GClPQzp3GN/3qD476+vEdeyQ=
Subject key identifier: EB:ED:0C:0D:27:C8:BD:98:B8:98:12:60:E4:2E:62:F3:93:40:A7:0C
Certificate issuer: /CN=A9141A6A/serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Certificate serial: 0936
Authority key identifier: 6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa
Signing time: Mon 04 May 2026 20:25:40 +0000
ROA not before: Mon 04 May 2026 20:25:40 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 140900
IP address blocks: 103.153.38.0/24 maxlen: 24
103.153.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2358 (0x936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141A6A, serialNumber=6A4A074EE5BE7F3BA850B3BA214296B65B1A2DAD
Validity
Not Before: May 4 20:25:40 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69f900c4-ced1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:aa:f1:2a:8f:f2:9c:57:ae:36:02:7e:c8:
d1:8f:70:16:f5:b8:6e:f7:cf:d9:a1:bc:09:66:df:
95:87:b9:20:37:77:4f:67:39:9b:f8:50:ed:13:1c:
c4:b8:bb:f4:22:a4:9c:4b:1e:22:21:7d:db:99:a7:
31:1c:a7:d3:9f:7b:1e:2c:e1:7c:24:89:44:fc:fd:
28:fb:fd:3e:bf:70:c0:c9:ac:be:db:a7:49:92:1a:
c7:06:da:11:01:3b:f0:bd:ab:b3:19:c2:85:b8:2c:
4e:74:77:c6:11:0a:bb:ba:a5:91:d6:c0:9e:be:0e:
0f:56:4f:88:22:c5:42:8b:31:67:c8:50:a0:74:24:
cf:ab:98:b2:df:54:0b:9c:bf:64:f5:e1:e3:bd:da:
6b:2d:a0:fd:e2:44:0a:b5:11:53:39:34:d8:b4:11:
66:dc:8e:b4:39:7a:a6:56:ef:ce:90:f3:1d:e0:02:
88:f1:e7:05:0d:9f:1f:b6:ea:f0:a1:1b:19:1f:57:
bd:26:9a:ae:3e:16:f7:48:6e:52:5d:a5:d6:72:6c:
c7:be:fd:fc:cf:f2:20:bb:6f:d0:05:ca:0e:ae:8c:
70:50:77:93:c3:4e:b9:23:21:93:4f:f6:3c:46:c1:
31:19:11:d6:a3:7a:cc:5f:44:9c:16:53:2d:05:5e:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:ED:0C:0D:27:C8:BD:98:B8:98:12:60:E4:2E:62:F3:93:40:A7:0C
X509v3 Authority Key Identifier:
keyid:6A:4A:07:4E:E5:BE:7F:3B:A8:50:B3:BA:21:42:96:B6:5B:1A:2D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/akoHTuW-fzuoULO6IUKWtlsaLa0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akoHTuW-fzuoULO6IUKWtlsaLa0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141A6A/62BE0AC6CE9E11EA8854A150C4F9AE02/B37A1AB4E1A811EFBC05A21AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.38.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:5c:89:82:19:37:41:55:8e:32:1d:77:d1:cc:db:46:43:27:
1e:f1:55:82:33:96:84:aa:25:85:68:40:49:fd:a5:a4:65:f1:
b8:df:34:cd:fe:3c:64:79:ec:e8:b6:f8:6a:de:b7:70:65:9b:
ef:57:cb:74:7e:cb:50:6b:ea:0a:28:5e:7c:c0:db:d2:0f:e2:
22:00:86:ed:07:6d:db:3b:ac:04:cf:57:f3:1a:63:b5:65:ec:
39:61:0b:98:c2:f4:3a:97:10:05:cb:22:65:a4:b5:b0:30:8c:
38:ba:1f:25:46:de:e7:6a:24:0e:20:cf:43:e8:09:29:91:24:
e9:bf:2f:19:23:37:ed:e3:71:55:b5:a5:b8:7c:91:b6:4d:22:
f1:44:0b:8d:e2:12:7c:57:48:7f:6d:21:3f:86:f0:a7:b2:ab:
fc:90:b7:b9:23:da:35:fc:2c:92:cf:e4:22:c3:57:5d:eb:37:
a8:70:31:2a:c4:3c:2c:62:db:7b:44:57:11:97:2b:a3:50:c3:
d8:72:ff:3f:c1:d8:4d:ef:78:13:fd:f4:c0:53:ee:c5:b9:8a:
7e:db:08:97:9f:b2:15:32:00:64:b5:8d:b8:8a:5d:ed:59:ac:
07:9c:88:1b:b7:27:19:8d:59:69:b0:13:4a:ca:71:fb:02:76:
ea:59:87:b4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDFBNkExMTAvBgNVBAUTKDZBNEEwNzRFRTVCRTdGM0JBODUwQjNCQTIxNDI5NkI2
NUIxQTJEQUQwHhcNMjYwNTA0MjAyNTQwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY5MDBjNC1jZWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArjmq8SqP8pxXrjYCfsjRj3AW9bhu98/ZobwJZt+Vh7kgN3dPZzmb+FDtExzE
uLv0IqScSx4iIX3bmacxHKfTn3seLOF8JIlE/P0o+/0+v3DAyay+26dJkhrHBtoR
ATvwvauzGcKFuCxOdHfGEQq7uqWR1sCevg4PVk+IIsVCizFnyFCgdCTPq5iy31QL
nL9k9eHjvdprLaD94kQKtRFTOTTYtBFm3I60OXqmVu/OkPMd4AKI8ecFDZ8fturw
oRsZH1e9JpquPhb3SG5SXaXWcmzHvv38z/Igu2/QBcoOroxwUHeTw065IyGTT/Y8
RsExGRHWo3rMX0ScFlMtBV5HRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOvtDA0n
yL2YuJgSYOQuYvOTQKcMMB8GA1UdIwQYMBaAFGpKB07lvn87qFCzuiFClrZbGi2t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUE2QS82MkJFMEFDNkNF
OUUxMUVBODg1NEExNTBDNEY5QUUwMi9ha29IVHVXLWZ6dW9VTE82SVVLV3Rsc2FM
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Frb0hUdVctZnp1b1VMTzZJVUtXdGxzYUxhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDFBNkEvNjJCRTBBQzZDRTlFMTFFQTg4NTRBMTUwQzRGOUFFMDIvQjM3QTFBQjRF
MUE4MTFFRkJDMDVBMjFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5kmMA0GCSqGSIb3DQEBCwUAA4IBAQCfXImCGTdBVY4yHXfRzNtG
Qyce8VWCM5aEqiWFaEBJ/aWkZfG43zTN/jxkeezotvhq3rdwZZvvV8t0fstQa+oK
KF58wNvSD+IiAIbtB23bO6wEz1fzGmO1Zew5YQuYwvQ6lxAFyyJlpLWwMIw4uh8l
Rt7naiQOIM9D6AkpkSTpvy8ZIzft43FVtaW4fJG2TSLxRAuN4hJ8V0h/bSE/hvCn
sqv8kLe5I9o1/CySz+Qiw1dd6zeocDEqxDwsYtt7RFcRlyujUMPYcv8/wdhN73gT
/fTAU+7FuYp+2wiXn7IVMgBktY24il3tWawHnIgbtycZjVlpsBNKynH7AnbqWYe0
-----END CERTIFICATE-----
Generated at Wed May 13 11:43:59 2026 by rpki-client