
$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/8109A2E65EA111EA879CA66DC4F9AE02.roa
File: 8109A2E65EA111EA879CA66DC4F9AE02.roa (raw, json)
Hash identifier: 2j4qtY2NB4o4xIh+eTu9IqpJ1nrHSsrqDfHSIXATQH0=
Subject key identifier: 22:39:84:52:7C:59:4A:3D:CA:09:1B:A8:16:23:23:DB:CA:41:A2:87
Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Certificate serial: 0B0E
Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/8109A2E65EA111EA879CA66DC4F9AE02.roa
Signing time: Mon 02 Mar 2026 19:24:58 +0000
ROA not before: Mon 02 Mar 2026 19:24:57 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135124
IP address blocks: 103.135.172.0/22 maxlen: 22
103.135.172.0/23 maxlen: 23
103.135.172.0/24 maxlen: 24
103.135.173.0/24 maxlen: 24
103.135.174.0/23 maxlen: 23
103.135.174.0/24 maxlen: 24
103.135.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 19:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2830 (0xb0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Validity
Not Before: Mar 2 19:24:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a5e409-025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:60:78:df:1e:18:3c:4c:ef:a5:f2:04:df:
e7:8b:6f:54:2f:05:3e:0e:0a:be:9e:0e:dc:5b:47:
26:cc:bb:a2:10:ca:cf:0c:9f:7f:a9:a8:bd:01:47:
56:d0:cc:e3:00:77:bc:cf:f1:5e:f4:08:fb:fb:5e:
87:76:e5:ef:ee:21:ae:9c:fb:cc:f1:7a:62:a0:3f:
8a:d5:7e:d5:80:92:74:29:95:c6:d1:85:d5:57:15:
92:4f:bc:c9:e9:12:62:2d:51:0e:74:e6:48:ff:2d:
6e:0a:25:c1:9d:b7:0c:e7:82:bc:49:f8:98:cb:67:
c8:ee:54:92:26:f5:ff:89:92:a1:dc:e9:49:83:7c:
54:e3:7f:e4:01:87:0b:4a:88:b4:7f:5b:04:a2:0a:
6a:f3:c3:ca:9c:4f:70:be:8d:4e:84:05:f2:65:48:
f0:b3:71:ed:cd:9e:fc:45:27:8e:3f:bb:c5:d8:02:
73:f5:a0:40:6d:26:50:50:91:0f:38:88:2c:46:8c:
1f:ca:54:49:c0:6f:68:1e:d9:11:17:68:43:75:05:
53:25:85:59:f5:cc:25:a0:e1:e6:65:3b:04:3b:d5:
ef:35:ef:2f:eb:34:50:dc:c8:0d:5e:87:80:d2:38:
8f:ac:d9:e1:2a:6c:13:e3:6a:9a:3e:5b:0f:c1:6c:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:39:84:52:7C:59:4A:3D:CA:09:1B:A8:16:23:23:DB:CA:41:A2:87
X509v3 Authority Key Identifier:
keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/8109A2E65EA111EA879CA66DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:01:62:e2:7f:6c:3e:3f:a3:da:bf:8f:be:56:9c:7e:67:3f:
c3:58:c8:2e:25:99:39:99:ab:73:bc:29:ce:0a:5a:68:bb:2b:
51:bd:c3:91:97:fd:60:a9:6b:b6:00:02:8f:c9:62:dc:aa:0d:
af:aa:7d:07:51:0f:23:4d:b6:7f:6f:4f:0f:d2:66:23:af:3a:
4f:f2:d7:e1:37:8a:be:cf:8c:4b:1c:f0:9a:a2:9c:48:15:e9:
95:de:6f:b2:00:9d:06:a8:6f:c2:89:63:4d:9d:69:98:0b:e7:
4d:c6:c2:92:26:62:fe:52:e2:fd:f1:c6:7c:ae:09:5d:8b:39:
13:48:9a:68:9d:72:e9:7a:64:9e:26:8c:ec:35:93:bd:36:71:
10:d1:1b:bd:c1:5f:b7:b2:67:94:87:1d:0c:ef:87:2c:94:73:
3b:69:a1:0c:89:8a:5f:46:87:6c:58:5b:b5:7b:6c:30:0a:42:
05:87:61:38:6b:d2:24:51:fe:2d:8c:4e:50:4f:42:16:c5:7a:
da:a4:14:e5:93:4e:62:5a:6f:61:d1:d6:89:6a:45:92:5e:9e:
0b:92:74:10:23:4f:21:61:f1:93:10:db:23:7f:86:37:b5:86:
7c:18:ab:6c:31:fa:f0:cb:c1:36:d6:38:92:ce:68:34:13:10:
55:f2:c2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:21:24 2026 by rpki-client