
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa
File: 485B32A8607B11EFB27C6C5DC4F9AE02.roa (raw, json)
Hash identifier: RVbj01Du1WKFasCmwg1jqLFxFljVV487kT8U/4ZCdZY=
Subject key identifier: 04:9E:F5:E5:31:12:04:1C:FB:F9:28:4C:C3:C6:11:AC:F7:FF:DF:B3
Certificate issuer: /CN=A9143B0A/serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Certificate serial: 0188
Authority key identifier: 09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa
Signing time: Thu 03 Sep 2026 04:56:10 +0000
ROA not before: Thu 03 Sep 2026 04:56:10 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 136812
IP address blocks: 103.121.232.0/24 maxlen: 24
103.121.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B0A, serialNumber=099506EC987C8B19405853B08C718B5BBE4AC692
Validity
Not Before: Sep 3 04:56:10 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98fdea-0ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:76:68:41:38:2c:8a:13:6f:1e:53:d7:39:
66:2e:a6:59:45:8a:f5:42:5d:6e:32:2d:3e:0a:24:
77:75:26:8d:e2:4a:4c:8f:67:5e:83:e3:80:11:b9:
ce:c2:66:ea:89:0f:a8:13:df:1e:54:6b:e8:fa:dc:
db:ff:1c:f0:06:67:08:ae:a6:36:69:4a:50:68:30:
43:1b:a9:89:79:e5:1d:fc:85:ee:fe:36:0b:39:a3:
9a:c4:1d:0c:36:93:d7:b5:92:e9:a4:63:8b:aa:69:
54:f4:ef:3b:d5:42:2f:73:ad:67:61:eb:6e:fe:e4:
89:7a:3d:6f:6e:42:16:18:89:81:4e:a5:6d:23:56:
e0:17:4e:fb:d6:5b:64:ef:3c:1b:45:15:70:50:8c:
de:4f:4f:d1:eb:56:63:bd:a6:af:88:cc:36:6e:dc:
ca:2c:33:94:7d:53:4b:0c:9c:70:8a:99:6f:2c:8b:
6d:60:f9:c1:b3:55:44:b6:08:82:17:a0:78:17:3a:
01:09:d7:99:ff:a6:01:ac:c2:3c:60:80:c8:30:17:
a0:02:86:a9:91:8f:f3:ce:22:03:8b:64:82:d6:d5:
b5:b9:68:9a:3c:b3:40:0d:92:08:8c:72:19:f1:5e:
fb:12:8b:6a:45:16:1f:b8:47:b8:e4:ea:2f:41:e5:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:F5:E5:31:12:04:1C:FB:F9:28:4C:C3:C6:11:AC:F7:FF:DF:B3
X509v3 Authority Key Identifier:
keyid:09:95:06:EC:98:7C:8B:19:40:58:53:B0:8C:71:8B:5B:BE:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/CZUG7Jh8ixlAWFOwjHGLW75KxpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZUG7Jh8ixlAWFOwjHGLW75KxpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B0A/D5DB6DF6607A11EF869AA65CC4F9AE02/485B32A8607B11EFB27C6C5DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.232.0/23
Signature Algorithm: sha256WithRSAEncryption
33:27:88:ac:9d:f5:f4:42:01:84:b3:ba:c9:3a:0e:b0:5d:b5:
38:87:d1:4b:af:cc:73:c2:8c:3d:33:d4:1d:f2:89:1e:97:9c:
87:42:fc:66:5e:8b:dd:49:3d:43:5d:2b:1f:e5:49:4d:ac:3d:
7a:a3:ee:62:16:bf:d4:23:7d:04:e7:5d:7d:99:61:08:1c:64:
44:ad:7f:03:f3:51:61:80:00:ee:05:5e:3c:4c:1f:d3:a7:d9:
d7:ec:dd:cd:d9:cd:93:8d:e7:41:17:6e:b1:6d:ae:fe:c1:bf:
02:ee:9f:f8:f5:37:05:c1:c7:fe:75:ca:9b:1e:87:ca:71:b1:
29:05:ea:77:a8:24:0a:66:74:a1:4a:e9:a7:83:ce:e7:22:bf:
1a:22:15:54:20:ed:a9:47:2b:cd:48:ba:04:80:ca:ea:32:e9:
d2:29:1d:f9:8f:66:65:c9:40:20:61:ca:ec:ba:05:eb:0c:a6:
c8:c6:5f:18:08:0a:bf:06:09:f6:09:35:0c:61:a8:55:7e:6b:
5e:a9:30:f3:32:7d:a1:fd:02:a5:28:7b:11:2a:64:5a:e4:2d:
91:49:44:74:45:88:f9:53:35:a5:6b:11:ed:8f:f8:77:62:ab:
aa:98:ae:47:79:13:a7:7e:4d:3e:c8:61:cf:ea:e7:b3:30:05:
e5:64:e5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:15:34 2026 by rpki-client