
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1818C91A5C1611F0AEC3F02BC4F9AE02.roa
File: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (raw, json)
Hash identifier: Tk8uY2cStt4p4GExDz8M5IvVPgQ0LOtVOZ04RW6Ye9g=
Subject key identifier: B7:B5:B8:D7:56:3D:FD:5D:6B:7B:A1:09:C6:AD:A7:CC:9B:60:B9:F1
Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Certificate serial: 274E
Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1818C91A5C1611F0AEC3F02BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:13:25 +0000
ROA not before: Tue 08 Jul 2025 16:10:41 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137812
IP address blocks: 103.139.234.0/24 maxlen: 24
2400:eb80:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:38:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10062 (0x274e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4
Validity
Not Before: Jul 8 16:10:41 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a42d65-6b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:d8:d7:01:59:cf:98:90:3d:82:19:5f:4f:
39:fa:de:45:2d:7e:13:43:69:75:b1:eb:b1:6c:8b:
4e:b3:ce:f6:c3:3d:cc:2f:84:36:2c:7f:85:48:64:
7c:f9:9b:99:c2:9c:91:df:bf:b1:ab:40:28:79:ca:
17:66:39:cc:56:8e:8d:87:f6:95:07:13:59:9b:23:
d4:6b:d5:c6:d5:3a:7f:ea:57:b3:60:c3:cf:8b:9f:
8f:c1:af:5d:29:e5:b7:1f:55:b4:e4:d5:40:9d:18:
f9:15:31:82:82:e2:8a:f1:33:58:e2:46:c4:db:e7:
f4:3a:97:bd:af:7b:8f:4e:8a:3f:8c:11:8d:11:f7:
40:ff:05:68:6a:19:aa:bd:2e:dd:e0:8a:f3:20:2b:
61:5b:64:f3:78:fe:e9:8b:d3:95:a6:cd:84:8f:4c:
06:6d:3c:e1:1e:21:69:79:c9:5c:2d:1a:ef:7d:f8:
b3:1a:34:1a:80:b7:8e:ca:7c:77:a2:fc:98:60:ca:
14:43:10:12:c9:05:2a:60:54:f8:81:7d:91:bb:f2:
16:4c:48:e3:f2:bf:5c:fc:f1:25:2a:d4:15:cc:25:
2e:e3:84:42:76:e4:bc:8e:42:94:0b:21:57:6d:44:
94:84:8b:c1:ba:18:c5:46:8a:12:61:86:99:b8:04:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B5:B8:D7:56:3D:FD:5D:6B:7B:A1:09:C6:AD:A7:CC:9B:60:B9:F1
X509v3 Authority Key Identifier:
keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1818C91A5C1611F0AEC3F02BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.139.234.0/24
IPv6:
2400:eb80:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
b4:48:1e:9a:62:14:2f:eb:36:c2:19:f1:41:ef:b1:a0:79:a5:
7b:fa:5f:a1:6a:ce:99:7d:18:69:bb:ae:a4:05:9a:3e:f9:74:
73:55:9f:d0:92:06:14:e7:74:e2:1b:34:b9:49:c3:31:63:51:
8e:84:ab:6e:3c:69:17:2e:2c:c4:9a:4d:d7:40:e5:d9:42:54:
39:63:b9:62:ab:fb:12:62:ea:25:3e:43:75:39:39:e1:0c:83:
8a:06:33:af:ea:6c:ce:fd:95:69:7d:c7:52:c7:54:51:fb:e3:
c2:3c:3c:3a:90:75:8e:7a:6f:c5:53:07:d2:3f:fa:d1:4f:c5:
12:b1:aa:68:84:d1:c1:e2:5c:d8:6b:a1:4b:01:b2:12:c9:21:
1b:7a:d1:7a:46:2d:96:59:00:12:e1:92:a9:bb:58:ed:3f:65:
73:e8:48:d2:78:73:c2:1b:d3:dc:67:70:9a:09:47:82:fc:dc:
6e:ee:d0:b6:64:a9:ee:2c:8d:a7:0c:b5:6b:5e:c3:d3:df:8e:
5f:68:cd:70:df:14:c4:15:9f:57:b8:77:ba:0a:35:96:4e:d9:
31:ea:7a:65:f8:2f:71:1e:4d:f4:6c:23:51:95:82:b3:20:af:
df:b6:da:b1:6c:cb:2a:0b:5e:ef:34:77:6a:6a:8c:6f:dc:55:
4b:6f:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:16 2026 by rpki-client