
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa
File: 7D20FF46F3E511EBB8BBF720C4F9AE02.roa (raw, json)
Hash identifier: V+XheScePk1AavDQ0HXjp7Jys0+s+yjGu/TYBAzZvTM=
Subject key identifier: CB:61:5C:55:7C:EC:A8:67:4E:C5:93:8A:F9:7C:A1:EB:E8:3C:18:B6
Certificate issuer: /CN=A9151E54/serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Certificate serial: 05F8
Authority key identifier: 27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa
Signing time: Mon 04 May 2026 23:29:01 +0000
ROA not before: Mon 04 May 2026 23:29:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136500
IP address blocks: 103.90.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151E54, serialNumber=27E38BBEB8E2DB271FCFA17C1347DE6B06834460
Validity
Not Before: May 4 23:29:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f92bbd-0e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:3e:89:8b:02:98:d2:25:b3:b3:10:84:93:
36:bf:88:74:2c:0e:ba:bf:0a:03:3e:b5:17:ee:05:
00:6c:28:74:3b:06:62:23:83:97:f8:24:14:eb:8d:
7f:ce:48:73:2f:5d:d9:45:25:02:1e:a2:ce:20:19:
46:d3:43:ad:96:5e:aa:e1:13:ea:ed:69:ca:03:70:
0c:52:ff:09:c7:31:4a:71:99:4b:6b:6a:29:55:86:
1c:4a:d2:24:9b:ac:d4:42:f5:97:f6:fe:0d:e2:fa:
c1:78:22:73:f7:00:48:b5:7f:1e:ae:98:17:93:c9:
a9:68:59:5b:03:f3:03:99:59:39:67:7d:a0:c3:eb:
84:69:c6:97:03:3d:53:37:2d:ce:6e:e4:6f:29:ae:
42:41:1a:a6:fe:78:0c:6b:4f:b0:1a:05:d8:f0:d4:
01:b8:b6:81:4f:c1:a3:e1:4b:f3:8f:1c:5a:5c:eb:
cb:5e:83:ae:4b:69:93:ca:cb:f6:76:6d:78:09:cc:
4b:07:46:48:7d:ae:86:d8:73:4f:2d:1d:0f:ca:f8:
51:cb:b3:25:ae:3f:5c:57:1c:2e:dc:5a:1d:08:18:
af:74:e4:a8:20:6f:43:c3:41:84:33:d7:ed:a5:5a:
46:0f:6c:66:79:0d:16:e7:73:5a:1a:0c:4b:b5:c1:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:5C:55:7C:EC:A8:67:4E:C5:93:8A:F9:7C:A1:EB:E8:3C:18:B6
X509v3 Authority Key Identifier:
keyid:27:E3:8B:BE:B8:E2:DB:27:1F:CF:A1:7C:13:47:DE:6B:06:83:44:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/J-OLvrji2ycfz6F8E0feawaDRGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-OLvrji2ycfz6F8E0feawaDRGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151E54/AFD17A36F3E211EBAACEA71DC4F9AE02/7D20FF46F3E511EBB8BBF720C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.90.174.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:14:5d:ed:7c:94:6f:be:ba:97:3c:30:9c:32:1c:90:fb:1c:
f7:22:85:16:28:d6:e0:7e:56:db:20:1f:c7:4a:90:c4:62:5c:
51:a5:a7:7d:36:af:8e:4b:48:c7:32:ef:0c:2a:39:57:25:eb:
a4:05:a8:ea:8b:7b:08:e6:4f:88:1c:05:38:cc:c5:ce:80:13:
79:ea:2b:bf:00:27:6a:10:cc:02:bd:d9:92:95:1a:0d:51:64:
3c:87:ff:15:9e:52:39:0d:25:ce:30:5d:dc:30:b6:4a:98:b7:
16:da:88:ac:1e:af:75:64:c4:b6:e9:13:0f:e8:7a:06:28:2e:
48:6f:5a:aa:c4:5d:d2:31:e0:a1:20:d9:72:17:d8:12:27:d8:
00:05:b7:30:63:04:60:32:1c:6e:34:16:2b:de:2c:af:3c:87:
93:e8:ab:01:cc:18:8e:58:e5:2a:6b:03:1a:79:dc:95:60:01:
7e:0f:88:9d:d1:57:0f:7d:f1:33:be:75:4d:22:9b:2f:4b:bf:
59:e2:01:ae:f0:d9:a7:e2:1a:09:4a:6a:51:7f:a3:d1:3d:9c:
7c:7d:09:80:30:6c:b0:b4:30:6f:b7:71:90:6b:3a:1b:e8:06:
08:1e:03:87:2f:72:99:63:78:e2:2f:79:d8:34:94:2b:bf:7a:
bd:d5:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:11 2026 by rpki-client