
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa
File: 9A8603FC93ED11ED931AB73CC4F9AE02.roa (raw, json)
Hash identifier: 0DeWF7+HwO3LjU/OQaQvfiaVJ0cfQ/r8fgz/DfnMnww=
Subject key identifier: 76:A8:1F:23:15:99:3D:54:0F:A8:AF:CB:EA:3D:F7:A9:60:91:4D:D2
Certificate issuer: /CN=A9152D08/serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Certificate serial: 0D1E
Authority key identifier: 34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa
Signing time: Fri 20 Mar 2026 19:23:55 +0000
ROA not before: Fri 20 Mar 2026 19:23:55 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 201133
IP address blocks: 103.155.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3358 (0xd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152D08, serialNumber=34DC20129EAD6F41A7CA2D99C9BD3E7E6033CB88
Validity
Not Before: Mar 20 19:23:55 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69bd9ecb-510b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:32:40:44:1c:9f:94:9e:66:f3:aa:02:d7:
e8:a1:db:64:c5:cf:13:b3:15:b3:24:8c:e1:02:04:
73:d0:49:42:bf:3d:17:40:1f:1a:c2:bf:c2:39:72:
7e:ed:49:65:ea:aa:c3:1c:43:f9:a3:6d:43:eb:92:
8f:c6:f4:97:3e:94:c5:cb:bb:57:e1:7d:e5:e1:e7:
be:35:a8:b0:e1:0c:1d:ed:3b:5b:c5:bc:c3:b0:d0:
41:9f:5b:48:f9:21:ec:d3:ab:e8:51:2c:4e:10:0a:
c7:61:54:ec:e1:1c:f1:e1:af:05:30:6a:94:ce:dc:
e8:52:2e:94:0a:5b:ae:54:ba:88:41:d7:33:65:3c:
1b:ac:3a:57:22:66:71:c0:62:dc:23:81:0c:13:88:
a8:45:27:f4:54:74:a5:ca:4d:32:08:ea:e1:b1:12:
af:20:95:14:39:30:40:01:5b:64:a3:3a:81:53:63:
80:42:16:27:63:42:92:7d:ae:f2:9c:73:22:49:bb:
a8:d1:92:59:5f:58:82:ad:e6:0e:23:f1:f2:c4:a3:
3f:0d:17:ca:95:da:b2:da:8d:0b:24:13:29:95:40:
b9:69:76:e6:60:84:7a:0c:a4:a6:3e:67:b1:6b:24:
a8:51:62:25:f8:fa:32:5f:b4:b4:7d:88:83:b6:2a:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A8:1F:23:15:99:3D:54:0F:A8:AF:CB:EA:3D:F7:A9:60:91:4D:D2
X509v3 Authority Key Identifier:
keyid:34:DC:20:12:9E:AD:6F:41:A7:CA:2D:99:C9:BD:3E:7E:60:33:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NNwgEp6tb0Gnyi2Zyb0-fmAzy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D08/F9C333921D8711EAA9C5B170C4F9AE02/9A8603FC93ED11ED931AB73CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.92.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ef:f6:d4:8e:df:09:99:d8:f8:c2:79:e4:e6:8a:bf:3e:52:
e3:69:04:14:ce:a3:cc:aa:a1:bc:06:69:b5:1c:99:3d:7c:99:
a7:29:0d:bd:d1:ee:7a:44:92:2d:6e:e1:2a:e2:7b:2c:da:dc:
83:1d:ea:ed:27:ca:1e:49:7a:5b:0e:ee:bf:17:24:6b:cf:5c:
e5:08:13:39:b1:fc:cc:48:73:83:14:c8:9f:7b:09:28:8c:7a:
3a:6e:66:dd:87:33:60:cc:70:b8:e5:be:7b:28:0b:a0:37:98:
55:3f:49:4e:65:5b:a9:39:1b:9e:1f:13:ad:7a:82:2e:fe:45:
56:87:b2:ab:75:00:74:01:58:50:ad:27:56:a6:eb:36:36:fa:
ac:78:c4:05:9d:5a:05:e5:e3:7f:af:65:ce:3a:76:48:f7:4c:
ad:32:fa:36:c5:60:21:fc:99:14:44:08:bf:73:45:9d:10:d3:
cd:9b:5e:6c:ba:77:97:0d:d8:28:07:d3:ef:78:a5:1e:cd:62:
6e:48:c0:61:a5:32:26:9d:48:70:35:54:a8:89:fe:d8:5a:28:
23:b8:ef:b3:11:f8:68:12:e9:00:c7:ea:e1:1b:00:ae:f3:90:
b0:4e:cd:a7:5a:60:4d:e5:6e:cb:6b:ca:22:d8:81:f4:2f:34:
ff:e9:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:28 2026 by rpki-client