
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/B71C4F80253711EFA1D2A943C4F9AE02.roa
File: B71C4F80253711EFA1D2A943C4F9AE02.roa (raw, json)
Hash identifier: lrHzUZJC1ea5UuKJEMRgND61h03DeLygnqAeiOXEI94=
Subject key identifier: DC:CB:79:62:CE:E8:60:EB:3C:B8:90:EF:DF:C8:3B:F6:01:FF:65:0F
Certificate issuer: /CN=A9157450/serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Certificate serial: 016D
Authority key identifier: 81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/B71C4F80253711EFA1D2A943C4F9AE02.roa
Signing time: Tue 05 May 2026 05:36:56 +0000
ROA not before: Tue 05 May 2026 05:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45152
IP address blocks: 103.9.56.0/22 maxlen: 22
103.9.56.0/24 maxlen: 24
103.9.57.0/24 maxlen: 24
103.9.58.0/24 maxlen: 24
103.9.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157450, serialNumber=81A0CF9CE9AAA990ED1AFE8A830A707874F9AABE
Validity
Not Before: May 5 05:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f981f8-5eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:19:25:96:73:df:61:63:b0:2f:fb:72:60:
f8:df:33:9b:7e:94:67:c6:db:a9:a0:22:60:54:78:
ed:b1:9a:58:a2:65:2e:af:67:08:af:12:0e:81:3f:
0a:ab:47:a0:33:a0:35:77:3b:65:84:91:84:8d:23:
6c:bb:e6:f8:f2:ec:e6:87:39:cd:f9:f9:2c:c5:88:
57:cc:d5:23:d1:cb:e6:83:78:92:7c:ac:44:04:e1:
d4:83:eb:0d:02:04:b1:fb:fb:cc:dc:4d:aa:d4:b4:
0a:62:41:05:67:ae:02:aa:c2:af:d3:fc:08:46:ae:
e6:1b:39:c3:79:13:39:26:c6:93:a9:03:3c:80:39:
60:75:02:9a:ab:c4:5a:df:f2:df:91:42:11:05:4c:
3c:e1:eb:fe:b2:25:91:de:5a:4a:c6:a7:b3:2d:0a:
0e:ad:11:e9:2e:85:42:c1:f0:70:a8:df:9c:79:bb:
f4:a7:92:8d:33:23:cd:88:6a:09:ce:07:65:4b:8e:
a4:22:23:96:58:17:5c:2a:f7:3b:cf:09:42:d8:94:
11:1e:d7:1a:aa:86:d1:55:a9:9f:9c:09:58:aa:d4:
cc:3d:d6:9f:c4:48:2d:ac:3a:b4:40:12:7c:3b:bc:
67:19:68:ee:59:94:64:d8:e7:54:53:8c:5e:9d:9c:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CB:79:62:CE:E8:60:EB:3C:B8:90:EF:DF:C8:3B:F6:01:FF:65:0F
X509v3 Authority Key Identifier:
keyid:81:A0:CF:9C:E9:AA:A9:90:ED:1A:FE:8A:83:0A:70:78:74:F9:AA:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/gaDPnOmqqZDtGv6KgwpweHT5qr4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaDPnOmqqZDtGv6KgwpweHT5qr4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157450/82D9BA06253611EF9A1CEF23C4F9AE02/B71C4F80253711EFA1D2A943C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.56.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:d9:1d:c8:94:76:22:95:de:95:2f:ae:60:b7:2e:dd:a0:91:
bc:c9:fc:10:b1:28:7e:69:fa:e4:67:70:33:30:db:c9:86:66:
fd:81:14:05:db:95:59:51:c7:5d:fa:b1:f4:ae:f9:dd:ad:15:
78:cd:86:ce:eb:12:57:4d:09:c1:e9:b9:56:be:c5:22:a3:1f:
76:0d:64:c5:ee:fc:d0:8b:2b:15:28:2d:3a:8c:9e:7a:d2:55:
b7:91:84:a8:a5:97:15:dd:ee:c7:43:b5:ae:8a:9e:6b:6c:d9:
4c:b3:61:7d:49:9a:ca:40:c8:b6:21:27:a1:91:6a:4e:78:5e:
2e:1f:f0:e1:3b:fa:e8:98:fa:dd:5a:6b:85:2a:3b:21:bb:03:
af:1f:45:c5:ca:fd:31:00:a9:c3:af:c0:22:28:bf:df:89:e3:
34:a2:a1:1b:ab:42:ee:15:5c:f2:a3:e7:57:4a:57:ed:67:01:
15:e5:84:a3:24:68:f2:06:26:c8:56:c1:88:15:a4:00:a4:c3:
d8:f9:09:95:95:fb:d1:0c:e8:84:ce:c1:06:30:20:4b:c1:a5:
ab:1e:db:26:ec:30:74:3f:4d:f1:6f:fe:5d:a0:6a:6b:33:6a:
05:dc:c8:1a:2b:d8:d8:0b:73:b5:c3:05:eb:dc:38:fb:0f:f8:
13:f9:e6:35
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTc0NTAxMTAvBgNVBAUTKDgxQTBDRjlDRTlBQUE5OTBFRDFBRkU4QTgzMEE3MDc4
NzRGOUFBQkUwHhcNMjYwNTA1MDUzNjU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY5ODFmOC01ZWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs/4ZJZZz32FjsC/7cmD43zObfpRnxtupoCJgVHjtsZpYomUur2cIrxIOgT8K
q0egM6A1dztlhJGEjSNsu+b48uzmhznN+fksxYhXzNUj0cvmg3iSfKxEBOHUg+sN
AgSx+/vM3E2q1LQKYkEFZ64CqsKv0/wIRq7mGznDeRM5JsaTqQM8gDlgdQKaq8Ra
3/LfkUIRBUw84ev+siWR3lpKxqezLQoOrRHpLoVCwfBwqN+cebv0p5KNMyPNiGoJ
zgdlS46kIiOWWBdcKvc7zwlC2JQRHtcaqobRVamfnAlYqtTMPdafxEgtrDq0QBJ8
O7xnGWjuWZRk2OdUU4xenZzVzQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNzLeWLO
6GDrPLiQ79/IO/YB/2UPMB8GA1UdIwQYMBaAFIGgz5zpqqmQ7Rr+ioMKcHh0+aq+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzQ1MC84MkQ5QkEwNjI1
MzYxMUVGOUExQ0VGMjNDNEY5QUUwMi9nYURQbk9tcXFaRHRHdjZLZ3dwd2VIVDVx
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dhRFBuT21xcVpEdEd2Nktnd3B3ZUhUNXFyNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTc0NTAvODJEOUJBMDYyNTM2MTFFRjlBMUNFRjIzQzRGOUFFMDIvQjcxQzRGODAy
NTM3MTFFRkExRDJBOTQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwk4MA0GCSqGSIb3DQEBCwUAA4IBAQAO2R3IlHYild6VL65gty7d
oJG8yfwQsSh+afrkZ3AzMNvJhmb9gRQF25VZUcdd+rH0rvndrRV4zYbO6xJXTQnB
6blWvsUiox92DWTF7vzQiysVKC06jJ560lW3kYSopZcV3e7HQ7Wuip5rbNlMs2F9
SZrKQMi2ISehkWpOeF4uH/DhO/romPrdWmuFKjshuwOvH0XFyv0xAKnDr8AiKL/f
ieM0oqEbq0LuFVzyo+dXSlftZwEV5YSjJGjyBibIVsGIFaQApMPY+QmVlfvRDOiE
zsEGMCBLwaWrHtsm7DB0P03xb/5doGprM2oF3MgaK9jYC3O1wwXr3Dj7D/gT+eY1
-----END CERTIFICATE-----
Generated at Wed May 13 12:03:42 2026 by rpki-client