
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa
File: B188CE748E7011F08CF3B91AC4F9AE02.roa (raw, json)
Hash identifier: Oz1YYz2nVnKK3rUGjD/1v81WOTw67n/9ST3sUEa1Jz8=
Subject key identifier: 13:A3:22:13:8A:A3:41:26:E7:A2:18:65:9A:50:9D:C0:B6:41:23:9E
Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial: 0220
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:13:31 +0000
ROA not before: Wed 10 Sep 2025 18:05:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137259
IP address blocks: 103.31.222.0/23 maxlen: 24
2001:df2:50c0::/48 maxlen: 50
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Validity
Not Before: Sep 10 18:05:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a4114a-258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:1a:f1:8a:46:7e:2e:5c:76:ff:fa:97:05:
3d:bb:c7:3a:8c:78:05:74:67:60:28:01:3b:f2:42:
9c:83:62:26:80:6b:9b:30:98:1f:96:58:8d:6f:75:
bd:7f:0f:5c:92:15:3c:6a:07:df:57:37:f4:36:df:
1b:cb:57:ee:22:c3:ff:b6:3f:60:86:2b:d6:fa:3b:
b0:5c:80:5e:da:92:17:57:6c:be:b6:79:16:32:7a:
c3:87:be:9e:6a:f9:f6:0f:7d:26:ba:df:7e:68:c6:
88:6d:48:6f:16:d0:bd:9a:d2:b8:a2:bd:10:f4:c1:
09:84:71:7c:7a:3b:42:61:10:7c:28:a8:bd:02:a1:
87:b0:2c:e3:e7:81:b5:2d:93:0a:66:11:73:b1:8a:
55:80:2b:4a:40:ca:4c:de:c0:f4:b4:fa:d7:1e:c7:
6c:80:5c:c0:f5:e1:e0:20:f8:7b:ee:e6:73:59:77:
3d:02:1c:e0:a8:3c:bf:70:26:c5:75:b8:e0:c4:8a:
4a:3b:a4:0c:10:ef:10:0a:8a:90:91:20:1c:45:67:
09:64:96:b7:7d:56:0f:7f:7e:a9:f9:ba:bc:9e:a5:
0c:78:ef:0e:9c:f0:ad:b5:b1:54:ee:d7:af:9b:a7:
b5:32:ab:50:52:d3:d3:3d:09:ed:50:29:7e:36:56:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:22:13:8A:A3:41:26:E7:A2:18:65:9A:50:9D:C0:B6:41:23:9E
X509v3 Authority Key Identifier:
keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.31.222.0/23
IPv6:
2001:df2:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
af:26:5a:41:f3:a6:87:71:e9:a5:2e:82:c6:f2:4c:2e:ba:66:
89:3c:d1:2b:7e:fb:bf:80:c4:d2:b3:41:a0:83:66:a5:10:08:
8d:15:8e:d1:54:de:fe:f5:74:10:a4:31:ca:38:f6:1e:76:b1:
85:dd:3d:d3:13:d2:ad:60:23:92:b3:74:7a:56:d5:29:5b:60:
55:19:0a:af:3d:08:f2:4a:6d:1e:a0:7e:a9:2f:8d:b4:37:cc:
45:25:e9:73:cc:83:cd:bc:d3:61:20:95:36:4b:3a:ac:78:3b:
9d:aa:e6:c0:59:2d:6b:a3:73:08:5c:e0:6c:15:8c:55:e5:a0:
e6:a5:3d:f3:16:b9:c3:1a:ae:2d:76:b5:16:df:4b:e8:72:08:
98:14:48:e6:52:20:7a:bb:6e:e0:66:54:2d:89:8d:dc:a1:39:
3c:f6:8e:3e:ae:3c:bf:0a:f1:5d:aa:e1:44:23:2a:24:78:24:
f8:20:a6:85:5b:be:b4:18:fd:74:90:4a:f5:93:d4:5a:31:e4:
3c:af:5c:64:bb:e6:ac:36:72:e6:94:61:ab:b0:5d:e6:9a:97:
bf:63:38:ac:ec:84:eb:27:4b:f8:6b:ff:36:e5:20:e2:5b:13:
51:47:99:20:ff:6a:27:3f:23:1e:30:25:5d:f7:6b:4f:34:c7:
d4:92:b5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:00:34 2026 by rpki-client