
$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa
File: B188CE748E7011F08CF3B91AC4F9AE02.roa (raw, json)
Hash identifier: JhTmh8+spCzAKkyjoFK2bfRg9TC7jy1oAEEezsAdacA=
Subject key identifier: 81:B6:A9:A9:60:35:3F:0D:07:D4:BB:DA:9C:93:04:55:69:00:9B:05
Certificate issuer: /CN=A917ECA2/serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Certificate serial: 0261
Authority key identifier: 36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa
Signing time: Wed 01 Jul 2026 04:28:37 +0000
ROA not before: Wed 01 Jul 2026 04:28:37 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 137259
IP address blocks: 103.31.222.0/23 maxlen: 24
2001:df2:50c0::/48 maxlen: 50
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 609 (0x261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917ECA2, serialNumber=36CF5CC0A60E0B7D54612A12EB5B989284686DB0
Validity
Not Before: Jul 1 04:28:37 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a449775-6be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:55:1d:32:69:bc:ea:b0:99:4f:bd:b1:0f:
9f:6e:11:93:ed:7f:bd:f5:d2:6b:07:5c:23:46:d9:
b9:e0:50:3b:c6:87:0a:48:53:7e:27:b4:c8:69:0f:
1d:64:2f:1a:9e:f4:27:d9:9b:7d:1f:72:50:44:7e:
58:92:fd:fb:5f:0e:0b:4c:5c:ee:cb:26:bc:48:8a:
89:ab:57:fc:c1:33:7a:f0:57:6b:f5:8b:d1:ed:71:
84:00:b5:06:80:d0:7d:b3:9c:e7:29:88:ee:5b:17:
ca:03:ae:f1:ff:97:5e:29:d8:e8:88:0d:5e:0a:2f:
f0:20:62:d0:09:b6:d0:2c:8e:d5:e4:c9:c3:ab:bb:
b9:b1:57:15:8a:0f:30:70:12:da:cc:5f:93:b4:bb:
9a:48:ac:b4:b0:47:1e:62:57:a4:df:a4:a5:9b:48:
f6:07:f3:6d:6c:a0:82:03:f0:be:4c:c3:34:f8:4e:
ce:37:f0:7d:90:9d:9a:9c:13:64:d5:2e:c0:6e:a8:
5c:dc:d0:b0:9f:e1:e7:36:f7:d5:3e:94:e0:46:9a:
a0:73:66:ab:42:5e:dc:ba:b0:2a:8d:04:1c:0c:eb:
9c:65:89:ff:85:1e:88:3b:ae:cb:50:ac:99:b7:91:
c4:d0:d2:a7:a1:47:92:cc:a7:7f:e0:0f:6f:ab:a9:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B6:A9:A9:60:35:3F:0D:07:D4:BB:DA:9C:93:04:55:69:00:9B:05
X509v3 Authority Key Identifier:
keyid:36:CF:5C:C0:A6:0E:0B:7D:54:61:2A:12:EB:5B:98:92:84:68:6D:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/Ns9cwKYOC31UYSoS61uYkoRobbA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ns9cwKYOC31UYSoS61uYkoRobbA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECA2/02827CF8E43711EDA865631AC4F9AE02/B188CE748E7011F08CF3B91AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.31.222.0/23
IPv6:
2001:df2:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
9b:74:3b:c5:25:ea:b7:95:fe:c7:9b:76:67:8e:05:9d:38:b6:
ac:12:ee:02:e1:ab:25:c0:58:6e:4a:b2:ef:09:2f:de:a2:18:
ec:ed:da:c9:17:f9:84:c3:4e:f0:2e:c8:3b:90:c7:7b:6d:d5:
25:4e:da:52:36:22:57:a5:cd:2e:1f:ef:9c:29:09:77:95:7f:
8a:e8:61:e6:33:ed:e9:c6:b2:5d:9c:46:06:83:6a:a0:c8:4b:
2e:8e:15:4d:cb:1a:af:e4:f9:42:fb:62:5c:a9:80:79:4c:67:
52:fa:13:9c:2a:20:81:c1:81:46:f8:d4:62:0f:69:d4:da:8b:
97:72:58:23:64:62:35:16:a7:ff:0b:59:84:44:55:00:d8:98:
7a:de:6d:f7:ca:16:da:23:f4:d9:f5:79:53:83:55:1a:db:c8:
a3:cf:90:a1:1e:6b:99:13:73:27:2f:c9:27:28:1d:46:5c:a3:
72:6f:05:ea:8f:93:a4:d7:02:48:ae:3e:37:09:4a:d6:d3:37:
b6:ac:2e:5c:c2:80:61:cc:f3:55:99:2e:eb:98:bf:f6:35:42:
23:51:16:3c:60:e7:df:83:ef:b0:d9:75:7c:57:24:58:95:cc:
38:99:b4:7c:19:55:47:69:ca:e5:b8:d5:9d:14:bf:28:ea:9d:
1d:15:7b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:24 2026 by rpki-client