
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/BD65DA5EE24111ECB7132461C4F9AE02.roa
File: BD65DA5EE24111ECB7132461C4F9AE02.roa (raw, json)
Hash identifier: u7CkVjsHOQVNTO01q5uCcJc2/9SL+9roqM3Bhawo60Y=
Subject key identifier: 2F:C4:46:3B:2F:8F:CE:FE:12:67:EE:A6:FF:FE:4B:1E:C9:87:A0:59
Certificate issuer: /CN=A9181B90/serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
Certificate serial: 0378
Authority key identifier: 5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/BD65DA5EE24111ECB7132461C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:00:13 +0000
ROA not before: Fri 27 Jun 2025 01:37:30 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 149854
IP address blocks: 103.188.232.0/23 maxlen: 23
103.188.232.0/24 maxlen: 24
103.188.233.0/24 maxlen: 24
2001:df0:c8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl
rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 888 (0x378)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181B90, serialNumber=5AC36DE95936B87A010A2A4BA915695A6999071D
Validity
Not Before: Jun 27 01:37:30 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4001d-6f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:55:6c:ec:9b:07:8c:3f:14:9a:bc:15:9c:47:
27:8a:0a:ed:29:5f:e2:88:9d:09:cf:8a:bb:ca:5a:
da:f4:90:58:8d:ff:64:b5:2b:6a:be:0c:e2:f2:b3:
5c:3a:30:ba:3f:8b:71:99:0a:d9:21:c0:5f:8a:f9:
44:f2:7e:30:98:d1:67:c6:79:37:4c:39:42:d1:99:
cd:c2:0e:98:62:87:fe:37:4f:a3:49:14:fc:a1:7c:
01:38:06:10:c4:41:ba:92:4a:cf:4c:af:44:1c:1a:
23:ea:1b:8d:8b:97:10:2c:86:7c:e8:44:12:d6:10:
e3:de:f2:0d:c7:e6:ad:c0:68:07:7d:79:ba:c0:3c:
25:09:b1:1f:f5:77:4e:84:6f:ea:5b:55:61:2c:4a:
b8:c0:ad:a8:f1:2f:ba:41:c7:2a:38:17:0e:2f:dd:
f1:f8:12:27:c7:bd:a5:78:14:26:70:1e:90:5b:78:
82:ef:b9:33:4c:09:68:a8:1c:d4:08:05:6a:b4:a8:
7e:15:72:a2:ea:32:d1:34:af:f6:ad:35:ef:84:ac:
2a:36:fd:49:ec:4c:ba:ef:47:d2:4f:ba:ab:cc:e1:
4e:e7:8c:9b:e3:a5:e6:22:08:33:a4:99:81:1a:58:
03:46:f8:17:4e:58:d7:2f:ee:4f:c9:6f:78:84:87:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C4:46:3B:2F:8F:CE:FE:12:67:EE:A6:FF:FE:4B:1E:C9:87:A0:59
X509v3 Authority Key Identifier:
keyid:5A:C3:6D:E9:59:36:B8:7A:01:0A:2A:4B:A9:15:69:5A:69:99:07:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/WsNt6Vk2uHoBCipLqRVpWmmZBx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsNt6Vk2uHoBCipLqRVpWmmZBx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181B90/F80CEFACE23D11EC84D2B35EC4F9AE02/BD65DA5EE24111ECB7132461C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.188.232.0/23
IPv6:
2001:df0:c8c0::/48
Signature Algorithm: sha256WithRSAEncryption
5a:84:94:05:52:35:e5:26:14:14:a9:f0:46:d2:08:9e:7b:cb:
0a:be:8a:86:d0:25:9a:95:e2:ee:ba:d1:75:4b:61:50:b8:90:
39:7d:ca:cb:68:55:3e:6e:a6:49:9a:cb:ef:ad:58:d3:74:a9:
3c:53:bc:df:4d:00:de:aa:11:73:2d:4e:f8:c8:0a:7b:27:6c:
51:2a:88:dc:0d:9c:b7:4e:5d:96:bf:08:14:9e:84:62:5c:82:
ec:e6:ab:52:8d:e5:40:31:ea:c0:8d:f6:d9:b4:ca:5a:0c:27:
67:7f:6d:6f:47:26:38:76:34:29:6f:d5:0a:9e:47:da:f3:04:
bf:22:cf:5d:15:4f:60:ce:5f:a1:76:0b:23:62:20:83:5f:dc:
a1:73:9f:c2:73:ac:74:4e:9f:5a:64:28:bf:1d:60:15:45:db:
82:4f:ca:97:6f:c6:1f:98:66:84:d8:05:b2:e1:67:c4:bb:3c:
38:40:56:69:e7:de:ac:39:51:2a:7d:c4:c0:ee:57:f8:0e:ad:
82:8f:cc:93:03:80:22:c0:ae:2d:2e:e0:80:71:80:00:2d:c2:
f3:21:12:6a:28:d2:04:b7:06:03:30:9a:7a:50:db:6f:33:db:
5f:41:1e:c0:a4:df:0a:e8:49:b4:88:87:70:4d:68:56:17:60:
c4:c2:f1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:39:53 2026 by rpki-client