
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
File: 394B48F6889811EC9D1DF920C4F9AE02.roa (raw, json)
Hash identifier: 9GkSsGabC4YIge7KqJ4TFMFRkrykr6bw7a+2s3Vjy28=
Subject key identifier: 04:C4:67:A3:5B:DF:C0:3D:54:BA:B7:80:29:89:66:E8:22:1D:36:CE
Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial: 0482
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
Signing time: Sun 03 May 2026 00:30:43 +0000
ROA not before: Sun 03 May 2026 00:30:43 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132739
IP address blocks: 103.24.156.0/24 maxlen: 24
103.24.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154 (0x482)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Validity
Not Before: May 3 00:30:43 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f69732-4b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3d:9f:76:9f:05:c5:ba:f7:e8:bd:e8:3c:04:
92:28:8a:c3:fb:c8:53:9e:3e:86:fe:49:10:e5:4b:
66:f2:a0:49:57:80:a8:c0:49:1f:a0:64:08:0d:06:
92:91:45:a4:5a:3a:f8:38:63:b0:22:67:ff:f1:cd:
4f:56:3c:17:2b:23:c0:73:57:3a:f6:e4:6a:e3:ab:
d5:18:af:35:08:c2:63:42:04:72:4c:52:8e:4c:63:
dd:82:db:93:6e:54:3c:b2:3d:d9:64:9e:8a:51:d7:
e6:ef:96:14:23:46:c8:83:f8:b9:d1:fc:13:7c:a3:
29:53:6b:b8:01:38:0b:54:aa:b1:48:c2:4e:1a:1e:
6a:e0:51:6b:99:c3:53:bb:6d:98:5c:6f:8a:09:c5:
b1:c9:40:07:2e:d9:0e:fa:3e:69:f7:62:1c:f3:ab:
de:bf:69:0b:b5:30:31:7e:76:41:46:2f:f2:c9:c5:
9b:94:49:a6:b4:96:fc:26:b8:10:b7:ec:8b:b4:e1:
7a:ab:d9:23:f5:16:e1:cc:6b:98:41:24:dd:ba:f8:
53:ab:6e:c7:c7:a5:76:55:b0:ac:dd:14:67:2d:53:
71:f5:12:f8:de:d2:ae:87:c2:62:2e:bc:96:53:43:
91:9a:3e:6c:df:6b:7c:a4:bd:9b:63:44:55:6c:ed:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C4:67:A3:5B:DF:C0:3D:54:BA:B7:80:29:89:66:E8:22:1D:36:CE
X509v3 Authority Key Identifier:
keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.156.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:64:82:02:5c:db:fd:ad:89:45:80:32:c3:00:27:9d:c2:9b:
b8:ba:c7:f4:76:fa:1b:e2:95:57:d3:bb:f6:cd:73:88:79:f3:
92:bd:88:ae:49:28:2b:b1:fc:05:56:63:e5:34:3d:70:25:e8:
01:d6:e8:37:d4:ba:05:ea:6c:15:3b:01:72:0b:a7:64:eb:56:
aa:fc:ff:62:06:27:fa:f8:e0:a7:64:ed:f7:2f:1c:8f:7d:15:
10:1e:1f:80:c2:d3:98:0c:34:d5:c3:dc:d9:16:31:96:6f:65:
b8:18:35:04:43:ab:b5:9d:b2:32:ba:f0:fe:51:c2:61:9a:c0:
34:e0:4c:49:99:f4:fc:84:62:0b:61:cc:b7:a5:17:2a:58:a3:
45:65:64:06:cf:5b:5e:50:80:1f:92:da:15:15:8e:ed:0a:65:
27:87:60:ba:32:9f:83:9f:ae:54:04:64:de:37:cb:7f:a0:50:
ec:0f:25:be:90:0c:2e:0f:b6:b1:56:07:d1:58:e2:a3:ec:81:
99:b3:23:e8:d2:9a:95:f7:ee:ab:c9:db:27:48:49:4c:c5:15:
f7:af:ec:9d:a0:7f:c5:93:50:bb:55:66:70:05:a7:02:fb:9e:
70:a4:a4:6c:15:f2:2d:c4:2f:51:36:1d:42:eb:61:79:6c:0f:
3a:20:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:03 2026 by rpki-client