
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
File: 23B27B60F68011E982571C3EC4F9AE02.roa (raw, json)
Hash identifier: sjwfe8XhFk6Jxj+5OnQzDtWQba/qtTmypv4cLyvI+GI=
Subject key identifier: C6:74:59:28:E4:18:84:5B:99:B8:20:7B:64:5C:A0:D3:3D:48:22:4E
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0D48
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:18:23 +0000
ROA not before: Wed 30 Apr 2025 18:27:42 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138651
IP address blocks: 103.135.136.0/24 maxlen: 24
103.135.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3400 (0xd48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Apr 30 18:27:42 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a42e8f-dc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:69:6d:63:37:60:4d:86:f8:18:ea:d2:ec:
ae:8a:c0:97:fc:1b:5a:03:cf:fd:ab:0a:60:b1:45:
55:97:f2:0d:a8:7b:32:62:27:25:2c:4b:05:55:fe:
52:c5:80:69:2a:7d:8b:ca:42:d6:e8:ec:cf:98:26:
f1:f8:13:e5:38:50:c1:e7:df:e8:fe:7b:92:9e:0c:
28:87:b5:86:92:e2:f9:58:ae:39:38:d7:29:dc:77:
1a:cd:b0:5d:ec:f5:cf:5a:14:90:19:42:30:81:27:
e6:e2:8b:ac:ec:81:18:13:2a:9a:f9:03:93:4f:98:
f8:3e:63:64:e3:ca:44:1a:09:95:67:7d:09:2b:c0:
67:6d:11:b0:20:b6:91:06:64:82:65:d1:d0:69:9a:
12:d4:97:9b:58:78:12:ea:d6:97:3c:3b:10:76:f7:
c7:5b:f8:92:5c:77:64:be:d9:f9:d6:56:8c:b3:94:
65:6a:86:d8:01:08:b7:89:2a:2f:ba:75:ee:96:9b:
33:2f:7d:a9:01:7d:47:dd:9a:1d:4d:4a:6a:50:f5:
da:53:02:9b:e4:be:0d:55:d2:27:fd:96:84:15:c0:
f4:44:9c:65:7e:73:24:b8:33:65:68:54:7d:de:45:
f9:a3:6c:da:26:66:d6:62:30:84:77:00:44:66:76:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:74:59:28:E4:18:84:5B:99:B8:20:7B:64:5C:A0:D3:3D:48:22:4E
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.136.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:83:ab:55:c2:17:4a:0c:87:1a:c6:8b:cb:24:3b:da:20:f6:
49:8a:2d:01:0a:2f:64:36:6c:85:40:15:71:ba:98:29:af:c8:
26:42:9a:80:2f:0f:43:9d:ad:d8:f6:d7:0e:51:fa:1b:20:32:
9a:c5:09:34:db:92:c8:bd:86:52:e7:4e:6e:e3:b5:88:da:5a:
a3:e4:a1:cc:60:2c:ad:70:90:43:b2:be:8b:d8:f8:96:e1:41:
7f:27:ae:04:e8:2d:78:91:7f:bd:1e:9d:96:8d:8f:87:a5:9e:
55:97:8b:25:23:ef:3c:79:d3:ed:7c:3b:7f:e0:22:01:b5:b8:
4d:29:1e:09:f9:70:43:c1:10:26:d7:58:86:96:c0:09:f5:f8:
82:26:a8:a6:ec:4d:b5:73:f8:b6:9e:39:c8:9c:56:c3:e1:2a:
23:de:dd:f7:24:b3:c6:64:de:29:6c:da:66:5d:81:99:86:d0:
f5:5d:ba:ee:26:98:75:0a:4a:ab:66:eb:85:28:0b:c0:fc:41:
f0:5c:48:49:08:30:f0:32:e2:dc:dc:ae:51:84:35:44:24:60:
da:58:5b:7c:4d:d9:c4:41:f9:3d:03:d3:26:1f:f1:43:26:41:
9e:9b:a8:75:5d:22:fe:42:8c:61:f8:44:d5:bf:9a:23:32:62:
99:24:99:d3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE
QjFBNTBEQTQwHhcNMjUwNDMwMTgyNzQyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmU4Zi1kYzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArBlpbWM3YE2G+Bjq0uyuisCX/BtaA8/9qwpgsUVVl/INqHsyYiclLEsFVf5S
xYBpKn2LykLW6OzPmCbx+BPlOFDB59/o/nuSngwoh7WGkuL5WK45ONcp3HcazbBd
7PXPWhSQGUIwgSfm4ous7IEYEyqa+QOTT5j4PmNk48pEGgmVZ30JK8BnbRGwILaR
BmSCZdHQaZoS1JebWHgS6taXPDsQdvfHW/iSXHdkvtn51laMs5RlaobYAQi3iSov
unXulpszL32pAX1H3ZodTUpqUPXaUwKb5L4NVdIn/ZaEFcD0RJxlfnMkuDNlaFR9
3kX5o2zaJmbWYjCEdwBEZnZQKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMZ0WSjk
GIRbmbgge2RcoNM9SCJOMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2
N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvMjNCMjdCNjBG
NjgwMTFFOTgyNTcxQzNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4eIMA0GCSqGSIb3DQEBCwUAA4IBAQCcg6tVwhdKDIcaxovLJDva
IPZJii0BCi9kNmyFQBVxupgpr8gmQpqALw9Dna3Y9tcOUfobIDKaxQk025LIvYZS
505u47WI2lqj5KHMYCytcJBDsr6L2PiW4UF/J64E6C14kX+9Hp2WjY+HpZ5Vl4sl
I+88edPtfDt/4CIBtbhNKR4J+XBDwRAm11iGlsAJ9fiCJqim7E21c/i2njnInFbD
4Soj3t33JLPGZN4pbNpmXYGZhtD1XbruJph1CkqrZuuFKAvA/EHwXEhJCDDwMuLc
3K5RhDVEJGDaWFt8TdnEQfk9A9MmH/FDJkGem6h1XSL+Qoxh+ETVv5ojMmKZJJnT
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:17:03 2026 by rpki-client