
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
File: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (raw, json)
Hash identifier: RnKanm5hHk3mFwa7+wHjDrcythGv+bDKBJwJ7N6lnUA=
Subject key identifier: E4:57:A7:B8:1C:4E:28:3A:67:90:F3:72:83:4B:E5:C0:7E:17:0A:30
Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial: 1523
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:17:42 +0000
ROA not before: Sat 31 May 2025 16:58:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135298
IP address blocks: 103.213.104.0/24 maxlen: 24
103.213.105.0/24 maxlen: 24
103.213.106.0/24 maxlen: 24
103.213.107.0/24 maxlen: 24
223.26.20.0/24 maxlen: 24
223.26.21.0/24 maxlen: 24
223.26.22.0/24 maxlen: 24
223.26.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:44:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5411 (0x1523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Validity
Not Before: May 31 16:58:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40436-7f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:a8:7e:31:3b:bb:57:12:96:a0:99:97:22:
36:cf:f4:f2:9b:58:b6:9e:b4:93:83:1c:e5:67:6c:
00:37:3b:a6:9a:d7:7b:8c:7a:6e:e0:4c:7e:50:6e:
ab:02:66:f6:43:fe:cf:fa:16:b7:e4:da:8f:68:b8:
c3:d8:f9:f2:c0:ab:fd:13:0e:f4:14:f8:be:d1:88:
2e:d4:65:55:28:6c:8f:9e:d4:80:71:57:b5:5e:7f:
04:62:56:44:d6:c6:33:91:a2:45:68:51:e5:85:db:
4b:28:26:e5:b7:19:d4:2a:00:18:66:18:61:25:23:
66:ff:b5:bb:38:60:80:b8:de:27:77:4d:e2:0f:f8:
73:1d:3f:19:05:4e:7f:1e:c6:1c:04:00:13:38:6e:
ac:41:86:86:fc:4e:ba:7d:1e:22:5d:f6:36:f1:99:
02:cc:df:d5:b5:30:02:23:54:f8:9b:21:b1:b5:70:
51:74:96:42:40:7a:8f:24:5c:b4:a0:fc:af:6d:66:
0b:25:2d:2e:a2:7c:94:47:53:d9:f3:bf:4c:26:ee:
bc:13:f0:d4:24:cb:76:33:42:93:1c:d3:76:5c:f8:
5f:84:8c:1a:cd:87:71:0b:30:7b:82:6c:8a:c7:22:
6f:94:a5:ad:a7:c1:59:d3:15:88:f1:55:5c:19:74:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:A7:B8:1C:4E:28:3A:67:90:F3:72:83:4B:E5:C0:7E:17:0A:30
X509v3 Authority Key Identifier:
keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.104.0/22
223.26.20.0/22
Signature Algorithm: sha256WithRSAEncryption
62:5c:4a:ca:80:7a:0e:e8:4a:46:58:67:60:4b:57:da:d3:0c:
1b:73:09:d9:ab:2c:fd:95:1f:09:1a:bd:f4:e9:ff:7b:4f:12:
5c:f7:66:8d:a8:ce:01:98:85:ca:5c:33:8b:61:4e:0f:1d:7a:
85:60:8b:55:65:d5:94:e2:4a:31:c4:0d:68:d2:a4:c6:4f:7a:
ab:f7:c1:30:a8:e4:f5:24:69:52:6b:f8:bd:d1:bf:8f:e2:9c:
0d:7c:60:58:06:50:45:dc:3e:07:31:e5:17:1b:cf:72:88:15:
9a:f7:04:f7:b4:11:cd:78:57:e7:c9:d5:3b:0b:51:aa:f9:05:
6e:03:58:94:09:be:2e:a6:03:c2:3c:b3:67:a0:0b:a2:c2:53:
c0:64:54:46:bb:ab:bb:64:6a:bc:a8:6a:22:86:25:3a:01:0b:
a2:db:b1:a6:59:a6:b4:be:73:fb:82:10:9c:bc:89:bb:04:ce:
bc:ef:1f:ff:9b:20:1d:3f:d1:ed:06:9a:e5:39:91:27:c2:b7:
cd:62:f3:19:69:eb:1e:ea:e5:24:36:a7:f0:8b:05:8a:3d:cf:
52:f3:4b:2a:ac:1a:b6:96:5f:17:a1:f0:d0:33:2e:86:60:9f:
8b:29:1d:d8:64:f5:e3:e7:86:3d:b0:1b:43:0c:60:40:fc:9d:
7b:ce:0d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:52 2026 by rpki-client