
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/934C22582E1C11EBB3ADE232C4F9AE02.roa
File: 934C22582E1C11EBB3ADE232C4F9AE02.roa (raw, json)
Hash identifier: /d1oiYvRZiMCHQrnq/bB0/o38ZTfcwJhY9uDXJ1VBK4=
Subject key identifier: AD:0E:CA:D9:DE:C6:7E:70:FF:C7:65:AA:9F:D2:18:BF:DD:B5:E2:42
Certificate issuer: /CN=A919D545/serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
Certificate serial: 07D9
Authority key identifier: 20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/934C22582E1C11EBB3ADE232C4F9AE02.roa
Signing time: Fri 20 Mar 2026 21:28:14 +0000
ROA not before: Fri 20 Mar 2026 21:28:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 56092
IP address blocks: 103.10.40.0/24 maxlen: 24
103.10.41.0/24 maxlen: 24
103.10.42.0/24 maxlen: 24
103.10.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl
rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2009 (0x7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D545, serialNumber=20850FC70C25FDB155D37ECB0EC3962C6B47FCAD
Validity
Not Before: Mar 20 21:28:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69bdbbee-9a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:6a:15:9b:27:87:20:62:37:20:26:a6:10:
b0:30:23:6a:49:47:69:f1:ce:af:32:07:4d:ab:cf:
e5:8b:e6:35:9e:25:15:7a:53:82:72:73:bf:57:f2:
1b:72:5f:c7:20:af:e6:99:d7:07:15:cf:8a:17:b0:
b2:0e:8f:65:46:5d:f8:39:eb:63:63:11:7a:39:86:
c6:2b:66:5a:e5:f6:64:08:49:3f:01:94:8f:6c:8d:
a8:09:78:6c:e2:5a:c7:ff:31:f1:a8:39:b2:61:d4:
1c:a7:24:a5:32:21:29:13:7c:b5:45:b4:df:15:13:
f8:6c:6b:45:08:c2:8f:57:a2:42:9f:b3:07:d7:e3:
22:a3:48:ab:a6:06:da:83:c3:92:38:a3:91:f9:dc:
65:f6:03:a9:79:f2:0a:ee:a0:0f:ed:53:c1:30:cc:
ff:64:55:0d:7a:e4:07:cc:12:15:77:c0:71:b8:ff:
5f:41:ce:5b:00:8e:be:81:95:36:c3:cd:7d:d8:33:
36:01:06:41:4d:8a:41:2b:97:d2:29:2c:24:43:f3:
1c:f2:79:8f:cd:c7:b0:56:0c:62:f0:c9:9a:2a:80:
53:9e:aa:c8:34:82:d2:65:a8:15:a5:c3:c8:d8:5f:
42:b9:52:2d:79:71:d8:e7:3a:37:e1:0a:8d:7d:af:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0E:CA:D9:DE:C6:7E:70:FF:C7:65:AA:9F:D2:18:BF:DD:B5:E2:42
X509v3 Authority Key Identifier:
keyid:20:85:0F:C7:0C:25:FD:B1:55:D3:7E:CB:0E:C3:96:2C:6B:47:FC:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/IIUPxwwl_bFV037LDsOWLGtH_K0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IIUPxwwl_bFV037LDsOWLGtH_K0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D545/F3B976062E1A11EBB239DE30C4F9AE02/934C22582E1C11EBB3ADE232C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.10.40.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ec:82:da:52:a6:f8:17:b1:00:b0:65:16:7c:2e:c6:8e:cc:
5b:c3:97:4c:0a:a1:2f:3c:f9:fa:6f:97:f0:ac:11:4c:e3:f1:
34:70:7e:b1:1b:74:a8:19:c6:33:77:47:07:e5:b8:fb:ab:06:
d4:86:4c:5a:0e:5d:74:66:3c:fe:5f:97:a6:c6:fe:dc:81:c0:
b4:d7:89:96:4e:3b:7d:c0:ca:a7:4c:7f:db:5c:64:25:e4:2f:
2e:37:68:43:c3:08:65:c5:d0:68:d1:4e:42:04:73:f0:cd:a3:
77:49:09:15:c9:12:47:54:1e:71:60:97:6d:08:e4:7c:53:61:
b2:ec:c5:d5:66:bf:0b:e6:ad:cf:c8:21:cd:83:f9:25:65:9e:
e6:22:06:8c:81:18:80:69:56:e2:cc:33:a0:37:b4:74:94:9f:
6d:ee:80:6d:94:d6:66:8e:a0:36:19:25:79:3f:29:c6:fe:23:
a5:b3:6f:cd:0c:c1:e6:00:19:41:a3:07:0b:8b:15:26:cc:8e:
05:85:58:44:3c:2f:4d:dd:3d:13:de:98:2a:21:7d:da:96:fb:
c7:9f:ad:6c:f9:08:16:6f:86:f7:1f:0e:20:c0:af:0e:1b:ab:
bd:1e:91:d3:0e:5c:b9:2e:26:5b:a4:8a:6c:6f:d4:5f:a6:e6:
75:a9:36:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:43:08 2026 by rpki-client