
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/D1D6719A10DD11EDBC7EA35FC4F9AE02.roa
File: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (raw, json)
Hash identifier: EiWPIZ15zMY14DDKe2/rDs1zl9dckvx9dIVPiNm4WIw=
Subject key identifier: 54:7E:C3:47:1D:3C:BD:AC:15:5B:B2:C5:61:D6:4F:5C:FE:EB:56:49
Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10
Certificate serial: 0301
Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/D1D6719A10DD11EDBC7EA35FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:06:12 +0000
ROA not before: Sun 31 Aug 2025 02:48:49 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 139043
IP address blocks: 103.191.122.0/24 maxlen: 24
103.191.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl
rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10
Validity
Not Before: Aug 31 02:48:49 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a40184-856b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:83:1e:05:df:49:ff:4f:49:66:5a:2b:b4:
72:45:1a:e2:a2:c8:61:97:a9:44:e9:f3:a4:b4:6c:
8b:02:c4:93:80:71:49:14:9c:d6:d8:4b:80:39:96:
b5:e1:ff:31:34:c1:06:d4:dc:fa:d6:42:3a:da:d0:
4e:00:c6:44:c4:2e:50:f1:36:39:ac:8e:6c:58:67:
42:f6:28:9b:ea:e6:00:2f:66:04:df:c0:3a:88:90:
88:69:39:de:7f:a8:44:c5:79:f9:a6:58:b8:ec:76:
6d:88:97:f2:d1:45:f5:43:a0:b0:c6:a5:54:3f:6e:
d5:4a:46:df:4c:f7:e9:63:5a:aa:ad:61:fc:dd:68:
b3:f4:cc:ea:5f:d5:6d:85:4a:f7:73:c5:c1:79:2b:
cc:ad:09:1f:a2:8a:6b:28:67:7e:66:51:56:d6:a7:
23:97:77:76:33:2a:0d:2f:0d:88:6f:48:2c:e0:6a:
c7:33:a5:26:3a:73:2c:0b:42:bf:69:cb:61:96:4d:
83:0f:a0:5c:2f:35:73:93:37:f0:eb:ab:52:c8:13:
d6:89:22:ae:36:7d:62:19:67:66:c8:e4:c6:e4:60:
dc:02:68:7d:30:9d:76:c8:66:ac:b3:24:aa:fe:14:
c7:60:25:95:3c:46:16:ea:fd:1a:79:13:ab:82:de:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:C3:47:1D:3C:BD:AC:15:5B:B2:C5:61:D6:4F:5C:FE:EB:56:49
X509v3 Authority Key Identifier:
keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/D1D6719A10DD11EDBC7EA35FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.191.122.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:02:ee:9f:59:5e:ae:d1:0e:4d:c3:4b:b1:4f:15:6c:81:ee:
6c:c1:26:e0:c4:73:6f:17:ac:27:5b:bd:b6:24:7a:ee:a5:8b:
b4:b4:cc:f4:c4:1d:ff:6d:2c:0b:20:ff:6e:53:7b:83:a4:76:
64:12:27:7d:92:55:08:9a:2a:58:37:77:13:bc:54:5d:0d:9d:
a8:cf:fd:b5:b4:01:a4:d1:c3:87:fe:6b:ac:97:fc:bb:e1:f5:
8b:2a:23:97:f7:d9:90:aa:5a:ce:f8:28:6d:a5:9b:51:07:6f:
b3:b3:8e:a2:c9:0a:ed:96:9c:ab:50:f5:e2:45:25:34:5f:fc:
69:90:ff:20:8c:52:57:d7:cc:95:7e:db:54:30:09:09:bc:69:
ad:0a:ea:7b:65:36:7d:16:08:59:99:fc:3b:a1:a5:d5:bb:a5:
3d:f4:e5:f7:38:06:4d:5c:23:55:00:7e:2e:d9:ae:36:15:39:
87:e7:10:9d:71:7a:b9:1c:6f:5f:2f:7d:08:e7:e5:40:e1:1e:
4a:8f:37:06:3e:f9:a3:a7:81:e7:10:db:7f:5f:d0:d5:b1:20:
1d:03:9e:d6:27:08:a2:70:61:1b:74:73:73:19:31:67:84:46:
67:39:3e:ac:5f:bd:cc:4c:7d:5d:7a:ed:f6:05:b3:0e:9c:4b:
73:fa:d1:9f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4
NkZGREJEMTAwHhcNMjUwODMxMDI0ODQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDE4NC04NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn1qDHgXfSf9PSWZaK7RyRRrioshhl6lE6fOktGyLAsSTgHFJFJzW2EuAOZa1
4f8xNMEG1Nz61kI62tBOAMZExC5Q8TY5rI5sWGdC9iib6uYAL2YE38A6iJCIaTne
f6hExXn5pli47HZtiJfy0UX1Q6CwxqVUP27VSkbfTPfpY1qqrWH83Wiz9MzqX9Vt
hUr3c8XBeSvMrQkfooprKGd+ZlFW1qcjl3d2MyoNLw2Ib0gs4GrHM6UmOnMsC0K/
acthlk2DD6BcLzVzkzfw66tSyBPWiSKuNn1iGWdmyOTG5GDcAmh9MJ12yGassySq
/hTHYCWVPEYW6v0aeROrgt6lWwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFR+w0cd
PL2sFVuyxWHWT1z+61ZJMB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw
REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2
UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTU0ODAvOTZGMjhBQzYxMERBMTFFRDhBNjk5RTMyQzRGOUFFMDIvRDFENjcxOUEx
MEREMTFFREJDN0VBMzVGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ796MA0GCSqGSIb3DQEBCwUAA4IBAQCfAu6fWV6u0Q5Nw0uxTxVs
ge5swSbgxHNvF6wnW722JHrupYu0tMz0xB3/bSwLIP9uU3uDpHZkEid9klUImipY
N3cTvFRdDZ2oz/21tAGk0cOH/musl/y74fWLKiOX99mQqlrO+ChtpZtRB2+zs46i
yQrtlpyrUPXiRSU0X/xpkP8gjFJX18yVfttUMAkJvGmtCup7ZTZ9FghZmfw7oaXV
u6U99OX3OAZNXCNVAH4u2a42FTmH5xCdcXq5HG9fL30I5+VA4R5KjzcGPvmjp4Hn
ENt/X9DVsSAdA57WJwiicGEbdHNzGTFnhEZnOT6sX73MTH1deu32BbMOnEtz+tGf
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:22:28 2026 by rpki-client