
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa
File: 5559811AC52311EEAEEC2E3BC4F9AE02.roa (raw, json)
Hash identifier: opDVDCbsBQzHpTdEZkXg8pK+yXFCw2wR9EtK3a8UOv0=
Subject key identifier: 07:67:36:3A:4B:87:82:69:89:70:45:71:BC:C9:58:64:4D:52:AA:21
Certificate issuer: /CN=A9121995/serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
Certificate serial: 01E4
Authority key identifier: 22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:02:17 +0000
ROA not before: Thu 27 Nov 2025 01:49:13 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136759
IP address blocks: 103.36.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl
rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121995, serialNumber=229E064ACF432F64DAA7017A66BE8B61A96B185A
Validity
Not Before: Nov 27 01:49:13 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a438d9-b996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:71:f3:dd:4e:df:76:c6:bf:2f:af:b9:09:4a:
b2:63:1a:ca:87:82:38:e7:b9:2f:67:51:bd:8b:a0:
48:81:2d:0f:b6:62:b2:d9:be:43:01:f7:4e:3a:13:
35:84:4d:62:1e:f2:cc:8a:6a:58:f6:ff:b1:db:c3:
7c:03:0d:dc:f3:cd:c4:b4:a5:c5:e1:55:55:d6:7f:
35:86:ac:0a:98:62:44:1e:71:24:8e:59:e6:5f:36:
8d:af:ee:ad:00:d1:5e:93:f4:06:d0:06:02:91:e8:
93:56:e0:a9:04:e0:c3:0b:a8:39:f2:e0:18:26:88:
99:e7:cf:7c:81:4b:65:59:ee:f8:b4:33:d0:58:52:
13:80:ad:f2:5c:15:9f:5e:4e:07:ff:1d:1a:c3:38:
c1:55:13:c0:af:51:78:40:77:2b:30:6b:34:10:f7:
83:9d:cc:9e:09:bb:73:52:85:b8:f6:2c:17:0e:a5:
c2:40:6f:f9:4c:bf:0d:f4:72:7d:74:c1:51:a7:d3:
0d:be:82:c2:10:bb:41:8a:8f:15:ff:85:86:eb:63:
8b:91:0b:4f:c1:f6:99:f8:ba:78:dd:b4:b0:28:d9:
10:05:86:6e:73:da:c7:4a:9a:db:af:9e:dc:da:70:
3e:27:74:be:d2:f7:e0:b1:ce:a2:96:96:0b:2a:70:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:67:36:3A:4B:87:82:69:89:70:45:71:BC:C9:58:64:4D:52:AA:21
X509v3 Authority Key Identifier:
keyid:22:9E:06:4A:CF:43:2F:64:DA:A7:01:7A:66:BE:8B:61:A9:6B:18:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/Ip4GSs9DL2TapwF6Zr6LYalrGFo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ip4GSs9DL2TapwF6Zr6LYalrGFo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121995/9E36BFA44C1711EEAABF032BC4F9AE02/5559811AC52311EEAEEC2E3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.36.255.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:04:cf:b5:64:40:ad:88:c5:14:af:93:5a:ee:0a:b0:26:bf:
ee:4b:ce:fe:1e:5b:c3:36:c0:03:ca:37:5e:a4:04:06:47:1a:
6c:76:68:b8:f3:ed:a4:5a:1e:87:ae:42:33:2e:e5:3a:c8:88:
28:a3:a8:71:40:eb:81:33:9b:65:0e:73:0a:c0:40:07:cf:c9:
d6:6a:d1:37:29:8f:4b:fb:d1:0b:8f:a9:79:c6:8a:4f:2b:5b:
ad:cb:1f:60:f6:17:ff:b8:59:ba:4e:9d:97:ca:c9:a8:b9:ef:
ae:06:c3:fe:c6:00:55:07:42:10:27:43:37:a2:fa:27:a2:60:
5a:66:ed:5a:83:9b:9a:be:bd:56:f5:7e:d7:e1:fd:72:d0:57:
1f:52:ba:1a:78:57:68:2f:b0:59:92:75:ec:4f:2f:a6:21:fb:
e6:f2:ac:39:78:bf:1c:12:ab:63:de:57:bf:2a:fc:0a:bc:cb:
8f:32:08:c4:cf:07:e0:87:0a:a6:6e:31:02:42:31:6c:b3:da:
e7:99:75:2d:aa:30:c7:c7:79:85:b9:15:25:ff:96:5c:fc:5a:
ac:b2:5f:ad:49:b5:95:af:2f:63:00:cf:fc:22:a6:f4:5d:21:
1d:4a:b5:ef:b0:4a:dd:24:36:73:70:2e:02:5e:ec:33:82:43:
bd:fa:4c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:14 2026 by rpki-client