
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
File: 63EF8E3C2EA711F1ABA05366B9833773.roa (raw, json)
Hash identifier: EA6d672FegDLOWHoAcJLbYpa0U9r/Z+33amyClBYG4o=
Subject key identifier: 09:BD:64:9B:5C:86:47:1E:33:9A:E8:38:3D:37:9F:9E:BC:FB:76:9C
Certificate issuer: /CN=A9123B8B/serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Certificate serial: 0A03
Authority key identifier: B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
Signing time: Thu 16 Apr 2026 15:51:47 +0000
ROA not before: Thu 16 Apr 2026 15:51:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 154320
IP address blocks: 103.151.134.0/24 maxlen: 24
103.151.135.0/24 maxlen: 24
2402:5060::/48 maxlen: 48
2402:5060:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563 (0xa03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123B8B, serialNumber=B6BB6364BCE485CEC06D3399491587A482591CBC
Validity
Not Before: Apr 16 15:51:47 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69e10593-3859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b3:fb:87:ff:6a:13:0a:25:2d:a1:f9:5c:97:
4b:f3:fc:ae:dd:da:1e:5e:77:6b:04:7c:b9:d8:b0:
fa:89:19:b0:0c:e0:af:12:78:81:25:9d:2d:47:b5:
8e:f8:c8:c0:86:fc:fe:04:0f:33:2a:5f:5a:02:c4:
22:bc:e4:84:8b:f7:d4:41:b3:c5:e3:94:27:9f:a7:
13:40:4a:dc:9e:d1:86:28:a5:4c:01:ef:b2:fb:f0:
78:65:31:76:46:f2:c6:19:4c:83:f8:c0:17:8a:22:
bb:bc:ef:44:25:78:55:d9:a8:ed:b6:92:a8:79:64:
5d:8c:20:99:53:e7:40:65:94:69:20:31:a8:61:1e:
28:1e:e9:bc:b1:72:96:f6:b0:1d:c1:b4:09:39:d4:
94:5f:31:ba:a7:5f:da:d6:bc:5e:3f:ae:a7:c7:41:
07:3b:fd:54:56:da:91:01:ff:e1:d6:ce:2d:58:9f:
5c:8d:fa:c7:e7:f9:f8:29:49:41:13:d1:21:aa:3c:
94:40:c5:43:a9:2d:46:3f:ee:c0:34:7d:28:12:8f:
65:01:c4:23:57:47:6a:19:d8:26:e5:59:0f:cd:80:
76:60:f4:6f:79:a1:9e:0e:ad:72:37:e8:08:0a:db:
ad:08:03:64:64:68:71:13:39:e7:d7:9f:8b:4e:57:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BD:64:9B:5C:86:47:1E:33:9A:E8:38:3D:37:9F:9E:BC:FB:76:9C
X509v3 Authority Key Identifier:
keyid:B6:BB:63:64:BC:E4:85:CE:C0:6D:33:99:49:15:87:A4:82:59:1C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/trtjZLzkhc7AbTOZSRWHpIJZHLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/trtjZLzkhc7AbTOZSRWHpIJZHLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123B8B/7ACCCB409C6F11EA8C659B3FC4F9AE02/63EF8E3C2EA711F1ABA05366B9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.134.0/23
IPv6:
2402:5060::/47
Signature Algorithm: sha256WithRSAEncryption
0a:f4:37:d4:5c:b2:3e:a4:b5:2c:46:0d:52:98:14:38:2b:7a:
fb:53:c1:b5:41:0a:43:05:50:77:2c:b8:98:97:22:0a:3d:c2:
2f:e6:e5:bd:67:47:ff:81:2e:1e:6e:25:4e:6a:44:20:f7:43:
94:29:52:d6:f0:bc:4c:86:06:67:2b:d9:4f:65:a5:2c:ae:ee:
50:61:f0:9e:15:4a:fc:a3:8d:a5:41:b2:23:30:2d:48:5f:ce:
f5:da:27:b0:85:9b:2f:bc:7c:fc:38:b6:0b:81:82:4d:52:2d:
33:bf:7c:51:7c:4c:a0:67:81:4a:4f:71:67:e2:25:37:6c:fb:
47:4a:ed:3d:fc:3c:f8:7e:e0:bf:8b:7a:99:50:17:2e:df:99:
e8:44:04:7c:4d:0e:3e:7a:f2:d9:3c:a2:60:8d:63:7e:19:31:
84:86:11:49:7b:3e:4b:47:c0:7e:d7:b4:85:89:2c:60:c2:d6:
70:63:a5:29:19:64:e5:46:9d:1a:a1:70:9f:1e:a1:92:22:cb:
96:de:1a:17:6b:99:6f:5d:b1:ac:8c:ee:1d:7e:07:93:bc:b0:
0d:94:89:9e:9e:e5:bb:ee:19:df:b2:89:de:3e:08:1b:fa:e8:
e1:f5:17:6e:28:30:ed:b6:45:8f:5e:8e:e6:c4:c6:67:af:85:
a6:f5:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:04 2026 by rpki-client