
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/A55682E0821A11EE9104BB68C4F9AE02.roa
File: A55682E0821A11EE9104BB68C4F9AE02.roa (raw, json)
Hash identifier: QSWJtRaUvHeOFFEjg75TUVTs8+hMWvFh5yUB9qsoVJQ=
Subject key identifier: 42:40:AC:CA:65:A7:24:95:94:45:49:45:97:09:D5:2A:14:71:94:B6
Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial: 191B
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/A55682E0821A11EE9104BB68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:43:04 +0000
ROA not before: Tue 04 Feb 2025 16:54:19 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138971
IP address blocks: 103.83.88.0/22 maxlen: 22
103.83.88.0/24 maxlen: 24
103.83.89.0/24 maxlen: 24
103.83.90.0/24 maxlen: 24
103.83.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6427 (0x191b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Validity
Not Before: Feb 4 16:54:19 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a44267-25bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:0a:39:88:69:12:c5:05:24:42:ed:da:39:
e4:93:5a:87:2c:bb:bd:8d:88:a6:8d:0d:66:86:4d:
48:93:28:82:fc:21:bb:5b:d5:f6:5d:17:c3:7c:7f:
f7:f7:5b:1f:df:2a:25:c2:79:a4:b2:1b:4d:55:cf:
0b:f5:e9:8c:91:e8:46:05:54:77:0e:18:54:d7:9b:
e4:de:28:d3:a9:fb:c8:72:2e:6f:b3:3f:05:99:e1:
c2:ac:9d:2a:0b:9d:1a:ac:bb:9d:4b:c5:0e:96:ee:
3c:da:1f:8b:01:7e:15:80:32:ee:48:85:89:bd:05:
f0:5f:c8:41:bb:bb:1e:15:fe:2d:fe:79:9e:6b:b9:
dd:08:01:ad:75:e4:24:fd:3b:3d:26:de:d9:6f:f6:
d9:05:3e:5a:e6:a5:72:a2:cd:c3:08:6c:8d:7d:a6:
7d:1d:ea:49:b9:3a:93:e9:5c:04:45:2e:52:67:03:
5b:df:10:6c:c5:d4:39:62:19:37:47:9d:9c:39:23:
b4:3e:3e:a9:02:41:0f:97:dc:3b:13:2e:69:b9:82:
fe:bc:e8:37:3f:62:6f:32:c4:86:76:74:57:91:6b:
ba:5e:ca:da:4e:35:5b:ae:7f:a8:ed:b7:9a:c5:10:
30:e5:6e:df:07:3a:0b:47:1d:40:40:5d:2c:9c:e2:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:AC:CA:65:A7:24:95:94:45:49:45:97:09:D5:2A:14:71:94:B6
X509v3 Authority Key Identifier:
keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/A55682E0821A11EE9104BB68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.88.0/22
Signature Algorithm: sha256WithRSAEncryption
54:d7:62:99:ab:06:10:f3:5f:0f:26:fd:e4:fc:3d:53:1f:35:
36:51:21:87:61:93:87:a9:b8:42:53:8a:41:d7:f6:34:5f:47:
81:03:cb:5b:75:8c:ac:d8:b2:51:f6:57:ff:af:4c:1f:2f:84:
7e:4c:42:d4:7b:3e:d5:c1:58:7b:36:c1:3a:5f:93:66:f4:ab:
29:4c:bc:fe:e4:fd:e4:0e:39:f2:8a:94:cd:6b:7b:0d:aa:61:
7d:05:5a:66:96:d4:c7:d2:f2:f8:16:6e:9e:49:05:3d:a1:f2:
9f:37:22:11:07:0c:e5:4a:86:1c:14:51:72:2c:06:02:61:99:
a4:d8:2e:8a:1b:90:42:a2:88:c2:1f:ce:cb:59:c1:40:af:d6:
fc:7d:b5:89:2a:f1:5b:c5:98:69:15:57:ce:41:25:b7:db:c5:
fe:bb:f7:94:e1:3f:98:4d:79:b8:92:e5:bc:73:40:ba:4a:3a:
5e:7f:e5:41:21:56:fe:52:af:34:b0:97:ab:45:60:b2:30:d0:
3b:12:b8:5a:55:16:08:5b:cf:ef:8d:bf:d0:99:3f:ba:36:0f:
4e:07:d5:0f:a6:14:0e:22:9a:76:ed:c6:73:68:5b:9f:76:29:
2b:a4:87:c2:34:67:3a:c3:fb:a2:23:e7:9a:fa:d2:d6:43:40:
28:26:2e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:56 2026 by rpki-client