
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa
File: 075B4CC80AC511EEB25A152AC4F9AE02.roa (raw, json)
Hash identifier: +UwT5EuzqCMtcr13ivyOvHZ5BUB5y0RPoEF85OdZpKM=
Subject key identifier: 62:E5:DA:0D:A7:CA:43:AE:2B:5B:94:9C:05:A7:AE:C9:EC:42:90:A0
Certificate issuer: /CN=A9134BB0/serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258
Certificate serial: 0230
Authority key identifier: 0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa
Signing time: Mon 25 May 2026 03:33:49 +0000
ROA not before: Mon 25 May 2026 03:33:49 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 141192
IP address blocks: 103.131.136.0/23 maxlen: 23
103.131.136.0/24 maxlen: 24
103.131.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl
rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 03:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134BB0, serialNumber=0F6142AE4168DF0B1805FA581D20394767AA2258
Validity
Not Before: May 25 03:33:49 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a13c31d-ac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:22:21:12:3c:e4:ea:7b:cd:b6:c9:65:15:
e4:ff:1d:1e:00:d4:86:d1:31:45:49:5e:0a:51:73:
31:be:f1:97:f4:d5:55:10:56:73:df:c4:27:41:55:
f8:6b:bc:b0:e2:33:ee:12:9f:35:18:97:ad:5d:52:
23:72:52:7e:d7:eb:ba:c8:54:bc:f4:0b:34:c6:15:
e6:68:4a:ee:c0:72:00:69:b6:20:6f:3b:56:08:97:
9a:07:a3:42:29:00:73:b3:b7:e6:fc:55:50:04:b6:
49:41:ba:a2:62:70:83:c9:6b:e4:87:27:11:11:5f:
40:f3:05:e1:b3:54:24:01:39:70:a3:e4:71:61:dc:
5e:72:10:33:94:90:37:ad:8c:ab:a8:72:da:87:b9:
6a:22:4f:6b:d6:f5:af:4a:b1:d0:1f:b1:f6:2d:ff:
a2:de:df:55:08:5a:ee:82:9f:a3:6c:f1:64:c9:a3:
28:61:8a:67:17:0a:11:26:8a:93:cd:28:b0:8d:b0:
62:3c:7d:54:b9:ad:1b:0e:c7:c6:9f:73:48:d9:93:
65:fe:4f:0a:0a:c0:2a:01:85:eb:f3:ab:bd:e3:3b:
73:e3:33:aa:b0:6d:96:5d:a5:27:0f:83:a8:96:12:
67:a9:06:78:ce:4d:5a:a9:87:5b:4f:f4:d4:59:9c:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E5:DA:0D:A7:CA:43:AE:2B:5B:94:9C:05:A7:AE:C9:EC:42:90:A0
X509v3 Authority Key Identifier:
keyid:0F:61:42:AE:41:68:DF:0B:18:05:FA:58:1D:20:39:47:67:AA:22:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/D2FCrkFo3wsYBfpYHSA5R2eqIlg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2FCrkFo3wsYBfpYHSA5R2eqIlg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134BB0/DD4738E00ABD11EE917DA655C4F9AE02/075B4CC80AC511EEB25A152AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.136.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:1a:6b:4c:c9:5a:ef:ab:62:e5:d5:b4:4d:74:1b:00:00:cf:
49:2c:0e:b9:96:e4:12:17:ee:a2:78:9e:c0:8e:00:04:91:d7:
f3:c6:5b:07:77:93:4d:43:fd:48:a7:47:fe:01:e9:0f:9f:67:
26:9b:87:8c:5a:e8:da:d8:dc:26:97:03:71:de:46:0e:14:f1:
f0:95:b6:30:96:5c:43:19:aa:b7:1c:6d:87:9b:91:3e:9c:5d:
2a:11:7b:53:59:bd:d3:bd:9b:f7:cb:78:12:40:19:53:19:cd:
28:99:a6:a8:0c:a7:10:e6:72:20:01:05:a7:1e:60:b8:93:47:
71:d4:b1:67:0c:f1:7d:dd:7f:dc:2a:b7:c1:8a:dd:1d:39:93:
79:db:59:9c:65:97:43:1c:4f:07:8d:8f:02:93:70:c0:c7:74:
a2:38:72:d0:a0:59:f2:fa:91:35:9a:0f:0a:8a:38:8d:a9:cd:
de:ca:7c:06:16:1d:94:a1:3c:86:a7:69:28:38:43:3d:3e:75:
d6:f0:5e:9a:d5:24:f0:67:7f:15:35:fb:19:f1:bb:b0:e6:38:
bb:bd:bb:f6:c0:61:e7:2b:5e:70:13:d8:da:27:b4:7d:94:8b:
6e:50:d9:d1:e2:70:17:8a:22:2e:6f:2a:90:15:42:30:a3:33:
ce:a5:88:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:48 2026 by rpki-client