
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa
File: 2DED090C18F211F0B4DFD036C4F9AE02.roa (raw, json)
Hash identifier: BRyHiVdfA5rcD2IpQkNpMRHdXqL3kNvzj/UlFoc/cWo=
Subject key identifier: F6:99:ED:9F:63:61:08:A6:9A:8C:B4:70:24:F8:F7:B8:D7:71:45:B8
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 02ED
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:28:26 +0000
ROA not before: Mon 14 Apr 2025 05:34:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139358
IP address blocks: 103.211.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:38:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Apr 14 05:34:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a44d0a-1905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:c4:6e:7b:58:4a:91:35:df:5b:92:c2:5c:
34:a8:10:08:48:2f:98:9f:6b:16:0d:6b:ff:6a:63:
68:d0:45:03:6a:92:4d:d0:55:16:9b:1a:15:d2:9f:
0a:c8:4c:38:c6:29:a3:1e:05:e4:66:93:55:f8:fd:
f6:73:2b:dd:54:2b:73:90:ef:36:1b:e4:f6:f5:7e:
68:c9:c3:34:7e:56:c1:1d:49:4f:cd:ff:ad:e8:9b:
fa:1a:21:a4:89:88:0e:2d:dc:ab:99:5f:0e:9b:74:
1b:de:ed:ab:75:42:7a:17:a9:3b:63:6a:6c:25:ed:
07:a8:a1:7e:b7:2d:dc:4a:4a:25:27:11:e2:03:95:
aa:bf:04:7d:ca:ef:7b:36:06:61:f1:27:34:48:de:
c7:72:f5:58:1b:27:16:35:af:ba:9b:8f:e5:92:21:
4a:c3:27:43:26:01:95:f4:5d:85:b7:56:4a:46:41:
c6:26:95:94:ac:48:96:99:b2:3a:e2:e2:b4:b9:20:
06:25:ab:35:03:0e:72:f6:12:3a:fe:ac:4c:b3:23:
71:c5:b6:4a:d3:11:bd:d9:9e:96:77:4f:d0:c8:cd:
7e:f9:27:5e:f2:1a:c2:2f:c9:38:19:4a:05:b0:6e:
fd:1b:ac:a0:59:7f:24:d2:2f:e2:d4:b1:b1:ed:e6:
dd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:99:ED:9F:63:61:08:A6:9A:8C:B4:70:24:F8:F7:B8:D7:71:45:B8
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.211.71.0/24
Signature Algorithm: sha256WithRSAEncryption
72:4d:52:84:52:8b:cf:fd:ea:64:25:ad:b8:0b:50:ff:b4:41:
1a:5b:26:fb:db:d3:04:da:e3:b0:ea:23:39:31:3c:c2:65:f5:
55:e5:ef:26:16:67:b5:c2:11:d6:f2:da:d0:5c:e9:dd:92:ba:
78:af:72:f2:c3:87:a4:bf:e1:51:19:3e:ef:fa:d4:52:fa:56:
2b:17:01:1d:15:b3:f7:53:c0:a6:47:64:aa:db:06:ab:2e:9b:
30:9a:12:22:8c:b0:a1:af:dc:7d:a3:af:24:33:4b:b3:fe:59:
a8:56:d8:91:56:b7:46:72:20:55:7a:c9:21:bc:8a:65:8f:8f:
5b:f8:04:1b:b1:ac:14:ec:ef:dd:57:3e:fd:1a:3e:87:1f:5a:
1b:d2:b6:39:4e:35:80:16:65:56:40:ea:bc:e2:7b:24:c2:f0:
79:6e:10:48:9e:aa:45:7f:0a:98:bf:4b:91:5e:96:c9:87:1f:
aa:72:6f:cc:86:66:81:16:bc:fc:33:43:7b:bf:7c:51:24:2f:
0c:1c:10:41:54:a8:cb:94:7c:63:c0:5f:ea:b4:be:c9:b6:29:
ea:1d:ef:3f:4f:2e:88:12:e9:18:98:37:b2:c3:f1:fb:51:04:
55:ca:ea:fd:9f:d3:08:14:30:55:69:58:f2:d5:8c:f7:f2:f4:
2a:b1:c6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:12 2026 by rpki-client