
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa
File: 2DED090C18F211F0B4DFD036C4F9AE02.roa (raw, json)
Hash identifier: QwcWggysiIN/qu89lpg8s3X9XsV3FtgMOmGjCeqPf7M=
Subject key identifier: 5D:BD:50:C2:99:4D:ED:43:8A:FD:F0:14:7F:38:44:F9:6C:EE:5B:D0
Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial: 030A
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa
Signing time: Sat 11 Apr 2026 01:33:08 +0000
ROA not before: Sat 11 Apr 2026 01:33:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139358
IP address blocks: 103.211.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778 (0x30a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Validity
Not Before: Apr 11 01:33:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d9a4d4-8815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:7c:e1:93:96:e2:1f:04:0d:2b:fd:15:c9:
08:2a:ac:2d:42:2c:c2:a4:46:bc:a3:8e:87:10:2c:
cd:06:a0:db:9f:41:f1:90:70:48:7f:8c:51:32:86:
15:9a:4f:e1:e4:e7:1b:8c:49:8b:2d:46:56:07:0c:
67:c4:ff:33:70:11:4e:d5:4f:20:42:71:2f:0c:fc:
56:81:36:41:a3:dc:e1:09:6c:64:6d:43:b9:1d:64:
44:66:65:df:62:e7:dd:68:95:a4:0a:4d:51:e3:02:
e3:57:de:cb:fb:78:d0:24:e9:14:c9:76:38:55:1b:
5f:57:48:3e:28:f6:ba:5e:8a:c9:34:be:50:21:6d:
9e:cd:36:1c:1a:fc:a5:32:62:43:19:74:76:e8:5c:
71:bd:8e:21:21:22:7a:d2:e4:84:ba:4a:f5:a7:9b:
3d:cd:bb:4a:9b:eb:98:6a:f1:9f:c2:2f:52:36:05:
d6:ca:d6:42:7b:7a:93:d9:09:a3:11:2c:4a:bd:eb:
b1:1b:95:4a:f3:ad:e1:42:ba:d0:02:a3:f1:2c:8d:
40:7d:98:4c:62:a3:c6:53:46:89:95:cd:49:47:8d:
64:65:8a:7b:61:bd:fb:2d:99:ee:73:a4:eb:81:4c:
2f:10:8c:c5:d7:52:55:9f:dd:5a:3d:00:51:f0:be:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:50:C2:99:4D:ED:43:8A:FD:F0:14:7F:38:44:F9:6C:EE:5B:D0
X509v3 Authority Key Identifier:
keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/2DED090C18F211F0B4DFD036C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.211.71.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:12:48:70:f6:3b:4e:cc:5d:41:99:a8:49:f5:d7:ea:93:b8:
4d:6c:0e:aa:e9:b5:62:11:40:1f:d2:3f:cc:b7:26:29:87:a0:
86:47:25:b8:9e:92:e5:63:55:bf:ae:a2:34:4c:bc:6d:7b:cd:
e1:d4:0a:21:77:ae:65:6a:69:ec:5f:20:be:56:59:72:af:d0:
bf:74:b7:e1:0b:0e:ff:81:af:fa:bf:24:27:c8:c7:34:20:42:
d1:a1:bb:b7:9c:e4:13:49:08:d6:09:41:14:d0:a3:14:d4:6c:
f9:7d:ff:b9:3e:29:9a:d4:ca:33:35:9e:07:7c:13:fc:de:a0:
9a:18:36:e3:b2:2d:6a:df:4b:4e:b2:d8:d0:62:eb:ae:99:30:
80:c7:11:63:1c:e3:61:4d:93:73:65:90:d7:47:b8:80:b2:63:
e8:02:eb:8a:e7:34:f0:ac:18:1c:51:d2:a0:8c:37:05:2d:bb:
fc:95:64:fa:fa:19:31:93:5e:bf:be:22:6a:d0:c1:6d:72:d4:
00:0c:45:f3:fe:6b:82:10:26:b9:f3:3c:cc:2d:ca:2f:8a:62:
5b:ad:e1:17:48:a2:7a:88:81:41:ad:fc:b0:52:40:0f:77:1e:
a0:6d:0f:3e:32:f6:0e:e3:f2:46:46:74:19:c6:41:1b:b5:93:
2d:a5:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:46:48 2026 by rpki-client