
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/1776D6CE16B111EAAD7D084AC4F9AE02.roa
File: 1776D6CE16B111EAAD7D084AC4F9AE02.roa (raw, json)
Hash identifier: 2My4J518BuXDlVTrUGKU/R5t7+Fy21v8HniCQ4WnhXU=
Subject key identifier: 21:E2:8B:32:07:27:0B:12:3D:82:05:F9:26:E1:D7:A8:C2:58:94:B8
Certificate issuer: /CN=A9137730/serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Certificate serial: 0C9D
Authority key identifier: 0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/1776D6CE16B111EAAD7D084AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:54:31 +0000
ROA not before: Tue 22 Jul 2025 18:58:47 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 4
IP address blocks: 103.140.158.0/24 maxlen: 24
103.140.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:12:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3229 (0xc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137730, serialNumber=0E318A6A941E60C990861D869B203948C8B48841
Validity
Not Before: Jul 22 18:58:47 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a44517-4ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:52:39:71:75:d9:96:fa:a4:bc:61:5a:d6:
f0:62:88:b6:67:1f:59:3f:93:7e:5f:3f:db:94:8c:
a1:07:9b:61:18:72:22:7c:a2:50:59:81:18:7f:32:
9d:2c:df:50:06:c5:ad:a9:14:78:49:d2:0d:58:db:
06:17:55:a9:12:e4:29:4f:09:29:2f:cc:f9:94:dc:
cd:26:c7:e0:4b:33:06:cf:2f:06:bf:61:f6:ab:5e:
43:66:80:a1:c4:31:19:09:bb:54:24:e4:92:18:bd:
8a:65:9e:ca:52:27:e2:84:78:51:2f:2f:57:65:fa:
7d:ae:b9:46:38:d2:a3:c7:65:e9:8e:1c:0e:19:34:
d6:bb:d6:22:9e:8c:e6:64:23:59:a5:bd:c2:3d:dd:
43:b9:bf:97:90:0a:43:a4:07:e5:58:61:b3:1c:dc:
86:5c:e7:5a:78:43:63:77:0f:2a:97:9e:58:15:fe:
10:9a:d1:f1:94:ac:f6:34:98:a7:54:b0:e4:82:1c:
15:2a:fe:d1:b1:3e:47:b8:51:c3:50:3a:4b:19:23:
fd:15:28:27:43:d3:92:4b:4a:ca:b0:dd:9d:6b:38:
9f:47:0e:0f:11:61:4e:f3:ca:a1:dc:40:a4:a2:2a:
7b:25:1e:27:95:4b:36:fa:18:c5:82:e4:ca:ca:0f:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:8B:32:07:27:0B:12:3D:82:05:F9:26:E1:D7:A8:C2:58:94:B8
X509v3 Authority Key Identifier:
keyid:0E:31:8A:6A:94:1E:60:C9:90:86:1D:86:9B:20:39:48:C8:B4:88:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/DjGKapQeYMmQhh2GmyA5SMi0iEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DjGKapQeYMmQhh2GmyA5SMi0iEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137730/3A49E70E12DD11EABD95596DC4F9AE02/1776D6CE16B111EAAD7D084AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.158.0/23
Signature Algorithm: sha256WithRSAEncryption
47:cc:73:4b:55:e8:a6:d6:94:3c:a1:35:48:3f:f8:cb:09:05:
01:dc:6e:90:91:80:e5:38:33:17:bc:79:4b:45:65:ca:da:47:
ed:d7:bb:a1:9d:89:29:16:f3:93:84:52:d4:b7:9c:7c:68:25:
8f:6c:77:c0:1c:0f:16:98:96:78:ba:bb:a9:74:04:e7:af:08:
70:11:de:7d:9e:58:43:7d:81:48:56:2e:94:d8:dc:2a:95:9d:
85:b4:23:58:a3:9c:04:71:7b:69:3c:d7:83:dc:75:63:66:47:
f7:4e:fb:c8:22:c9:0c:c3:6c:03:ff:18:23:9e:44:52:6b:c0:
20:ea:88:b4:95:51:50:a3:ec:ae:49:79:7b:cd:59:38:7f:ae:
20:87:c1:5e:ce:9d:d4:be:d7:d1:45:cf:76:eb:d6:3a:a4:6a:
1f:0d:99:1b:08:98:2d:b4:8e:de:5c:bd:b7:17:04:73:0f:e2:
67:01:17:f5:01:f1:29:43:ae:8b:8a:f5:3c:db:9b:26:12:86:
ca:28:8c:48:bb:78:d5:6b:76:97:50:ac:c1:d0:3e:29:20:de:
4d:ab:c1:5d:d7:0e:3d:f8:62:fe:a3:76:fc:47:97:36:5c:5b:
c2:bd:f0:fb:d9:10:8c:af:2e:14:38:95:8f:46:a2:75:46:6d:
7f:26:1f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:50:07 2026 by rpki-client