
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa
File: BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa (raw, json)
Hash identifier: YLl0P9jlwEhhHZ25T2nyiDfkAV9RXLStwFdD/BEgbUk=
Subject key identifier: 3B:DC:FA:29:AD:FC:25:82:30:B5:3D:8F:4F:BB:02:4A:53:A5:33:3D
Certificate issuer: /CN=A9138271/serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Certificate serial: 0570
Authority key identifier: 01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:42:17 +0000
ROA not before: Fri 17 Oct 2025 01:35:17 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 147029
IP address blocks: 103.173.60.0/23 maxlen: 23
103.173.60.0/24 maxlen: 24
103.173.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1392 (0x570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138271, serialNumber=01724BA2F40532B7E08D720F4C096641B4A1C8C4
Validity
Not Before: Oct 17 01:35:17 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a43429-926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:54:c2:fe:c6:fe:7f:e0:3a:7b:f9:24:f2:
30:cb:5f:c4:11:78:06:f3:db:50:ad:43:3e:a8:df:
6d:28:4d:42:cd:cc:c3:a2:8f:ce:5e:6a:12:95:ff:
8e:bc:e9:9b:53:9e:89:5c:af:ee:c4:2e:38:7b:05:
1a:aa:4f:07:f3:89:a6:26:e8:3b:2c:b0:48:ca:e4:
9b:62:c8:32:0f:06:ee:c9:a1:d8:cf:9e:32:9e:c4:
5c:17:ec:5e:e3:b0:a4:c5:6a:ea:d2:3e:14:79:46:
e0:6f:c5:8a:5c:c9:3b:9d:89:73:c1:9d:5a:7a:40:
6c:05:ee:3b:0d:8a:bc:f1:24:99:c5:df:1a:16:ff:
48:38:c1:91:f8:c0:be:c4:4d:38:4a:8d:f8:aa:42:
63:d1:fa:d7:cd:06:5b:ba:49:dc:ce:0f:b2:ab:9c:
eb:8a:40:df:74:c1:67:96:ac:7a:1e:fa:87:be:11:
ba:a6:a2:af:86:da:69:ef:ed:c9:40:8e:03:6a:5e:
af:62:c8:f9:bc:20:0a:41:73:2d:04:0b:fc:2f:7b:
6e:9d:2b:79:5b:60:02:b3:8c:4d:a9:0a:c9:1d:11:
84:38:92:55:d7:62:a3:5b:05:c4:ca:47:f9:b8:26:
52:02:13:eb:d8:20:d6:37:56:a7:cb:7f:3a:55:e8:
45:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DC:FA:29:AD:FC:25:82:30:B5:3D:8F:4F:BB:02:4A:53:A5:33:3D
X509v3 Authority Key Identifier:
keyid:01:72:4B:A2:F4:05:32:B7:E0:8D:72:0F:4C:09:66:41:B4:A1:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/AXJLovQFMrfgjXIPTAlmQbShyMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AXJLovQFMrfgjXIPTAlmQbShyMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138271/81F9E2D01C4411EC9B2E6A5FC4F9AE02/BD4D8A2C1C4811ECBAA21A3CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.60.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:69:5b:f1:74:c4:2a:7d:87:09:d1:66:39:e2:15:99:ab:7c:
6f:91:68:06:7e:4b:7a:f8:04:6b:f6:c2:de:ce:d3:a8:56:b0:
3d:f7:6f:6c:ef:56:3a:33:03:a9:60:bb:58:cc:87:d6:a4:63:
f6:66:f4:49:0c:a8:b2:61:bd:a3:9c:7b:3d:da:14:0a:62:3e:
cd:45:59:b1:12:34:c4:18:09:c0:75:82:46:0d:62:23:96:cb:
67:ac:8a:8c:4a:10:6a:7b:e7:75:a7:90:c2:d8:80:37:4a:a7:
4e:ec:cc:a5:5e:9c:55:31:d8:7f:65:51:6a:e3:7f:7c:54:9f:
96:e7:1f:77:73:ab:b5:4d:d4:a5:42:fb:ff:67:35:5c:06:0c:
d2:8c:1d:22:63:6d:38:fd:73:6f:9f:ef:90:69:cb:8d:d0:f9:
81:e0:40:39:6c:d0:40:15:85:c9:fd:95:8d:cd:f3:95:2b:85:
88:11:f4:f2:4e:6f:87:ff:a4:b3:91:b0:1e:0a:9c:40:55:ce:
f8:c4:ae:14:ef:73:bd:1d:e3:60:3e:14:4a:14:c3:0c:bd:ba:
64:5b:60:7c:a5:93:0c:e7:a6:05:57:d4:5d:88:28:b4:69:84:
4c:99:57:e0:7b:cf:df:42:5a:5b:7d:cb:88:d6:11:d5:2b:43:
66:a8:de:ef
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgyNzExMTAvBgNVBAUTKDAxNzI0QkEyRjQwNTMyQjdFMDhENzIwRjRDMDk2NjQx
QjRBMUM4QzQwHhcNMjUxMDE3MDEzNTE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzQyOS05MjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9VUwv7G/n/gOnv5JPIwy1/EEXgG89tQrUM+qN9tKE1CzczDoo/OXmoSlf+O
vOmbU56JXK/uxC44ewUaqk8H84mmJug7LLBIyuSbYsgyDwbuyaHYz54ynsRcF+xe
47CkxWrq0j4UeUbgb8WKXMk7nYlzwZ1aekBsBe47DYq88SSZxd8aFv9IOMGR+MC+
xE04So34qkJj0frXzQZbuknczg+yq5zrikDfdMFnlqx6HvqHvhG6pqKvhtpp7+3J
QI4Dal6vYsj5vCAKQXMtBAv8L3tunSt5W2ACs4xNqQrJHRGEOJJV12KjWwXEykf5
uCZSAhPr2CDWN1any386VehF3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDvc+imt
/CWCMLU9j0+7AkpTpTM9MB8GA1UdIwQYMBaAFAFyS6L0BTK34I1yD0wJZkG0ocjE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODI3MS84MUY5RTJEMDFD
NDQxMUVDOUIyRTZBNUZDNEY5QUUwMi9BWEpMb3ZRRk1yZmdqWElQVEFsbVFiU2h5
TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FYSkxvdlFGTXJmZ2pYSVBUQWxtUWJTaHlNUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzgyNzEvODFGOUUyRDAxQzQ0MTFFQzlCMkU2QTVGQzRGOUFFMDIvQkQ0RDhBMkMx
QzQ4MTFFQ0JBQTIxQTNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ608MA0GCSqGSIb3DQEBCwUAA4IBAQCeaVvxdMQqfYcJ0WY54hWZ
q3xvkWgGfkt6+ARr9sLeztOoVrA9929s71Y6MwOpYLtYzIfWpGP2ZvRJDKiyYb2j
nHs92hQKYj7NRVmxEjTEGAnAdYJGDWIjlstnrIqMShBqe+d1p5DC2IA3SqdO7Myl
XpxVMdh/ZVFq4398VJ+W5x93c6u1TdSlQvv/ZzVcBgzSjB0iY204/XNvn++QacuN
0PmB4EA5bNBAFYXJ/ZWNzfOVK4WIEfTyTm+H/6SzkbAeCpxAVc74xK4U73O9HeNg
PhRKFMMMvbpkW2B8pZMM56YFV9RdiCi0aYRMmVfge8/fQlpbfcuI1hHVK0NmqN7v
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:18 2026 by rpki-client