
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa
File: B534A848E2CE11EFA7030E56C4F9AE02.roa (raw, json)
Hash identifier: DkhuldH+A9mYCIox+Ay4O9Fu6YyyyV2CawGamuW15Qk=
Subject key identifier: 7C:15:1D:25:49:28:99:5E:88:32:B4:21:71:ED:EC:C2:2E:93:F8:81
Certificate issuer: /CN=A9138959/serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Certificate serial: E4
Authority key identifier: 0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:06:47 +0000
ROA not before: Wed 05 Nov 2025 06:50:49 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140999
IP address blocks: 103.173.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138959, serialNumber=0E93661AC16154F65D2A2F781A031F35C9310103
Validity
Not Before: Nov 5 06:50:49 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59977-1000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:40:08:11:7e:8a:48:f2:c2:39:a5:f8:3e:
60:8d:1b:b6:ba:60:b3:6c:26:80:98:f6:53:91:87:
ac:27:57:0e:ca:6c:b6:a4:c3:d3:89:90:86:ee:15:
f8:a4:b3:d5:b3:2c:77:09:60:53:de:d6:d4:0a:d7:
7f:0f:9e:96:a0:00:c2:37:2d:ab:a3:d2:0f:44:4b:
d6:05:89:c8:70:b9:cb:72:b3:c0:24:ba:06:69:89:
d8:ac:ef:6b:e8:1b:03:a2:59:4f:95:c3:ce:c6:ec:
91:9b:09:b9:cc:2a:c9:be:72:09:f0:53:3f:4e:ea:
2b:49:63:6d:7f:12:db:9a:42:fe:6f:b2:7e:d4:81:
4f:94:05:d4:82:2d:25:7c:00:48:9b:4e:fc:eb:da:
df:ae:40:ac:2c:56:45:9b:01:9e:71:b7:92:b7:95:
38:03:d0:f4:2a:b8:ec:f3:82:8e:c5:e2:ad:23:9e:
82:58:38:fe:a0:72:42:92:42:85:29:8c:d3:16:39:
c5:c5:b3:19:c6:c8:57:2c:f5:78:38:f1:44:56:03:
07:19:6a:00:0d:82:bd:2a:71:09:e4:c9:20:15:0a:
6b:ec:3e:39:d4:0a:16:18:d0:08:dc:81:99:3e:01:
26:76:fd:04:ec:f2:f0:c2:11:0d:fa:82:bf:6a:cb:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:15:1D:25:49:28:99:5E:88:32:B4:21:71:ED:EC:C2:2E:93:F8:81
X509v3 Authority Key Identifier:
keyid:0E:93:66:1A:C1:61:54:F6:5D:2A:2F:78:1A:03:1F:35:C9:31:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/DpNmGsFhVPZdKi94GgMfNckxAQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DpNmGsFhVPZdKi94GgMfNckxAQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138959/BBD1408CCDEB11EFB53A1B20C4F9AE02/B534A848E2CE11EFA7030E56C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:8b:81:fe:5a:e4:02:d5:83:5e:59:1f:a8:c4:90:26:bb:61:
e7:a4:6f:b5:26:ca:9d:73:c4:43:9d:35:c2:1a:ad:92:06:90:
70:1b:d5:2e:12:e5:4f:16:40:ff:22:c8:fc:14:c7:5f:f0:0c:
e9:20:74:66:ac:86:69:98:7a:13:69:2f:fb:01:b0:e9:a2:63:
84:3a:63:e4:5f:87:49:7b:44:e6:89:80:44:b7:ec:18:59:00:
f0:32:3b:ca:d7:68:2d:3c:9f:6e:59:32:06:b0:fa:8b:93:0e:
f5:bd:e7:c8:30:83:51:15:2d:af:3f:ba:89:61:ea:28:dc:0a:
fb:f9:fb:fc:b5:99:e3:3b:37:f5:05:ff:5f:75:66:7c:13:2d:
4f:8b:39:e3:fc:69:d2:54:e8:b2:9a:38:81:75:0d:60:96:2f:
a9:65:8a:0b:6f:0d:92:aa:22:94:e1:ce:0d:e6:6c:ef:8b:d1:
6d:39:10:60:bb:1a:9c:42:3d:63:a4:a1:72:0c:8f:2b:93:db:
27:84:1e:3a:75:27:b1:89:9c:c6:56:f5:10:f1:58:35:2a:c6:
9f:01:19:75:a2:13:12:ca:85:39:15:71:f5:c6:cf:7e:f1:0d:
dc:99:12:85:5f:34:3e:81:0a:8f:0b:0a:0f:43:c7:73:81:79:
1e:a4:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:15 2026 by rpki-client