
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
File: 311647C0896C11EBA85B0747C4F9AE02.roa (raw, json)
Hash identifier: zMtRMkuQyjR3f+OZcrZ0sMRUtol4cpm+c1eIBbUYQJE=
Subject key identifier: 62:1B:9B:CC:D1:4D:18:93:07:74:D5:7D:02:65:A1:32:2F:54:08:4D
Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Certificate serial: 0A2B
Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
Signing time: Thu 16 Jul 2026 20:20:50 +0000
ROA not before: Thu 16 Jul 2026 20:20:50 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132290
IP address blocks: 103.140.82.0/23 maxlen: 24
2001:df0:b380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 20:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603 (0xa2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2
Validity
Not Before: Jul 16 20:20:50 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a593d22-a2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:f2:2b:67:c2:0d:7d:96:48:f6:c5:c7:ee:
74:e5:5b:09:ca:2b:56:bd:a2:a5:46:1c:24:7b:e1:
c0:98:ac:b3:5b:f7:11:75:8a:a9:1a:91:ab:2f:a4:
aa:35:f7:6c:8e:d6:95:a0:81:11:ba:1a:26:50:fc:
59:ce:43:d2:5b:fa:8a:1f:4e:ab:06:64:96:2d:ba:
dd:bd:cc:20:d9:85:e6:2d:e4:7e:b1:5c:6a:2c:69:
ae:63:bb:95:30:f6:4f:49:2e:60:e0:a6:2e:ef:62:
b0:04:e4:21:f0:68:43:02:1a:9f:79:28:fb:3e:0a:
e6:0a:73:85:ce:9e:0d:59:0c:33:c1:d8:ac:9c:8f:
73:f6:af:b1:4f:81:58:64:3c:03:50:b5:f4:86:91:
d5:31:81:54:df:b9:21:86:30:86:aa:46:cc:9e:64:
4b:01:55:7d:67:39:18:5b:06:2e:ff:37:fc:a6:43:
dd:80:f6:ff:1c:6e:6c:90:6b:4e:62:e4:1b:b3:7f:
2d:38:4f:f7:3a:44:1f:b1:79:d2:ca:05:05:06:04:
e7:55:b3:f7:38:36:ff:28:44:57:43:72:e9:88:b9:
2d:bd:da:43:3c:35:31:fb:ab:e7:09:47:64:56:6a:
9d:38:e2:09:c8:11:19:d0:f1:59:fe:17:af:0e:05:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1B:9B:CC:D1:4D:18:93:07:74:D5:7D:02:65:A1:32:2F:54:08:4D
X509v3 Authority Key Identifier:
keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/311647C0896C11EBA85B0747C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.82.0/23
IPv6:
2001:df0:b380::/48
Signature Algorithm: sha256WithRSAEncryption
ba:d7:0f:7c:0e:51:b7:e2:fa:e2:f4:2d:05:30:bc:60:6b:bc:
f0:c4:da:0e:81:10:94:8f:77:16:29:1b:36:31:1e:e1:95:08:
28:4e:63:cd:2e:d4:73:c6:67:c8:41:ef:df:47:29:d6:b5:89:
a2:29:d7:47:45:1b:7f:8f:a8:7a:8b:57:b4:27:45:0f:23:aa:
fb:0d:3f:43:95:d8:56:97:c2:51:9d:80:64:0f:99:f8:b9:3d:
b9:a1:a3:78:b1:45:33:9e:e2:6d:dd:d6:ef:35:b5:8a:71:ab:
5c:98:00:9e:3f:c9:26:7c:21:a8:1b:7d:d9:3a:5a:01:99:b1:
47:ab:fe:cc:ae:9b:e3:5d:49:9e:df:aa:86:ad:59:3c:8e:82:
c5:72:14:d7:d6:c7:fd:75:5c:89:bf:21:4b:b7:ff:e1:82:53:
11:41:9d:d2:bd:ff:59:7b:9b:25:b8:1b:22:11:af:65:a4:d1:
9a:8d:7f:85:74:50:5e:4d:9f:4f:4b:22:8d:53:ce:4b:97:a1:
6a:17:5f:9d:a9:f2:0f:12:80:17:31:b2:37:65:08:8a:35:f8:
7c:bf:3e:eb:59:49:2b:8b:c1:46:2e:e8:d4:e2:8b:57:d6:ce:
18:bb:ff:9b:9b:be:9f:f0:cd:6f:c3:b8:ef:4b:dd:c9:76:b5:
f2:2c:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:56:17 2026 by rpki-client