
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/1332B7BCEC7211EFBA9EF77FC4F9AE02.roa
File: 1332B7BCEC7211EFBA9EF77FC4F9AE02.roa (raw, json)
Hash identifier: 83S9kb6OGNn37zbxzjs/VZaupSB57nmnIXzCk9HBeI0=
Subject key identifier: 88:BE:2B:3B:FC:E2:BB:87:61:1C:98:57:C9:3E:B2:DE:79:17:7E:35
Certificate issuer: /CN=A9143078/serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Certificate serial: 0417
Authority key identifier: 0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/1332B7BCEC7211EFBA9EF77FC4F9AE02.roa
Signing time: Wed 25 Feb 2026 04:17:18 +0000
ROA not before: Wed 25 Feb 2026 04:17:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10111
IP address blocks: 103.183.218.0/24 maxlen: 24
103.183.219.0/24 maxlen: 24
2400:6460::/40 maxlen: 40
2400:6460:10::/44 maxlen: 48
2400:6460:f0::/48 maxlen: 48
2400:6460:f1::/48 maxlen: 48
2400:6460:f2::/48 maxlen: 48
2400:6460:f3::/48 maxlen: 48
2400:6460:ff::/48 maxlen: 48
2400:6460:100::/40 maxlen: 48
2400:6460:300::/40 maxlen: 48
2400:6460:500::/40 maxlen: 48
2400:6460:600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143078, serialNumber=0C2042E5FC3361FF7356936D097E1244AFC626CE
Validity
Not Before: Feb 25 04:17:18 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699e77ce-8ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:61:4b:b8:bd:f3:a6:46:3e:53:4d:93:77:
64:38:68:95:e6:e5:5b:e7:2a:d0:e6:36:5c:47:8b:
19:4a:b6:ce:60:e9:da:6e:63:1a:83:c6:a4:6a:b8:
7b:e7:d2:ec:13:30:32:68:65:b1:4d:6b:d9:e0:88:
be:a5:62:cc:63:65:4c:07:87:a2:39:d3:c6:76:e3:
e6:b6:e5:44:33:27:5b:92:5b:a9:36:1e:ba:c1:c6:
57:3c:1e:65:c2:08:35:da:41:7f:6f:65:68:a5:34:
0c:fb:c5:8e:ed:02:1b:71:31:fc:d3:89:1c:0e:9f:
b8:b9:b2:af:2f:41:75:50:ed:85:e7:03:fc:ce:4c:
af:04:92:11:8d:8f:75:e6:a9:2b:a3:99:ca:81:fe:
ba:bd:ba:dc:eb:1e:20:4d:44:b7:bf:bc:d7:86:4c:
9e:2d:a1:bb:fc:f0:ad:df:ad:da:ad:22:f6:50:e0:
2a:f0:ba:2b:a5:26:38:fe:15:ba:37:33:f7:04:37:
4d:52:cc:7d:1d:bb:89:b1:3d:c4:a6:17:59:7c:71:
52:c5:ad:a7:61:b8:7a:df:4d:1d:1a:21:77:4d:bd:
0e:19:9b:5f:ba:57:b3:63:df:f5:e3:35:15:36:36:
ad:48:ea:14:0d:6e:a2:ca:dc:df:12:63:79:65:88:
58:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BE:2B:3B:FC:E2:BB:87:61:1C:98:57:C9:3E:B2:DE:79:17:7E:35
X509v3 Authority Key Identifier:
keyid:0C:20:42:E5:FC:33:61:FF:73:56:93:6D:09:7E:12:44:AF:C6:26:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/DCBC5fwzYf9zVpNtCX4SRK_GJs4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DCBC5fwzYf9zVpNtCX4SRK_GJs4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143078/DA29B4AEAD1111EC989E3A0DC4F9AE02/1332B7BCEC7211EFBA9EF77FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.218.0/23
IPv6:
2400:6460::/39
2400:6460:300::/40
2400:6460:500::-2400:6460:6ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:e2:49:5a:1d:99:2a:33:77:9b:59:6a:c6:74:29:d0:29:e9:
93:5b:05:f6:aa:53:f4:75:c8:ff:68:2e:a8:23:73:a8:95:f4:
88:25:60:7f:9f:5a:11:20:07:67:40:45:c5:2a:04:64:53:0b:
3c:d4:2f:46:63:7c:b7:bf:26:bf:5b:ce:ac:48:e2:8e:d3:07:
53:ef:6d:d2:dd:bd:48:14:df:6d:fa:d7:f1:ec:a1:dd:86:b3:
51:f9:5d:a7:5a:16:7e:dd:25:3f:d8:31:12:21:99:6d:4d:c0:
11:c2:e4:a8:2b:8e:34:79:3c:3a:50:50:2c:16:48:15:3d:6d:
ab:a0:3b:c5:61:6b:20:89:34:c0:3a:b9:c7:ae:fa:67:06:a4:
08:82:77:1c:32:71:62:d5:b1:31:21:3b:d3:bc:d7:02:71:e8:
57:24:e7:14:d2:cd:3d:58:9c:8d:5c:a1:4a:87:5d:f4:e6:35:
9c:f1:81:c7:75:15:cb:d5:0b:5d:65:b2:36:e6:6e:54:91:00:
13:00:d5:89:5f:39:56:44:7e:54:b2:df:ce:a7:96:48:9b:e5:
b9:32:ad:11:29:fd:17:d2:83:d0:20:e6:c1:7c:c3:06:59:cf:
d4:c8:d3:e3:63:8f:98:5f:47:e2:17:9a:31:b1:c7:90:49:f9:
d1:49:7e:b2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:41 2026 by rpki-client