
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa
File: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (raw, json)
Hash identifier: Qj7+4DVUCuo+XKpk6kPAWlDfbi1GJFCenpHteTcWifg=
Subject key identifier: FB:AC:8B:F8:EF:34:6A:E9:E9:32:D0:47:DC:44:6C:CB:BC:1B:4A:62
Certificate issuer: /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial: 61
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:24:03 +0000
ROA not before: Sun 28 Sep 2025 15:09:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139026
IP address blocks: 103.183.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Validity
Not Before: Sep 28 15:09:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a49253-e5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:9e:81:6d:d6:dd:10:46:86:a7:e0:d8:2b:
3b:35:0e:3c:70:d5:74:75:14:3b:17:85:01:c5:cb:
2d:27:7a:d8:43:fe:f2:dc:25:80:b0:2a:54:3a:7f:
51:43:03:a6:10:9d:7e:48:97:d4:8e:df:42:70:96:
10:cb:56:4d:33:06:b4:1c:e6:0d:9e:72:44:4c:be:
23:06:10:17:31:1b:b5:c3:4e:f1:9b:ff:19:8c:12:
c5:46:98:1f:65:26:35:55:e2:3a:f0:a7:3e:80:44:
52:68:f0:90:46:a8:6c:0d:1d:1e:93:c0:84:10:24:
73:42:2d:c2:e2:0b:17:ed:84:8c:b8:70:e5:7d:83:
50:83:95:d7:1d:bf:12:2d:51:c2:18:43:b4:56:53:
04:cc:34:1f:bd:b5:d0:0b:7f:91:4b:e1:9d:42:bb:
c9:26:bc:9b:46:ab:3d:cc:05:e0:77:d7:e7:31:d2:
a1:2e:ff:1b:84:70:71:0d:db:5d:dd:4c:54:63:2b:
a6:2d:3e:7b:0e:89:fa:b8:f4:77:42:87:48:1d:ac:
40:6c:a6:97:f2:eb:62:78:bf:d8:9a:ff:1e:a2:c1:
61:c0:50:e3:ef:68:0e:6f:18:99:00:43:e6:f6:2a:
3a:5c:15:8e:4c:76:a1:f6:2a:59:29:07:fd:02:f8:
be:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AC:8B:F8:EF:34:6A:E9:E9:32:D0:47:DC:44:6C:CB:BC:1B:4A:62
X509v3 Authority Key Identifier:
keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.116.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a5:14:3b:91:e2:f2:10:c4:f0:a8:26:76:42:b0:ce:5f:e0:
00:d7:e7:a1:d8:21:1c:bb:c9:15:0d:bd:6d:0a:09:f3:27:48:
df:e3:5e:50:74:fa:47:dc:2b:dd:a8:be:3a:5d:e6:eb:e5:fc:
27:3d:46:45:61:19:67:0a:be:8c:08:d6:d5:b0:25:65:6e:46:
1f:b6:8f:d7:32:e9:3d:f0:99:bb:17:72:1c:45:fb:c6:0a:a3:
80:e3:c6:22:03:ad:84:d4:3e:ae:47:86:c3:8c:4c:99:85:a9:
00:f0:4f:5d:63:3c:91:d0:6b:0d:30:9a:69:ac:47:7b:e0:c1:
1d:1c:6a:49:a2:ce:ca:41:9c:48:2b:cf:e0:4e:27:bb:b4:36:
32:6e:ea:53:11:d9:bb:8c:4d:48:9c:31:ba:cd:53:bd:3b:8e:
4f:8b:a8:9f:04:f3:0d:8f:9d:2b:2d:ce:b9:f8:04:e7:e0:18:
81:db:f7:39:fd:c5:86:ef:12:d1:78:8c:c2:cd:73:36:f7:69:
be:56:ab:cf:88:71:a5:65:bf:ef:47:74:c8:e0:48:cd:77:ac:
f0:f6:c0:74:db:63:1a:be:8b:6a:99:40:59:e0:b0:4d:f7:07:
89:19:a2:2b:54:9b:ca:02:cf:db:f4:6c:3e:f2:0e:fd:d1:9e:
57:4e:14:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:24 2026 by rpki-client