
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa
File: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (raw, json)
Hash identifier: /PARiH5eaZ2ETFC2Zi05FfcP/mxQcmCWaQAj9q8kZlY=
Subject key identifier: 8C:17:3F:F3:93:C9:DE:D1:29:45:BF:5A:2B:21:D3:46:C3:5F:BE:5A
Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Certificate serial: 0BBA
Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa
Signing time: Tue 28 Jul 2026 19:41:44 +0000
ROA not before: Tue 28 Jul 2026 19:41:44 +0000
ROA not after: Sat 28 Nov 2026 00:00:00 +0000
asID: 140091
IP address blocks: 103.5.120.0/23 maxlen: 23
103.5.120.0/24 maxlen: 24
103.5.121.0/24 maxlen: 24
103.148.104.0/24 maxlen: 24
103.153.202.0/24 maxlen: 24
2001:df2:ce80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3002 (0xbba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B
Validity
Not Before: Jul 28 19:41:44 2026 GMT
Not After : Nov 28 00:00:00 2026 GMT
Subject: CN=6a6905f8-53af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:bf:ce:a5:8c:03:e8:97:82:1e:d7:95:24:
83:21:04:1a:04:47:ed:ea:fb:0d:02:03:c5:71:9e:
90:21:f1:82:a8:f3:e1:e9:d9:68:de:0c:a3:c7:13:
74:90:13:13:3c:2e:39:53:9c:8c:a9:8c:8a:52:38:
9f:31:68:56:cc:cb:7f:82:18:a4:b2:13:9c:e2:f8:
39:20:af:88:94:b7:d0:54:0a:b8:e0:04:e5:9e:de:
9c:9a:d3:c3:59:21:ed:19:6b:ec:54:f5:c4:99:fe:
b7:91:a6:01:77:61:0b:d8:55:6b:a6:07:9b:de:18:
d3:5a:a1:2a:e2:29:f1:a4:ef:02:43:2a:61:6b:d6:
20:2c:68:45:f4:18:29:1b:1c:ef:e7:62:0e:91:13:
a6:00:3e:85:81:a2:56:ec:fc:65:e4:11:cb:03:50:
70:2f:f1:85:3f:20:4b:c2:67:fa:89:ec:9f:53:23:
6a:ad:c3:62:b9:21:23:48:ad:7d:7a:4c:25:02:ab:
60:33:21:f7:a1:d2:66:1d:9c:bb:d0:ff:88:d4:da:
a9:c0:fb:09:d9:dc:89:43:df:49:d4:28:56:34:f8:
d1:30:a6:04:95:5d:e1:85:28:a7:6b:15:92:fb:06:
90:d6:78:14:7a:8c:eb:21:b5:ea:f1:73:ab:ed:1e:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:17:3F:F3:93:C9:DE:D1:29:45:BF:5A:2B:21:D3:46:C3:5F:BE:5A
X509v3 Authority Key Identifier:
keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/4AEE5D144EFC11EA9D00310FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.120.0/23
103.148.104.0/24
103.153.202.0/24
IPv6:
2001:df2:ce80::/48
Signature Algorithm: sha256WithRSAEncryption
7e:52:54:69:21:01:3b:00:15:cf:38:a3:30:90:d9:6b:97:7a:
60:93:1d:98:d7:0c:31:ef:a2:b7:df:00:1d:5c:f2:52:c2:a2:
e5:71:25:ea:a0:a8:e7:43:2c:d9:a5:89:dd:8b:72:ce:ad:11:
bc:5b:94:63:2c:8f:bd:a4:b5:16:e6:b5:f0:58:bb:70:2b:91:
e5:ea:b4:bd:89:21:75:fc:67:63:82:e1:8d:ec:58:cc:18:15:
5f:0d:f7:f4:42:18:2b:2a:bf:e1:a7:22:91:30:38:98:1e:6f:
24:6c:e3:b0:de:6c:90:39:ee:a3:b1:3d:11:49:78:1b:9b:fd:
25:80:a8:d6:20:74:ca:f7:1f:90:22:8a:3e:83:c6:aa:4c:a4:
09:c5:3c:8d:98:04:30:3b:6b:76:01:a1:0f:94:b4:ac:34:2b:
bf:b1:38:68:b1:76:4e:b5:8d:8e:a6:8f:67:46:3d:0e:ed:c1:
87:d0:7e:79:06:ea:09:c4:8c:50:5c:56:66:ea:49:ea:4b:c2:
8a:bc:66:44:d4:06:f7:a8:da:cc:a1:3d:a5:c2:11:4e:bd:ed:
df:1f:c4:50:10:98:b9:7c:3e:d4:6b:9b:63:b8:2e:1c:90:8f:
32:d7:c4:ea:8f:3b:9b:a2:5e:e4:a2:bc:79:b7:40:82:d4:76:
40:29:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:01:16 2026 by rpki-client