
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
File: 22D8137A51A711EBAAAB6410C4F9AE02.roa (raw, json)
Hash identifier: hAtG+f9sTyDBDIC3yzVKMSXyXaV2HtV+sHcFaEmD/HU=
Subject key identifier: 60:02:61:2A:84:5E:99:C2:09:15:B6:06:46:15:F7:6B:E1:21:F4:B7
Certificate issuer: /CN=A9149A6C/serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Certificate serial: 0772
Authority key identifier: 8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:11:49 +0000
ROA not before: Mon 02 Feb 2026 21:18:30 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 132372
IP address blocks: 103.161.132.0/24 maxlen: 24
103.161.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149A6C, serialNumber=8D16FD0E25FB896E26FA734ABC984CE4B4698DD3
Validity
Not Before: Feb 2 21:18:30 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a44925-cfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:d5:a7:f4:88:21:9c:a3:03:a0:60:58:40:
10:3c:09:db:3b:9c:20:fd:a3:9a:b8:c5:42:ed:c5:
b7:51:a9:2f:30:b2:84:e8:14:68:04:de:47:19:41:
9e:01:13:45:7a:d4:9c:dc:4f:7c:a7:16:c4:8d:4d:
72:98:26:7b:f8:48:df:e2:fd:0d:75:d4:7b:90:71:
75:5a:ad:cd:50:d5:2b:f4:fb:ff:65:35:86:60:cd:
f6:01:f0:5b:4a:8c:e0:85:fd:c1:34:77:08:d7:47:
93:1f:d9:86:4d:64:8f:04:33:64:47:c4:32:fb:14:
13:58:1b:fd:f4:ef:68:47:f4:07:08:9f:b3:36:f9:
f9:cf:7b:20:d2:61:02:e7:80:63:2b:6c:d6:56:72:
d1:85:04:98:ac:06:1f:14:66:a5:6f:6b:a5:03:26:
e7:dd:52:55:58:56:22:6d:f4:01:f7:fb:42:95:63:
40:fb:87:27:b9:38:64:9d:73:e8:0e:52:b8:3b:c2:
75:a5:c3:4c:68:8c:c3:d9:b2:c8:ea:07:14:8a:32:
91:7b:fa:3a:0c:67:46:33:5d:20:a8:f9:90:61:16:
f4:8e:aa:1a:94:35:4c:97:45:7b:97:49:e5:31:36:
74:d7:d7:42:69:07:75:aa:ae:a5:42:03:e1:5d:3c:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:02:61:2A:84:5E:99:C2:09:15:B6:06:46:15:F7:6B:E1:21:F4:B7
X509v3 Authority Key Identifier:
keyid:8D:16:FD:0E:25:FB:89:6E:26:FA:73:4A:BC:98:4C:E4:B4:69:8D:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/jRb9DiX7iW4m-nNKvJhM5LRpjdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRb9DiX7iW4m-nNKvJhM5LRpjdM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149A6C/3B8493B451A511EBB4AF040EC4F9AE02/22D8137A51A711EBAAAB6410C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.161.132.0/23
Signature Algorithm: sha256WithRSAEncryption
84:ee:6a:9c:74:bb:3c:55:ea:dd:d0:c4:e4:64:ee:38:a9:9b:
20:14:99:4d:be:50:3f:54:f8:2f:92:a6:77:df:03:10:b2:3a:
7f:fc:0e:38:7d:6d:d8:4f:82:14:d4:72:f2:63:20:8f:eb:23:
08:c7:82:ac:d3:89:b9:02:28:2b:43:27:78:3e:40:dc:08:a2:
c8:61:67:c3:19:8d:a4:77:05:45:92:c0:15:04:4c:f3:ed:0e:
ba:de:e2:86:e1:dd:8d:e1:20:d3:ec:dd:33:a6:52:0f:f9:a2:
e7:76:f2:e3:d6:45:6c:1b:2e:13:48:06:4e:52:1b:92:38:32:
2f:d1:f7:3e:3c:f2:2d:eb:1e:ce:fe:92:a2:a0:68:0c:76:75:
35:bc:ea:33:e1:28:24:b0:f9:a7:1b:ec:ee:88:99:04:c9:c8:
df:4c:ef:99:99:51:7d:4e:8a:95:ac:d6:d8:8e:69:d1:7a:f3:
d0:a8:84:9b:68:09:f6:ca:8f:ab:fa:77:97:af:15:7d:08:7b:
da:db:b3:72:a8:f2:90:c0:fd:3a:ea:5d:ce:51:d3:88:58:3d:
5b:b1:72:9b:64:ca:96:e0:db:b4:3b:49:43:8c:6f:80:85:14:
2f:23:1c:25:f1:aa:3f:dc:c7:d4:9e:00:03:c8:da:b9:f3:c4:
a5:84:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:08 2026 by rpki-client