
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa
File: BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (raw, json)
Hash identifier: APhmcXAzZIhCLyKa4vEtY9uKqyvDEiwnjzZDypho3ks=
Subject key identifier: 7A:8D:CC:E5:78:D2:41:FD:0C:7B:5E:7D:8B:0C:8D:33:66:32:49:F9
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: 026F
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa
Signing time: Sat 29 Aug 2026 02:54:18 +0000
ROA not before: Sat 29 Aug 2026 02:54:18 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 139803
IP address blocks: 103.135.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 623 (0x26f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Aug 29 02:54:18 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a9249da-c15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:12:dd:37:89:4e:c2:67:7b:2a:aa:85:53:
a8:d1:51:77:6e:0f:f1:ff:8c:14:17:50:dd:7c:5b:
7c:e1:18:31:ae:50:ae:0a:eb:31:e3:7a:00:07:1c:
64:4c:cb:fb:af:1e:e5:64:38:e7:e2:ec:f5:ab:c8:
b8:92:c8:14:dc:18:46:b5:f5:84:51:4e:99:cf:b7:
74:87:af:c3:31:29:21:8d:6c:bd:3c:6c:3e:a7:67:
b6:f8:81:11:d6:cf:c1:aa:b2:42:1e:ae:00:53:3a:
86:73:4a:f2:c5:52:34:25:5d:15:30:5c:12:54:8e:
06:90:53:d3:51:44:7f:f7:49:44:9e:08:cc:ce:8b:
c2:b2:27:2f:55:f5:34:b3:eb:b7:36:61:db:86:02:
2a:98:9e:8f:10:51:52:7b:85:f2:c2:ec:ea:8f:b2:
df:12:ad:c3:e2:60:53:75:a7:70:0a:d6:e2:b7:52:
2b:c0:0c:31:d8:23:0a:23:aa:6f:59:4a:3c:ac:71:
5a:be:b3:2f:ef:39:40:69:fb:7a:90:ac:f6:44:91:
26:73:11:e7:09:29:eb:a0:19:16:e6:df:de:a4:b4:
1e:0c:97:a4:24:9f:01:99:22:e7:e6:ea:45:4d:38:
d0:ec:c3:51:0d:5c:ed:3a:68:e4:0e:93:3e:dd:2a:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:CC:E5:78:D2:41:FD:0C:7B:5E:7D:8B:0C:8D:33:66:32:49:F9
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
39:8f:cb:41:ad:74:10:e2:fa:13:ed:40:06:10:6e:74:e9:0a:
94:d9:ec:41:65:ce:49:71:a2:05:dd:9e:e4:d9:e3:00:c3:a5:
27:aa:d8:84:68:02:6c:45:e2:b6:56:24:90:78:19:a6:1f:5c:
84:e3:23:af:28:68:4b:39:af:65:71:fe:c3:73:34:4e:65:93:
04:45:16:68:1e:8a:c3:3a:9a:d9:4e:61:4b:7c:8b:ba:60:b9:
ba:89:3b:45:5c:de:82:ad:c8:bc:c0:8c:cf:c8:8b:a3:6c:dc:
72:fa:47:40:12:6e:a8:27:68:5d:8b:ac:cb:b4:05:86:ec:ad:
9e:05:73:0e:4a:a4:c0:0f:7a:26:32:43:6c:c9:0c:c7:a2:d8:
99:46:6c:a0:b2:29:5f:67:10:43:4a:b7:7f:dd:06:44:92:6f:
b7:c8:3d:aa:53:01:3f:e2:bd:d3:c9:8b:d0:cb:41:21:42:b6:
b6:fd:3c:ef:89:54:0f:3d:f5:f0:63:cf:a0:23:11:a9:df:41:
a3:85:1c:d6:f2:86:59:48:67:c6:f9:12:59:ec:b6:92:2c:e4:
e3:9f:38:ee:af:55:54:c3:cd:6c:47:f8:81:50:c0:fe:f7:4a:
a7:fe:78:c9:75:51:01:65:19:23:87:74:cf:ad:f6:9c:49:f9:
09:a6:97:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:52:41 2026 by rpki-client