
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/C2E189AC7F8C11EF94FCB676C4F9AE02.roa
File: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (raw, json)
Hash identifier: kD+YqVWBY4eOOeMpK5otrzrOcdiLItcqv3dAvoX65iw=
Subject key identifier: 47:DF:93:DE:F6:AF:24:98:93:36:67:A9:C1:1F:18:04:4F:F9:F3:EB
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 13C7
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/C2E189AC7F8C11EF94FCB676C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:33:09 +0000
ROA not before: Sat 20 Dec 2025 17:14:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 133210
IP address blocks: 103.131.188.0/24 maxlen: 24
103.131.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5063 (0x13c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Dec 20 17:14:29 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a48664-a022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:a0:ba:0e:6e:0f:16:fe:96:a9:82:00:fe:
ca:4b:09:82:96:cb:ad:65:8d:70:0c:99:97:1e:6f:
02:74:4c:f8:86:a5:10:f4:a0:5f:3b:97:f7:97:0a:
59:bd:f5:09:08:c6:33:19:ad:a1:d2:57:38:64:1d:
52:71:59:c3:c6:e9:2a:e0:41:e4:a4:cb:20:d7:43:
69:64:bd:0d:f9:14:6c:9a:72:94:92:6e:c1:26:d2:
41:f8:8d:4b:1e:28:54:43:a4:9a:c6:3c:e7:cc:b9:
c4:bb:8a:8e:54:4b:c4:30:bb:aa:e8:13:54:7e:26:
66:e8:ff:c2:70:f8:ec:32:0d:73:bd:af:b7:5e:b9:
4d:8c:93:73:4e:9e:fb:b1:66:e0:41:60:b5:35:d3:
dd:32:e4:f0:be:1d:fe:c3:6b:87:d4:e1:35:70:d0:
54:35:fb:f1:75:9e:3b:ce:6e:e4:a4:21:3c:bd:64:
a7:47:2b:db:f9:c0:1b:00:5e:2b:30:57:4b:ba:1e:
fa:c8:ba:4d:15:35:3d:eb:9c:31:1a:fb:1c:0f:63:
66:11:e5:ac:15:65:e3:9e:1c:66:e0:47:d5:ac:aa:
b0:a3:5e:9d:ce:72:a3:de:55:e8:13:49:4a:a2:66:
7d:bf:2e:03:49:86:72:16:e8:7a:9e:6d:6e:b3:77:
68:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:93:DE:F6:AF:24:98:93:36:67:A9:C1:1F:18:04:4F:F9:F3:EB
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/C2E189AC7F8C11EF94FCB676C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.188.0/24
103.131.190.0/24
Signature Algorithm: sha256WithRSAEncryption
48:29:31:30:9e:07:f7:b8:41:c0:b5:81:25:db:46:49:f2:71:
de:1e:d2:2a:a4:0f:4e:56:56:a4:ca:40:aa:af:5b:e1:92:2f:
0d:67:55:6a:c6:5d:3d:fb:43:90:96:f6:e7:e0:a9:73:22:15:
05:a5:54:51:ba:de:2c:ba:b5:7a:46:db:c2:a5:1b:5d:c8:00:
65:f6:7e:f4:c8:0b:1d:cc:75:f0:c9:a0:4d:f9:e0:44:77:f9:
74:74:c2:46:b1:c4:ea:5e:4a:35:54:ad:c1:71:33:fd:27:8a:
13:04:d0:b4:a3:7c:16:b8:15:3e:d8:ed:94:b0:3b:22:28:13:
d7:80:f8:42:fd:dc:72:5a:b1:82:1f:35:25:a9:6b:ed:51:fe:
0b:de:4d:e4:bc:99:70:36:2b:ae:82:11:c7:4e:a3:f2:28:af:
3d:d8:45:93:3d:b6:5c:58:58:7f:68:36:a0:90:a8:9e:7e:5c:
fe:f3:85:2f:78:50:a6:fb:fa:fc:ac:a7:d0:1d:c7:b6:59:5c:
96:6e:5b:15:10:6f:bb:99:a2:bd:03:d5:2e:75:3d:5e:98:e3:
c0:df:5d:7c:13:b5:55:28:66:c2:d1:f2:d9:96:fd:32:4d:92:
3d:70:7d:e0:f1:00:99:03:a1:04:7e:2a:16:0a:b8:67:2f:49:
9b:ce:86:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:17 2026 by rpki-client