
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa
File: D17E9426B24211EFBBDC2164C4F9AE02.roa (raw, json)
Hash identifier: Ww46Lbl6UjA/CXqKqzqylfENifJWkFzcJuiq1+uDY3g=
Subject key identifier: EA:DD:23:98:46:58:2F:06:45:10:66:10:6A:9E:E8:0E:49:DC:A8:B6
Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial: 14AB
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa
Signing time: Fri 05 Jun 2026 09:22:48 +0000
ROA not before: Fri 05 Jun 2026 09:22:48 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135134
IP address blocks: 103.131.188.0/24 maxlen: 24
103.131.190.0/24 maxlen: 24
2403:cfc0:1000::/48 maxlen: 48
2403:cfc0:1001::/48 maxlen: 48
2403:cfc0:1002::/48 maxlen: 48
2403:cfc0:1003::/48 maxlen: 48
2403:cfc0:1005::/48 maxlen: 48
2403:cfc0:1009::/48 maxlen: 48
2403:cfc0:100a::/48 maxlen: 48
2403:cfc0:100e::/48 maxlen: 48
2403:cfc0:100f::/48 maxlen: 48
2403:cfc0:1100::/44 maxlen: 48
2403:cfc0:1150::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5291 (0x14ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Validity
Not Before: Jun 5 09:22:48 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a229568-6767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:29:d0:0f:5f:84:a8:a2:a9:d1:87:37:24:32:
ef:3e:0f:26:9e:3b:87:2c:95:42:26:ad:55:1a:69:
52:97:32:f2:62:12:c5:20:58:5e:72:bd:c4:ce:b1:
4b:21:e5:ed:09:8e:66:4f:0f:da:51:ef:2c:b9:66:
80:8d:04:77:58:17:c2:72:f1:69:fe:fd:fd:33:84:
27:09:e4:c3:50:e3:9a:ba:8e:9e:40:28:ec:36:f3:
0b:82:47:7e:3c:c8:a9:9b:7e:04:e8:8a:a4:18:db:
3f:2c:05:37:c4:98:cd:6f:53:d1:5a:bc:ea:83:9e:
a0:d8:34:d4:6c:86:4f:d1:7e:58:88:d1:8e:00:27:
b3:52:71:76:3c:1e:d8:db:63:bc:af:85:d4:80:2c:
9a:1f:30:89:0b:57:c5:b8:82:6b:80:1b:39:8d:c0:
f7:f4:59:06:ae:b4:cf:98:31:56:c3:b4:aa:91:c8:
2b:32:11:02:77:ed:40:64:45:68:c5:ce:5e:b5:37:
20:24:a8:13:2d:71:1e:4f:22:43:60:43:22:08:a7:
62:ae:b4:3f:8c:92:fd:c7:19:b9:7e:56:71:e0:a8:
ac:b1:e8:86:50:44:5c:42:0b:d0:ea:0d:95:fc:be:
06:23:a5:71:9f:d9:3d:cd:8e:db:2f:53:88:d2:df:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DD:23:98:46:58:2F:06:45:10:66:10:6A:9E:E8:0E:49:DC:A8:B6
X509v3 Authority Key Identifier:
keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/D17E9426B24211EFBBDC2164C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.131.188.0/24
103.131.190.0/24
IPv6:
2403:cfc0:1000::/46
2403:cfc0:1005::/48
2403:cfc0:1009::-2403:cfc0:100a:ffff:ffff:ffff:ffff:ffff
2403:cfc0:100e::/47
2403:cfc0:1100::/44
2403:cfc0:1150::/44
Signature Algorithm: sha256WithRSAEncryption
76:aa:ec:dc:80:5d:93:e3:91:47:55:11:a3:d0:fa:93:35:d0:
34:99:48:f5:42:6e:f9:f0:4f:fd:73:c0:01:d7:35:1a:64:f8:
bb:da:5f:4e:85:df:fa:ff:0b:fd:22:ad:dd:88:2c:f9:cf:44:
f7:75:bf:c3:8d:eb:00:a6:b4:20:70:f3:1b:f3:ad:dc:08:d2:
42:47:64:5d:4f:db:ca:38:22:99:70:1a:cf:62:07:cc:f5:0c:
a0:54:52:58:55:b7:b3:bd:79:a7:5d:d7:65:c2:8d:5a:8b:53:
8b:ae:69:7d:5e:b7:d1:83:26:7a:5b:19:6a:63:1b:fc:f2:e3:
c4:e5:e8:7e:41:6a:4e:7c:57:7f:21:ac:05:2f:2d:20:a9:d4:
c8:7c:cc:b0:b3:a3:90:06:1d:ee:96:07:8f:2b:32:55:83:8a:
44:77:7e:8a:9f:c5:91:a0:86:00:dd:d8:42:13:0a:34:d8:54:
fb:e7:5a:c8:6d:8e:f1:64:60:2b:e1:1f:63:54:41:d6:9b:e7:
85:e4:05:a0:1a:a7:7c:c7:8b:20:d7:93:c7:36:2d:83:38:56:
0d:bd:87:ee:5e:42:f7:f1:c5:59:17:17:94:28:4c:79:ed:de:
09:54:ac:11:0e:78:ba:72:5e:e2:89:54:9a:67:e4:5b:a5:b7:
43:b4:cd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:01:45 2026 by rpki-client