
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa
File: 31D902165E7311EB8B143F3BC4F9AE02.roa (raw, json)
Hash identifier: WVvSpMhKFxSN9i8JnDOZYNXQPB/pQobS+FdjnkNHrVI=
Subject key identifier: 05:23:E8:30:AB:69:98:38:71:E6:F0:58:39:4C:93:21:6C:E5:3D:C6
Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial: 07BA
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa
Signing time: Sun 26 Jul 2026 22:42:36 +0000
ROA not before: Sun 26 Jul 2026 22:42:36 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 135063
IP address blocks: 43.254.134.0/24 maxlen: 24
43.254.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1978 (0x7ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Validity
Not Before: Jul 26 22:42:36 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a668d5b-de87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:99:b0:e5:7d:e6:2f:87:95:31:43:a6:f2:66:
d1:d1:d7:d4:2d:21:ca:c7:8f:52:d7:3d:25:e0:34:
5e:f7:7c:1a:e3:42:7c:9f:52:97:df:7b:70:05:8c:
4f:f4:e4:7e:3d:4e:62:cb:96:ee:b7:3f:f6:dc:d8:
5a:9a:e2:1b:9c:a2:de:6f:c2:84:be:91:12:41:98:
83:88:f6:d7:92:0d:8f:b5:ca:26:94:2c:00:ba:d6:
79:c1:d6:c6:96:29:0c:da:43:32:4a:04:bc:82:c5:
f9:2c:e4:d9:33:d1:32:46:1b:a3:8f:a2:d3:c3:8c:
82:ae:92:1a:31:03:a2:4d:08:ee:d1:ac:61:07:e4:
ad:a6:a2:59:e3:03:9c:54:e7:ff:79:fb:c2:e6:6c:
fe:95:77:b3:2a:87:0b:ca:32:cf:b4:47:99:76:0e:
53:46:97:73:f1:2c:c8:9d:0f:07:0d:39:2a:c4:eb:
8a:bc:c8:f3:9c:5d:19:d8:1d:23:09:7a:74:21:dd:
2c:9a:74:ad:60:e3:d7:52:37:39:9c:48:f7:94:ee:
ff:b1:22:48:de:c3:40:94:16:f6:5f:44:ed:d9:42:
67:7c:86:ca:ae:a2:b4:f6:57:66:34:07:09:46:8f:
61:02:b5:55:3f:1a:37:46:97:d4:47:85:a4:53:5d:
a4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:23:E8:30:AB:69:98:38:71:E6:F0:58:39:4C:93:21:6C:E5:3D:C6
X509v3 Authority Key Identifier:
keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.134.0/23
Signature Algorithm: sha256WithRSAEncryption
be:67:d8:27:57:9d:70:81:f2:dd:88:88:45:a7:87:ab:08:4b:
93:55:24:1a:d1:db:b2:20:d2:52:5a:ce:29:75:ce:fc:ca:77:
3c:52:4d:7b:ef:8f:9d:45:19:71:25:a2:66:1c:00:78:08:a4:
a0:03:99:01:26:9f:2d:03:03:99:5d:30:d0:07:aa:54:8d:5e:
ae:c1:e0:c3:f2:cf:26:5f:5b:06:af:10:8e:ca:54:70:a3:c3:
51:41:2f:4b:03:d2:4d:ad:16:cb:b5:e5:c3:1a:48:e3:f6:1f:
a5:97:24:ef:0c:c5:3a:40:e3:6c:9a:de:94:9f:a6:ea:42:b6:
3b:73:ac:16:4c:fc:ff:92:77:55:fd:58:80:fe:42:12:e8:14:
d0:a8:69:bb:98:69:71:5f:89:74:95:72:a7:93:c6:2c:8e:9b:
89:a5:33:21:54:53:83:c0:ff:60:a4:0b:e8:31:7d:f3:65:61:
dd:7a:d3:73:58:79:75:72:6e:f8:4b:26:0a:e3:62:76:32:eb:
75:93:e3:fe:51:84:3f:8c:74:c5:4b:01:af:74:3c:9a:0e:87:
76:e3:2e:a2:bc:f1:5a:5f:44:b6:08:d5:7e:23:cf:e5:b4:09:
83:99:67:ed:61:4b:b4:2f:57:3e:05:a4:5f:72:e5:cd:6c:b8:
04:87:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:43 2026 by rpki-client