
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa
File: 31D902165E7311EB8B143F3BC4F9AE02.roa (raw, json)
Hash identifier: iME1Wafl/c0OdFfEQ+yf2PqIzRI/AG4449vj600jvuo=
Subject key identifier: 0C:0F:1A:66:C6:B9:70:69:90:C7:3B:02:C8:5E:17:3B:12:3F:04:CC
Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial: 0767
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:47:16 +0000
ROA not before: Wed 17 Sep 2025 13:32:19 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 135063
IP address blocks: 43.254.134.0/24 maxlen: 24
43.254.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1895 (0x767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Validity
Not Before: Sep 17 13:32:19 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46d94-6ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:36:ae:69:af:a3:10:27:81:9c:97:eb:50:ad:
a9:3d:86:39:0a:e4:71:da:7f:19:ff:b2:65:01:76:
12:62:4d:ad:7e:c9:d5:ca:15:f0:76:a7:79:cb:db:
77:c0:08:d6:19:9e:f1:b7:80:b8:65:53:59:5c:9d:
b8:4f:29:3b:2f:65:64:95:c8:96:e5:e2:6c:f0:aa:
53:cd:10:75:55:e6:71:9b:5f:bc:d3:f9:f0:65:d8:
5a:e3:50:e1:c4:6a:97:f8:d1:5b:e8:73:90:4c:c8:
c7:6f:2c:8c:e5:e7:8f:35:ab:39:56:4f:6c:16:95:
4f:fb:fa:72:f6:f8:4d:a1:cd:2a:e4:ca:4a:8a:70:
22:43:06:94:0f:a0:e8:62:26:39:06:6e:bb:91:f4:
4a:5a:d7:85:2a:90:35:c6:c4:c4:3b:f7:a7:4b:53:
df:2c:59:f1:58:c0:f7:d7:76:52:d3:31:b4:b1:74:
63:4e:3c:c6:f3:5c:59:45:9e:7e:6f:49:9c:7f:42:
8d:88:aa:29:a4:b5:b1:03:68:04:06:be:92:33:f6:
53:fc:a1:d7:48:1b:07:c0:33:0e:87:4a:f0:8f:ed:
7c:9a:49:6c:9f:b6:11:17:c0:63:bc:04:83:b3:f0:
e6:26:7b:62:6b:06:31:d7:31:d8:56:c8:03:48:9c:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:1A:66:C6:B9:70:69:90:C7:3B:02:C8:5E:17:3B:12:3F:04:CC
X509v3 Authority Key Identifier:
keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/31D902165E7311EB8B143F3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.254.134.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:57:12:33:72:63:ba:c6:93:43:16:b0:78:28:17:30:02:fb:
23:25:98:e6:56:cf:a5:0c:bf:be:82:d8:72:33:f9:fe:bf:55:
b4:b3:cb:7e:74:5e:1c:c8:3b:50:98:85:5b:0e:53:e0:bb:d3:
52:f5:49:19:0b:3a:3e:ef:b8:8a:45:d8:13:20:37:cd:2b:e5:
95:fc:f9:a5:7f:42:c8:b6:d3:b8:44:f8:94:3f:a6:4a:94:2c:
ea:2e:f5:b7:b2:f6:dd:a8:35:39:31:e6:ba:88:5e:d5:df:eb:
ad:cb:43:e9:78:bd:43:ec:cc:13:2f:9c:30:90:2a:62:7f:81:
2c:12:c5:fd:59:79:07:ef:0c:97:57:f6:dd:ff:8c:62:92:8d:
3e:9e:13:91:66:12:7b:c0:d8:47:71:db:65:3e:f4:6f:bb:4d:
2b:99:6b:c3:86:59:d3:01:83:43:35:d8:39:2e:7c:f1:53:4c:
38:be:2f:d7:6c:64:b5:8e:29:64:0b:b2:e8:28:ad:42:87:4a:
fb:4f:a8:3e:34:9a:c9:3e:fc:78:23:81:a4:b5:ec:35:54:d4:
e1:23:5d:f2:77:3b:cc:8a:00:16:32:a9:c9:93:bd:d2:fc:4b:
a2:e8:9a:44:d4:d4:93:31:d4:22:75:61:d9:31:4a:8f:ba:49:
25:09:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:06:24 2026 by rpki-client