
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/2B1FE092CFEE11F082935D16C4F9AE02.roa
File: 2B1FE092CFEE11F082935D16C4F9AE02.roa (raw, json)
Hash identifier: SkNwUmLJ74SfA59Yhk/sbqZ/iuszj8FDd+djHLsmqIU=
Subject key identifier: 34:4C:D5:BA:F5:22:FA:7C:D9:45:F0:78:D8:A3:3F:E0:0A:E3:44:76
Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Certificate serial: 024A
Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/2B1FE092CFEE11F082935D16C4F9AE02.roa
Signing time: Thu 03 Sep 2026 02:53:21 +0000
ROA not before: Thu 03 Sep 2026 02:53:21 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 21859
IP address blocks: 103.126.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 586 (0x24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Validity
Not Before: Sep 3 02:53:21 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a98e121-a56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:87:56:39:f6:f4:93:43:7e:28:d2:5c:14:
51:60:7b:f7:d8:58:72:cd:d7:b6:a8:0b:81:5c:7b:
05:36:72:78:22:93:4e:17:6c:c2:66:d8:62:e0:f8:
45:d8:0a:f0:66:75:45:e4:22:1c:39:9f:6f:b4:de:
85:ef:fd:3c:59:ac:78:fb:dd:ea:e2:3b:1f:82:9e:
8a:ac:1f:bb:0f:9f:ad:8a:e4:0f:5f:ab:5a:fb:c8:
cd:3d:10:54:71:06:78:b9:b9:22:10:97:c3:9b:47:
5d:4c:d8:57:c0:1e:3e:44:95:1b:b2:ec:96:c4:09:
17:14:76:cb:09:a6:e4:56:27:94:4c:5a:d1:39:41:
20:76:24:58:7a:45:bc:fe:6b:5f:fe:34:0a:d0:f2:
89:88:5e:89:cc:eb:14:08:07:9c:94:f3:3a:f4:ab:
0b:4c:9d:d9:b2:9b:44:c9:c4:eb:ae:63:b6:01:1c:
d0:c0:0f:44:14:c1:93:7b:17:a2:33:47:3d:48:8a:
b6:2f:c3:f7:f0:9c:f2:a6:5a:4e:9d:b4:f2:1a:65:
00:97:b7:08:7d:2a:2e:83:9f:aa:54:00:a1:1a:ed:
d6:99:a3:dd:0f:d9:64:00:6a:d3:ff:bc:5f:b8:4a:
ed:ab:08:09:41:95:e2:d3:52:c8:d0:3b:80:89:1b:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4C:D5:BA:F5:22:FA:7C:D9:45:F0:78:D8:A3:3F:E0:0A:E3:44:76
X509v3 Authority Key Identifier:
keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/2B1FE092CFEE11F082935D16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.142.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:c4:2f:78:57:10:9a:64:17:47:e2:13:26:45:c3:64:a4:7a:
f3:73:33:19:8a:97:70:b1:d2:2f:45:45:15:6c:6a:00:24:c8:
0a:55:89:89:ee:c1:22:1f:f6:12:5d:78:b1:83:d4:84:3e:8c:
26:f1:ad:c4:3c:83:94:19:76:5e:fa:da:8a:c7:34:11:b0:25:
3c:e8:9b:80:82:92:0b:72:34:dc:a1:31:8c:54:ec:ad:07:32:
59:8a:07:e4:42:be:14:06:ec:81:14:eb:21:45:69:29:15:79:
d1:e1:20:ed:5d:e2:b9:86:8f:b8:79:8a:56:cb:48:d8:d2:6a:
a1:81:19:d5:1a:2c:41:07:b9:80:f8:42:ba:42:a9:09:8f:14:
3e:10:b4:cd:cf:e9:dd:fa:0b:0b:bb:0b:a8:65:d3:f3:7c:99:
88:e8:e4:e7:53:68:9b:09:57:4f:5b:55:e2:d8:a4:33:5f:c4:
ff:05:ae:96:f0:a6:72:59:b4:34:15:40:59:54:c5:00:1a:ed:
85:31:c5:d1:5c:78:a2:fd:16:91:7c:3a:03:82:54:19:31:60:
fb:a3:e7:e4:a1:b5:89:6a:f8:52:9d:85:d9:5f:b0:ef:2f:48:
6e:ab:99:5a:be:84:7f:f6:80:6e:f1:92:9e:d6:95:31:ac:ce:
62:5b:9b:3a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0REODUxMTAvBgNVBAUTKDk0NDM3RUREQ0M4RDA2OTg5RTA5NTAwNTQzQzkxQkRG
MEQzRjQ4RTUwHhcNMjYwOTAzMDI1MzIxWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ZTEyMS1hNTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9eHVjn29JNDfijSXBRRYHv32Fhyzde2qAuBXHsFNnJ4IpNOF2zCZthi4PhF
2ArwZnVF5CIcOZ9vtN6F7/08Wax4+93q4jsfgp6KrB+7D5+tiuQPX6ta+8jNPRBU
cQZ4ubkiEJfDm0ddTNhXwB4+RJUbsuyWxAkXFHbLCabkVieUTFrROUEgdiRYekW8
/mtf/jQK0PKJiF6JzOsUCAeclPM69KsLTJ3ZsptEycTrrmO2ARzQwA9EFMGTexei
M0c9SIq2L8P38JzyplpOnbTyGmUAl7cIfSoug5+qVAChGu3WmaPdD9lkAGrT/7xf
uErtqwgJQZXi01LI0DuAiRvsdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDRM1br1
Ivp82UXweNijP+AK40R2MB8GA1UdIwQYMBaAFJRDft3MjQaYnglQBUPJG98NP0jl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REQ4NS84NDZGNEE2ODRC
QzMxMUVFOEM2NTczMTlDNEY5QUUwMi9sRU4tM2N5TkJwaWVDVkFGUThrYjN3MF9T
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0REODUvODQ2RjRBNjg0QkMzMTFFRThDNjU3MzE5QzRGOUFFMDIvMkIxRkUwOTJD
RkVFMTFGMDgyOTM1RDE2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ36OMA0GCSqGSIb3DQEBCwUAA4IBAQAvxC94VxCaZBdH4hMmRcNk
pHrzczMZipdwsdIvRUUVbGoAJMgKVYmJ7sEiH/YSXXixg9SEPowm8a3EPIOUGXZe
+tqKxzQRsCU86JuAgpILcjTcoTGMVOytBzJZigfkQr4UBuyBFOshRWkpFXnR4SDt
XeK5ho+4eYpWy0jY0mqhgRnVGixBB7mA+EK6QqkJjxQ+ELTNz+nd+gsLuwuoZdPz
fJmI6OTnU2ibCVdPW1Xi2KQzX8T/Ba6W8KZyWbQ0FUBZVMUAGu2FMcXRXHii/RaR
fDoDglQZMWD7o+fkobWJavhSnYXZX7DvL0huq5lavoR/9oBu8ZKe1pUxrM5iW5s6
-----END CERTIFICATE-----
Generated at Tue Sep 22 02:44:43 2026 by rpki-client