
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5D0766AC28B411F0A1AE5A68C4F9AE02.roa
File: 5D0766AC28B411F0A1AE5A68C4F9AE02.roa (raw, json)
Hash identifier: 9tSyRbjUZPm8rCblKyMICEwxVcge0D18MmAXoxN4pks=
Subject key identifier: D8:02:73:D4:7E:A9:9C:36:82:2F:55:0E:14:79:6D:5A:8C:41:D0:1A
Certificate issuer: /CN=A9187461/serialNumber=8DF693242D610F876307475342A92E1556028E53
Certificate serial: 0286
Authority key identifier: 8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5D0766AC28B411F0A1AE5A68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:05:03 +0000
ROA not before: Mon 05 May 2025 02:08:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138385
IP address blocks: 103.137.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 646 (0x286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187461, serialNumber=8DF693242D610F876307475342A92E1556028E53
Validity
Not Before: May 5 02:08:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a40f4e-4245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:d7:61:e5:25:eb:98:d3:55:61:f7:ca:28:
67:13:b1:00:ae:62:b8:4b:19:67:c7:0c:95:45:3d:
9b:67:73:56:d4:2e:1d:78:f2:db:9c:b2:ec:42:96:
35:26:ec:96:67:85:3b:1b:0a:b6:58:8f:63:3c:6d:
b7:e0:f2:f9:5d:91:f2:2f:00:b0:2a:fc:68:04:64:
d9:b6:a7:a6:c1:42:df:a1:33:2c:9e:8a:d4:96:ff:
5d:12:2c:e8:4f:7a:c8:64:af:42:d6:55:e0:5f:ac:
cb:b6:ae:c3:9c:9d:fb:23:18:c2:c1:45:c5:11:a2:
bb:1a:51:c5:58:2f:05:c9:1b:7c:f2:7c:d5:34:c7:
2e:f9:86:3d:48:7e:a6:a5:00:c7:d0:d0:51:5d:fc:
8c:4b:26:a2:98:4c:00:a3:95:f6:42:cd:75:9b:23:
49:ed:61:04:a8:a6:b8:75:db:a1:0b:0c:df:41:0d:
5f:37:79:a7:a7:a5:6f:24:98:73:50:9b:aa:0e:fe:
6d:27:f5:8b:71:c7:27:c3:1f:6f:90:47:92:88:78:
56:fe:92:f4:ac:bf:bd:c0:7a:fe:f7:8b:d4:2c:f2:
05:b0:8c:d0:8b:56:b1:09:ab:f0:7a:f8:f5:84:73:
54:f3:26:9b:c6:90:84:95:4b:ef:c0:8b:b3:d8:e7:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:02:73:D4:7E:A9:9C:36:82:2F:55:0E:14:79:6D:5A:8C:41:D0:1A
X509v3 Authority Key Identifier:
keyid:8D:F6:93:24:2D:61:0F:87:63:07:47:53:42:A9:2E:15:56:02:8E:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/jfaTJC1hD4djB0dTQqkuFVYCjlM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jfaTJC1hD4djB0dTQqkuFVYCjlM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187461/B2C206E04A1A11EDAE6D1023C4F9AE02/5D0766AC28B411F0A1AE5A68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.158.0/24
Signature Algorithm: sha256WithRSAEncryption
49:07:4b:25:47:20:bf:34:2c:fe:d5:7b:2e:c2:6e:fe:17:53:
b7:b5:85:d0:09:fa:b4:3e:7b:23:59:af:ab:61:f4:0d:2b:71:
43:e7:c1:2d:90:68:70:11:be:e0:46:02:11:9a:8d:f8:77:59:
c9:2b:c2:98:12:99:d1:d2:2a:c3:52:d0:94:36:f5:ab:07:16:
43:13:3c:2a:9c:38:26:5a:dc:a3:74:3b:5e:49:4e:0c:6a:39:
37:c1:9b:9a:92:6a:9a:f0:5a:29:78:c1:ae:5e:9f:39:3e:5f:
36:85:6e:40:f7:f9:32:35:f2:cf:a4:e3:b3:33:8f:b0:3f:7d:
d3:48:a6:00:c9:7d:01:11:ee:34:14:12:ce:46:87:48:6c:9f:
cf:32:3b:c9:8c:f6:b6:b1:af:52:4f:0e:61:d1:18:e1:91:db:
17:f8:0e:64:22:42:6f:2f:30:a4:cd:1a:a3:19:0e:4a:3c:3d:
40:ef:f6:91:a9:d4:33:84:a4:24:f5:05:c9:d8:d7:4b:a3:57:
04:b4:64:15:c6:cb:c8:38:5c:32:8b:59:c7:13:04:83:1b:5b:
bd:ea:43:1c:00:ff:3f:13:9d:7c:3e:82:eb:71:6f:71:1d:44:
01:a9:2e:c8:13:77:a9:3f:35:94:d4:55:c5:c2:51:63:bf:8f:
00:25:8f:81
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0NjExMTAvBgNVBAUTKDhERjY5MzI0MkQ2MTBGODc2MzA3NDc1MzQyQTkyRTE1
NTYwMjhFNTMwHhcNMjUwNTA1MDIwODQyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGY0ZS00MjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvlbXYeUl65jTVWH3yihnE7EArmK4SxlnxwyVRT2bZ3NW1C4dePLbnLLsQpY1
JuyWZ4U7Gwq2WI9jPG234PL5XZHyLwCwKvxoBGTZtqemwULfoTMsnorUlv9dEizo
T3rIZK9C1lXgX6zLtq7DnJ37IxjCwUXFEaK7GlHFWC8FyRt88nzVNMcu+YY9SH6m
pQDH0NBRXfyMSyaimEwAo5X2Qs11myNJ7WEEqKa4dduhCwzfQQ1fN3mnp6VvJJhz
UJuqDv5tJ/WLcccnwx9vkEeSiHhW/pL0rL+9wHr+94vULPIFsIzQi1axCavwevj1
hHNU8yabxpCElUvvwIuz2OfzFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNgCc9R+
qZw2gi9VDhR5bVqMQdAaMB8GA1UdIwQYMBaAFI32kyQtYQ+HYwdHU0KpLhVWAo5T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2MS9CMkMyMDZFMDRB
MUExMUVEQUU2RDEwMjNDNEY5QUUwMi9qZmFUSkMxaEQ0ZGpCMGRUUXFrdUZWWUNq
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pmYVRKQzFoRDRkakIwZFRRcWt1RlZZQ2psTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc0NjEvQjJDMjA2RTA0QTFBMTFFREFFNkQxMDIzQzRGOUFFMDIvNUQwNzY2QUMy
OEI0MTFGMEExQUU1QTY4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ4meMA0GCSqGSIb3DQEBCwUAA4IBAQBJB0slRyC/NCz+1Xsuwm7+
F1O3tYXQCfq0PnsjWa+rYfQNK3FD58EtkGhwEb7gRgIRmo34d1nJK8KYEpnR0irD
UtCUNvWrBxZDEzwqnDgmWtyjdDteSU4Majk3wZuakmqa8FopeMGuXp85Pl82hW5A
9/kyNfLPpOOzM4+wP33TSKYAyX0BEe40FBLORodIbJ/PMjvJjPa2sa9STw5h0Rjh
kdsX+A5kIkJvLzCkzRqjGQ5KPD1A7/aRqdQzhKQk9QXJ2NdLo1cEtGQVxsvIOFwy
i1nHEwSDG1u96kMcAP8/E518PoLrcW9xHUQBqS7IE3epPzWU1FXFwlFjv48AJY+B
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:23 2026 by rpki-client