
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
File: 394B48F6889811EC9D1DF920C4F9AE02.roa (raw, json)
Hash identifier: esobtMTQ83ifAe3YqijDiKUn/KklzpUoFIodQFJNV+A=
Subject key identifier: E6:01:61:46:F7:9B:70:6E:2F:8C:22:4F:91:63:8F:60:46:F4:02:F7
Certificate issuer: /CN=A9187729/serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Certificate serial: 045E
Authority key identifier: 2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:54:38 +0000
ROA not before: Sat 17 May 2025 00:56:40 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 132739
IP address blocks: 103.24.156.0/24 maxlen: 24
103.24.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118 (0x45e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187729, serialNumber=2B440C7C459003055157627DE7214E9CAC128B4C
Validity
Not Before: May 17 00:56:40 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3fecd-95b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:fc:41:53:8c:3e:e4:85:fc:41:69:49:1a:
42:60:9d:28:50:ee:47:34:f1:df:98:94:14:4d:d0:
51:49:c2:be:04:ee:e0:cc:3a:c9:8e:4a:64:42:0b:
1c:ad:2a:ac:bf:28:01:5a:73:14:21:4b:bd:0e:5b:
3a:b7:36:a1:d5:c7:37:62:95:59:34:47:9e:43:2d:
1a:80:66:7a:ea:0c:79:05:fb:69:3c:71:3e:36:ef:
6a:f2:9d:ea:41:a7:36:f1:34:58:c7:3d:24:20:f2:
27:8c:5c:ad:0d:d8:46:55:90:8c:af:56:b9:e5:c9:
20:06:ff:34:4d:1f:e5:20:9b:ce:c1:1a:fc:aa:90:
dd:2b:ef:f2:24:ec:ae:ee:33:7c:7e:0f:cd:05:4d:
6f:11:f3:61:3b:41:47:c0:83:58:05:20:63:06:cd:
f9:60:f6:a2:a2:0f:93:44:92:0b:9d:8c:be:af:a8:
f9:c1:90:ab:38:c6:90:10:bc:25:0d:60:6c:ad:90:
d9:12:b8:91:f4:4b:25:a7:7f:45:48:42:70:05:51:
4f:03:6f:26:80:17:15:de:17:31:43:04:b3:80:94:
0c:8f:4c:1f:65:44:e1:3d:75:92:e9:de:93:d8:dc:
e1:64:05:68:e1:d3:21:e5:81:47:0c:93:0f:b8:45:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:01:61:46:F7:9B:70:6E:2F:8C:22:4F:91:63:8F:60:46:F4:02:F7
X509v3 Authority Key Identifier:
keyid:2B:44:0C:7C:45:90:03:05:51:57:62:7D:E7:21:4E:9C:AC:12:8B:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/K0QMfEWQAwVRV2J95yFOnKwSi0w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K0QMfEWQAwVRV2J95yFOnKwSi0w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187729/1312F908889411ECB20B8372C4F9AE02/394B48F6889811EC9D1DF920C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.156.0/23
Signature Algorithm: sha256WithRSAEncryption
38:48:4a:49:82:23:95:15:90:e0:45:e0:8c:de:1c:33:f6:5d:
42:0a:2a:34:58:cf:7b:2d:f0:91:e2:cb:dc:ab:ea:49:f8:a2:
3e:0f:3f:78:a7:3a:d5:ca:2f:f9:85:75:d4:97:94:5b:6a:2d:
d7:91:84:05:cd:95:81:3b:4e:a8:3e:e9:4f:02:2c:2e:1f:db:
b5:33:fb:74:89:fa:ba:7c:82:7f:78:06:63:89:5f:2f:3e:d8:
5a:49:3b:77:e8:c8:01:31:b2:a2:55:d3:12:63:88:27:30:d1:
8a:e0:50:65:f6:95:c1:02:a2:03:6a:ca:b8:68:48:ae:22:c2:
7b:a6:90:df:e4:4c:05:10:65:76:af:2b:a0:1d:91:4b:c6:3c:
bc:a4:ca:ba:82:bb:1a:01:d4:1e:91:8c:0e:ee:4e:d1:fe:e5:
a5:b3:25:f6:5f:7d:bc:f3:0d:59:fa:c9:63:22:26:83:e8:b4:
43:fa:15:b3:6a:af:bc:99:9e:3f:7e:10:1b:28:a7:8d:41:a0:
40:b9:41:fb:bf:41:82:f0:da:de:73:c1:3a:3f:0f:43:ad:9b:
5c:79:af:e3:04:a5:2b:cd:af:ec:83:18:df:7a:f6:90:75:6f:
7f:9a:5b:43:59:38:7c:63:76:f3:94:c1:5e:b3:12:93:0f:8c:
49:47:49:a1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc3MjkxMTAvBgNVBAUTKDJCNDQwQzdDNDU5MDAzMDU1MTU3NjI3REU3MjE0RTlD
QUMxMjhCNEMwHhcNMjUwNTE3MDA1NjQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZmVjZC05NWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAryr8QVOMPuSF/EFpSRpCYJ0oUO5HNPHfmJQUTdBRScK+BO7gzDrJjkpkQgsc
rSqsvygBWnMUIUu9Dls6tzah1cc3YpVZNEeeQy0agGZ66gx5BftpPHE+Nu9q8p3q
Qac28TRYxz0kIPInjFytDdhGVZCMr1a55ckgBv80TR/lIJvOwRr8qpDdK+/yJOyu
7jN8fg/NBU1vEfNhO0FHwINYBSBjBs35YPaiog+TRJILnYy+r6j5wZCrOMaQELwl
DWBsrZDZEriR9Eslp39FSEJwBVFPA28mgBcV3hcxQwSzgJQMj0wfZUThPXWS6d6T
2NzhZAVo4dMh5YFHDJMPuEVO1wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOYBYUb3
m3BuL4wiT5Fjj2BG9AL3MB8GA1UdIwQYMBaAFCtEDHxFkAMFUVdifechTpysEotM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcyOS8xMzEyRjkwODg4
OTQxMUVDQjIwQjgzNzJDNEY5QUUwMi9LMFFNZkVXUUF3VlJWMko5NXlGT25Ld1Np
MHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0swUU1mRVdRQXdWUlYySjk1eUZPbkt3U2kwdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODc3MjkvMTMxMkY5MDg4ODk0MTFFQ0IyMEI4MzcyQzRGOUFFMDIvMzk0QjQ4RjY4
ODk4MTFFQzlEMURGOTIwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZxicMA0GCSqGSIb3DQEBCwUAA4IBAQA4SEpJgiOVFZDgReCM3hwz
9l1CCio0WM97LfCR4svcq+pJ+KI+Dz94pzrVyi/5hXXUl5Rbai3XkYQFzZWBO06o
PulPAiwuH9u1M/t0ifq6fIJ/eAZjiV8vPthaSTt36MgBMbKiVdMSY4gnMNGK4FBl
9pXBAqIDasq4aEiuIsJ7ppDf5EwFEGV2ryugHZFLxjy8pMq6grsaAdQekYwO7k7R
/uWlsyX2X3288w1Z+sljIiaD6LRD+hWzaq+8mZ4/fhAbKKeNQaBAuUH7v0GC8Nre
c8E6Pw9DrZtcea/jBKUrza/sgxjfevaQdW9/mltDWTh8Y3bzlMFesxKTD4xJR0mh
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:25 2026 by rpki-client