
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa
File: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (raw, json)
Hash identifier: B8R1G5OUtPVlyi8UDUFhRxyGS4o93u26WgDd9Jne+9w=
Subject key identifier: 21:4F:32:95:BD:1A:82:FC:F7:31:D2:25:37:AD:10:14:DB:7B:D1:BC
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0D49
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:18:24 +0000
ROA not before: Wed 30 Apr 2025 18:27:43 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 150178
IP address blocks: 103.135.138.0/24 maxlen: 24
103.135.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3401 (0xd49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Apr 30 18:27:43 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a42e90-92b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c5:7d:c2:42:45:a8:b1:9a:50:4e:2c:a0:cd:
d5:10:d7:4f:ce:c1:00:0c:ac:ac:f6:0b:1a:c2:9e:
06:66:d8:ab:a3:59:67:9a:00:82:62:b7:80:0d:4e:
44:57:b2:a7:47:22:2e:9e:70:2a:54:e4:05:35:b8:
df:c0:7b:c4:27:c3:4c:68:c8:9c:e4:84:0f:85:60:
df:37:14:e1:60:06:cb:7e:c5:33:62:53:a5:1c:66:
79:eb:65:4e:8f:43:eb:00:69:13:2a:a6:8a:49:43:
d7:67:7f:40:37:9c:c4:4e:0c:ee:04:a2:bf:10:9e:
a8:d8:54:c2:74:b3:0b:71:42:c3:bc:f8:87:64:6d:
b8:ec:46:d8:b9:d3:dd:d2:f7:f7:24:bc:67:36:3f:
52:91:be:86:fd:ec:a1:44:fc:1a:2f:98:9f:3d:de:
4d:86:aa:9d:d4:74:92:0d:02:d6:d0:be:10:8f:f5:
41:99:db:f2:85:12:2d:c9:36:ef:9b:aa:b0:e1:b8:
a9:c0:39:39:8f:fe:e8:97:ae:94:53:97:47:83:62:
6d:da:4d:54:a6:9e:fd:c1:f7:c3:4d:44:f5:22:f0:
e6:67:68:93:89:35:9c:e1:22:f2:56:bc:1d:62:64:
8f:70:9b:76:52:fa:92:da:c2:db:fb:ae:3e:47:82:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4F:32:95:BD:1A:82:FC:F7:31:D2:25:37:AD:10:14:DB:7B:D1:BC
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
01:43:0f:c8:c9:93:37:05:03:86:a2:22:72:d9:87:cf:ec:4a:
2e:96:46:81:a8:0b:9e:ee:0b:04:c9:78:db:3c:3c:e7:d0:eb:
73:88:04:de:cb:3b:c3:8e:7b:ef:c6:50:25:38:bc:6a:b7:c1:
ed:03:4b:c0:44:5b:6b:ca:4d:93:f2:59:e2:6e:26:09:00:0c:
b7:3a:3d:f5:c6:10:ca:f1:68:2a:d1:ba:aa:3e:cf:a3:b9:ee:
bb:53:1a:d5:74:0f:2c:70:cd:a4:c7:8f:d9:3c:19:d7:34:68:
c1:80:04:43:2c:dc:7a:c0:79:d3:70:9d:56:d5:81:01:b7:f4:
ef:a1:62:31:24:61:f6:23:9b:19:6c:6f:2d:13:f6:d9:18:38:
44:7b:55:b1:e4:de:fe:b4:5b:47:25:e4:25:31:89:27:9d:08:
b9:60:56:84:71:8b:1a:f5:02:ec:86:fc:1e:6c:2a:6c:f8:4b:
de:30:76:88:31:1c:76:1c:1c:ae:00:19:39:10:65:d2:0e:4e:
82:08:5e:4b:89:5c:80:20:cb:7e:ea:05:f1:12:c2:ba:0e:78:
58:6f:22:7c:7f:d5:79:01:a0:aa:b3:c3:90:9d:e7:9c:05:45:
0b:ab:37:8c:19:92:f0:21:a2:86:5b:88:46:89:58:c2:ae:89:
4e:14:71:3b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE
QjFBNTBEQTQwHhcNMjUwNDMwMTgyNzQzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmU5MC05MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6sV9wkJFqLGaUE4soM3VENdPzsEADKys9gsawp4GZtiro1lnmgCCYreADU5E
V7KnRyIunnAqVOQFNbjfwHvEJ8NMaMic5IQPhWDfNxThYAbLfsUzYlOlHGZ562VO
j0PrAGkTKqaKSUPXZ39AN5zETgzuBKK/EJ6o2FTCdLMLcULDvPiHZG247EbYudPd
0vf3JLxnNj9Skb6G/eyhRPwaL5ifPd5Nhqqd1HSSDQLW0L4Qj/VBmdvyhRItyTbv
m6qw4bipwDk5j/7ol66UU5dHg2Jt2k1Upp79wffDTUT1IvDmZ2iTiTWc4SLyVrwd
YmSPcJt2UvqS2sLb+64+R4KugQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCFPMpW9
GoL89zHSJTetEBTbe9G8MB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2
N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvMEQ3Qjc0Q0FD
RTExMTFFRDhCREIyMTdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4eKMA0GCSqGSIb3DQEBCwUAA4IBAQABQw/IyZM3BQOGoiJy2YfP
7EoulkaBqAue7gsEyXjbPDzn0OtziATeyzvDjnvvxlAlOLxqt8HtA0vARFtryk2T
8lnibiYJAAy3Oj31xhDK8Wgq0bqqPs+jue67UxrVdA8scM2kx4/ZPBnXNGjBgARD
LNx6wHnTcJ1W1YEBt/TvoWIxJGH2I5sZbG8tE/bZGDhEe1Wx5N7+tFtHJeQlMYkn
nQi5YFaEcYsa9QLshvwebCps+EveMHaIMRx2HByuABk5EGXSDk6CCF5LiVyAIMt+
6gXxEsK6DnhYbyJ8f9V5AaCqs8OQneecBUULqzeMGZLwIaKGW4hGiVjCrolOFHE7
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:00 2026 by rpki-client