
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa
File: 31F9C990668B11F0B10A9677C4F9AE02.roa (raw, json)
Hash identifier: 0yX4Y6lkYKfE7kCaCRC2l6z7yMFuM+BBuRGLdbMCpNI=
Subject key identifier: 2D:10:C2:EC:11:A7:75:AD:55:FD:A5:CB:48:77:54:D1:F0:01:9F:71
Certificate issuer: /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial: DC
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:14:20 +0000
ROA not before: Thu 22 Jan 2026 13:10:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 11870
IP address blocks: 103.44.16.0/24 maxlen: 24
103.44.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Validity
Not Before: Jan 22 13:10:27 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a465dc-b689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:84:40:70:66:8d:d2:62:90:ea:2e:9d:38:
0a:12:ab:d5:cc:66:fc:65:26:fd:bc:a2:9f:91:c6:
88:da:8f:59:73:08:8c:9f:dc:13:d1:13:36:da:1c:
82:01:b3:87:e6:7f:89:a0:49:64:49:67:a7:f6:26:
e0:66:bc:24:73:04:eb:6e:c7:cc:40:21:50:57:95:
6c:e7:9d:30:54:3c:4b:cb:78:8b:5a:82:63:54:96:
a7:be:dc:63:da:ce:c3:bb:66:20:23:a4:79:03:c3:
8d:0a:d5:dd:a0:d7:a0:23:53:a2:e7:20:57:f8:d5:
96:5f:1a:9f:80:a3:5b:cb:c1:ad:3c:6c:d6:44:e9:
ed:dd:31:c0:7e:05:da:5e:ad:5d:f1:12:f6:16:46:
f6:f0:64:df:7d:4e:7e:28:24:f9:7b:b0:64:21:e0:
68:c3:23:d7:d9:16:97:71:53:d3:e2:21:4f:ef:67:
90:a0:00:52:8b:c6:72:19:58:72:aa:f4:08:33:59:
a0:b9:b5:78:21:94:71:89:8d:c7:0a:4e:33:43:da:
16:63:5b:86:c3:bd:0f:51:a5:a1:b4:45:3f:7b:45:
a7:95:57:9a:5d:d7:3a:fb:06:77:84:01:d2:67:42:
47:79:cf:51:d9:4c:8e:7a:2b:bb:d9:19:48:0c:e1:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:10:C2:EC:11:A7:75:AD:55:FD:A5:CB:48:77:54:D1:F0:01:9F:71
X509v3 Authority Key Identifier:
keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/31F9C990668B11F0B10A9677C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.44.16.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:b6:28:c8:c1:86:17:c5:46:78:4e:3e:77:e6:78:5e:af:32:
96:da:45:ad:d1:6e:eb:ea:4e:84:46:d5:b0:42:dc:b6:ee:4e:
a8:e0:b1:d4:43:c2:a0:25:c6:9c:3c:83:ac:e5:30:e2:66:33:
12:bf:6e:be:91:70:5b:aa:1f:e2:7d:7c:81:76:8f:54:50:e3:
6b:8f:64:51:d9:ac:71:c3:56:65:ab:aa:30:bf:50:1c:a4:ce:
98:ef:13:8d:d6:3d:00:20:35:92:7b:3e:7d:f8:ff:9d:2e:1f:
75:16:58:e0:90:d5:65:d0:f0:ee:9e:6a:0f:cd:b5:03:9d:8e:
24:4d:f0:63:b8:fa:62:9f:10:d6:1d:a3:01:ff:ff:fd:03:40:
e5:5a:85:04:33:36:e0:b1:f2:3e:99:41:ad:b7:d2:00:0b:49:
4f:6f:39:03:af:fb:28:84:bd:b1:b4:aa:b1:03:86:eb:95:aa:
67:8b:74:f1:78:e1:54:b8:dd:ef:da:13:ea:9a:48:c9:55:52:
63:4d:65:b5:5f:59:98:9c:69:18:6d:bf:b2:30:40:7c:60:ab:
ac:5d:5f:f2:af:cb:3e:35:71:ca:b4:03:41:df:8f:32:a3:ef:
71:26:08:6f:31:7a:db:fc:c6:29:06:74:ae:51:6d:23:fb:93:
97:de:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:22 2026 by rpki-client