
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/9E8DB380B2C611EDBC366A1DC4F9AE02.roa
File: 9E8DB380B2C611EDBC366A1DC4F9AE02.roa (raw, json)
Hash identifier: dfQicEx83KamzRMByyNJg2fEEP+DRBaHeaYlTc5tSSI=
Subject key identifier: 70:82:A8:9F:C3:7F:6D:98:9B:36:42:EA:01:77:EF:5A:0B:25:2C:33
Certificate issuer: /CN=A9189122/serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Certificate serial: 025C
Authority key identifier: BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/9E8DB380B2C611EDBC366A1DC4F9AE02.roa
Signing time: Mon 13 Apr 2026 02:34:07 +0000
ROA not before: Mon 13 Apr 2026 02:34:07 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 150747
IP address blocks: 103.82.202.0/23 maxlen: 23
103.82.202.0/24 maxlen: 24
103.82.203.0/24 maxlen: 24
2001:df1:ec40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189122, serialNumber=BB4FAE85540A5AD9F93CB482C45C9576F52A3BF4
Validity
Not Before: Apr 13 02:34:07 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69dc561e-9954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:08:b2:21:7e:a0:c3:80:c2:f5:dd:ec:51:
a1:f4:4e:b3:49:85:94:fd:0b:98:d2:7a:5c:92:0b:
ed:64:a2:4c:9c:46:7f:a9:f9:64:5b:34:27:8e:20:
2b:93:be:b4:a8:da:5d:a8:c9:2e:ec:43:52:06:17:
7c:ab:d4:42:49:20:dc:54:65:45:dd:07:07:61:bd:
36:a8:16:de:06:bc:3b:53:8d:14:2a:f8:cc:46:87:
0a:46:c1:13:11:a1:ec:1a:65:84:d1:96:25:2c:03:
5b:04:43:af:ee:c5:dd:81:f3:b4:d2:7f:16:46:37:
79:48:f7:cf:01:0b:e9:63:0f:07:ce:78:61:38:87:
45:3f:dc:76:68:79:e9:1c:2b:5f:1c:d1:e1:3a:0d:
f2:7b:d4:c2:f3:3a:6a:74:2b:49:4d:91:ac:d4:b7:
1b:77:6e:ef:aa:e2:72:d5:d2:9a:d2:36:25:16:b2:
54:5e:a8:87:ec:fa:d0:8b:ff:14:83:a7:b5:b5:5c:
12:ca:45:69:de:cb:26:c2:d5:75:64:73:bd:f4:e0:
55:e0:80:a0:d0:f8:a6:9c:b9:99:f2:5d:e6:d0:c2:
e0:74:9a:55:8f:16:a4:f6:fc:4e:13:59:15:6a:13:
14:58:b9:f9:0e:c2:22:f6:b3:b5:68:a5:a5:f7:c5:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:A8:9F:C3:7F:6D:98:9B:36:42:EA:01:77:EF:5A:0B:25:2C:33
X509v3 Authority Key Identifier:
keyid:BB:4F:AE:85:54:0A:5A:D9:F9:3C:B4:82:C4:5C:95:76:F5:2A:3B:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u0-uhVQKWtn5PLSCxFyVdvUqO_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189122/0FD4EF4EAEEF11EDA2E9BC68C4F9AE02/9E8DB380B2C611EDBC366A1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.82.202.0/23
IPv6:
2001:df1:ec40::/48
Signature Algorithm: sha256WithRSAEncryption
06:a8:7e:04:d3:58:b2:99:7a:9e:5f:0b:98:ea:f1:94:66:db:
c7:64:64:a1:85:13:14:29:33:a7:ff:43:8e:b0:7e:3e:e5:9b:
0d:27:33:4c:21:f9:c5:df:b8:12:6b:ff:51:c8:51:3e:cd:ba:
7d:88:b6:45:16:fd:dc:21:5e:90:e4:64:4d:6a:40:bb:8f:7d:
7d:9a:b6:97:3f:0e:d8:7c:7a:eb:5b:7c:b6:a8:4d:90:49:34:
d4:16:61:da:d2:ec:e5:3b:71:43:1c:57:e7:62:06:f7:5e:cd:
7e:0e:52:56:93:47:11:68:df:ea:87:eb:df:86:2c:86:6d:e3:
41:92:39:88:fc:48:bc:ec:02:b4:90:89:ce:ce:7e:c1:9d:bb:
92:69:94:0f:ee:98:15:21:e6:dd:2e:98:72:aa:c9:5b:55:f0:
cd:31:4a:36:50:b4:b8:1e:69:ee:da:99:c0:8a:c9:07:0d:01:
06:89:8e:c7:64:22:50:1a:a0:ea:14:e0:6b:9c:24:00:31:6a:
0d:12:33:85:79:76:e5:9e:01:c2:d0:a2:6d:de:5b:c9:85:24:
77:17:c4:9f:a1:55:42:c5:0b:18:7e:58:e0:50:94:66:24:f7:
94:09:d7:ca:f9:91:30:31:8b:2c:eb:7a:74:49:f2:0d:a4:7d:
97:d8:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:29 2026 by rpki-client