
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/4D36C07677C311EF84D38A3BC4F9AE02.roa
File: 4D36C07677C311EF84D38A3BC4F9AE02.roa (raw, json)
Hash identifier: BG38xp1qdPOphhsvgqxFogv8PzPFWjOjpb4tZ2pNWLo=
Subject key identifier: A2:8C:86:25:E0:DF:78:57:4F:22:A8:DB:B4:92:8C:39:02:E4:32:CB
Certificate issuer: /CN=A9191769/serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Certificate serial: 0145
Authority key identifier: FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/4D36C07677C311EF84D38A3BC4F9AE02.roa
Signing time: Fri 05 Jun 2026 05:38:51 +0000
ROA not before: Fri 05 Jun 2026 05:38:51 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132530
IP address blocks: 103.24.192.0/24 maxlen: 24
103.24.193.0/24 maxlen: 24
2001:df3:b2c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325 (0x145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191769, serialNumber=FF92347F5D5468811FD253A48BFC69FE570AA450
Validity
Not Before: Jun 5 05:38:51 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2260eb-b782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:d9:07:69:fe:85:a2:ad:06:33:bf:e6:98:
d0:72:e2:1d:72:81:df:88:61:48:f3:42:44:c2:28:
65:c4:d8:dd:b0:1b:6f:c7:2b:1a:74:81:10:11:e9:
64:56:b7:fe:67:fc:52:21:2e:bc:96:a7:07:f4:9b:
7d:f8:81:18:d9:7e:db:e0:5c:de:e0:c6:6b:6a:5c:
7c:31:57:12:67:94:83:18:e6:0a:6c:62:09:d6:65:
5c:db:77:f0:84:b8:e3:dc:65:70:48:0e:81:d4:ba:
d9:65:9e:f3:57:83:5d:4d:36:a5:b1:ed:0a:95:c2:
ab:6e:e2:95:fe:bb:ca:2b:aa:21:b4:04:e8:c7:80:
38:cd:78:6d:30:6c:11:bf:26:62:2c:44:44:13:1a:
20:ba:43:aa:6b:1c:2e:18:9c:72:94:15:88:dd:75:
20:23:b4:f4:89:9d:24:74:b9:16:35:cd:84:01:b3:
df:92:25:67:3f:fd:43:12:77:da:38:50:54:b8:dc:
c3:51:04:fa:fc:50:9b:b9:12:c3:bc:02:b9:5f:3e:
a9:5d:92:5e:99:67:62:7f:87:94:f9:82:0d:3f:a2:
36:11:1a:ce:b5:7b:e4:1c:2f:45:48:10:ef:70:4f:
be:d2:5e:8f:d2:d1:a1:79:46:50:a6:eb:2a:f6:16:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:86:25:E0:DF:78:57:4F:22:A8:DB:B4:92:8C:39:02:E4:32:CB
X509v3 Authority Key Identifier:
keyid:FF:92:34:7F:5D:54:68:81:1F:D2:53:A4:8B:FC:69:FE:57:0A:A4:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/_5I0f11UaIEf0lOki_xp_lcKpFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5I0f11UaIEf0lOki_xp_lcKpFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191769/D26DDDB077BE11EF9F2A4547C4F9AE02/4D36C07677C311EF84D38A3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.192.0/23
IPv6:
2001:df3:b2c0::/48
Signature Algorithm: sha256WithRSAEncryption
42:c9:9a:15:97:74:d2:fa:f2:de:78:9a:22:6f:b3:89:51:96:
c5:41:19:ec:7f:c8:e4:a7:ca:ae:04:e9:0b:aa:1b:e0:6a:51:
81:47:9e:7e:2b:5d:1d:76:0c:53:e6:27:e1:c4:f5:b2:14:03:
36:41:bb:18:5a:6f:61:18:3a:d2:54:88:2e:5c:b5:d2:54:38:
ff:66:da:78:5e:3e:cc:4a:0e:83:b4:48:2f:77:dd:49:f6:15:
24:5a:be:cd:5b:91:a5:e2:ca:50:66:57:2b:17:9e:e6:82:78:
1f:61:3e:f1:c4:a7:e3:9b:6c:38:9b:5f:8e:7e:b0:87:5c:81:
51:b5:c1:6e:cd:98:70:12:39:52:a5:35:1f:16:f4:78:a6:9f:
35:fd:a2:c2:92:68:f5:49:32:42:b0:ed:7e:77:16:f1:d8:a4:
fd:82:cd:9d:c7:6f:3c:e5:fd:e9:c3:35:90:05:59:f6:a9:a4:
48:8f:73:f2:3c:cb:cf:61:68:a0:b4:f1:c4:d0:54:2c:8e:a9:
63:e4:c1:59:ce:b1:49:1c:9c:48:de:cc:ac:92:5f:6f:01:d9:
3e:ae:12:89:49:19:ca:6d:0a:ec:58:3b:b9:b5:ac:48:44:04:
bb:40:67:d0:75:c5:a2:6e:07:9f:c7:d4:97:31:91:60:ae:3b:
d5:ca:d2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:39:23 2026 by rpki-client