
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/AB2D69A4217A11EA9AB7211BC4F9AE02.roa
File: AB2D69A4217A11EA9AB7211BC4F9AE02.roa (raw, json)
Hash identifier: SXK2S1Y+hbP43WWSANRCcplRAenfVT2BNDjA+ybhUzA=
Subject key identifier: BA:BC:4C:67:11:53:88:1E:8C:41:C8:71:EF:7A:9F:93:10:99:48:6C
Certificate issuer: /CN=A9193D85/serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
Certificate serial: 10E6
Authority key identifier: BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/AB2D69A4217A11EA9AB7211BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:35:12 +0000
ROA not before: Thu 06 Mar 2025 17:35:50 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139884
IP address blocks: 103.136.40.0/23 maxlen: 23
103.136.40.0/24 maxlen: 24
103.136.41.0/24 maxlen: 24
103.136.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl
rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4326 (0x10e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193D85, serialNumber=BB07ED464B280D57FA771841F77F52EA7D507927
Validity
Not Before: Mar 6 17:35:50 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4246f-0ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:3a:1a:85:ec:ed:0c:b5:20:89:7f:e0:30:
f4:0e:8d:26:00:0c:6c:f6:fe:9e:4c:61:4b:a7:1f:
b4:76:b9:5e:5f:cc:48:79:f8:2e:95:ef:ca:f9:e1:
2c:17:e0:3a:a7:8a:21:04:00:02:5c:07:62:0d:06:
54:ad:79:66:4d:da:da:58:9f:d2:4c:c1:a4:c4:00:
18:e3:77:2f:72:38:ec:89:b5:47:e9:c4:e0:f4:fa:
cf:87:3d:bb:cf:2d:6a:ba:39:7e:4c:07:c8:7b:cb:
b5:ca:2d:a4:1d:23:c3:74:d3:21:7c:8d:a7:17:d9:
5e:26:d6:9a:2a:1b:14:61:52:bd:51:3a:f8:48:99:
91:a7:35:25:93:9a:1f:e1:8a:81:7e:2c:70:33:af:
74:8c:2d:7f:9d:2c:db:8c:8a:6f:50:35:5d:5d:f7:
a2:5a:1b:7d:c7:15:eb:12:ec:0f:9c:73:9d:00:9d:
d4:0a:67:9c:76:57:26:95:73:a1:59:f6:d4:00:26:
31:bc:97:25:03:4e:a2:87:05:b6:44:08:28:c6:9e:
bb:25:6f:e6:03:d4:51:88:5f:90:e6:28:ad:50:f3:
e6:1d:6e:3c:6f:72:7a:ea:3a:b0:f2:9a:32:7b:79:
3b:f4:95:31:82:7a:2d:d7:34:52:3b:6e:16:e6:fd:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:4C:67:11:53:88:1E:8C:41:C8:71:EF:7A:9F:93:10:99:48:6C
X509v3 Authority Key Identifier:
keyid:BB:07:ED:46:4B:28:0D:57:FA:77:18:41:F7:7F:52:EA:7D:50:79:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/uwftRksoDVf6dxhB939S6n1QeSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwftRksoDVf6dxhB939S6n1QeSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193D85/915325203FC911E9979BB83BC4F9AE02/AB2D69A4217A11EA9AB7211BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.40.0-103.136.42.255
Signature Algorithm: sha256WithRSAEncryption
ae:a4:3d:78:0a:6f:c9:16:f7:1f:5a:b4:4f:42:d4:8c:01:6a:
f2:fb:89:66:d0:61:d4:f6:a5:e7:b3:b0:eb:16:52:4a:0f:e2:
e7:5a:4c:75:0e:c6:68:85:ba:42:ba:fc:49:51:85:b9:7a:3a:
48:fd:f6:54:b3:4f:e0:7d:7d:99:aa:76:dc:ea:53:2c:0d:25:
b0:ca:f2:dd:de:e9:5f:c3:b1:cb:d0:6c:ce:bc:cd:79:1e:d5:
b3:b9:24:c3:19:1a:90:06:42:ec:5b:d8:a7:02:99:99:34:bf:
85:ca:27:ae:98:57:58:99:fd:39:01:b4:79:49:13:79:12:a2:
f3:5a:78:82:4a:2b:0e:a6:bc:57:5f:a8:8f:3c:b1:53:c5:b6:
15:55:dd:6e:fe:93:58:41:f3:c3:91:44:81:ac:d6:12:54:fe:
36:60:4c:7d:6f:28:60:36:6d:3d:35:9e:2b:7f:4b:d4:cc:f4:
da:0e:99:07:a6:68:55:2b:05:60:02:a2:26:21:3d:a0:9c:f2:
f4:5d:de:c5:4a:ad:b6:8a:6c:65:c1:d7:c2:c4:a5:f3:79:45:
b6:da:c0:00:35:f5:93:b9:6a:e5:11:e7:78:a2:a8:d2:9a:3c:
f6:05:07:cb:86:28:d8:78:f9:53:44:42:26:22:6d:8e:0a:e4:
d9:9e:37:4b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICEOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNEODUxMTAvBgNVBAUTKEJCMDdFRDQ2NEIyODBENTdGQTc3MTg0MUY3N0Y1MkVB
N0Q1MDc5MjcwHhcNMjUwMzA2MTczNTUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjQ2Zi0wZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1bc6GoXs7Qy1IIl/4DD0Do0mAAxs9v6eTGFLpx+0drleX8xIefgule/K+eEs
F+A6p4ohBAACXAdiDQZUrXlmTdraWJ/STMGkxAAY43cvcjjsibVH6cTg9PrPhz27
zy1qujl+TAfIe8u1yi2kHSPDdNMhfI2nF9leJtaaKhsUYVK9UTr4SJmRpzUlk5of
4YqBfixwM690jC1/nSzbjIpvUDVdXfeiWht9xxXrEuwPnHOdAJ3UCmecdlcmlXOh
WfbUACYxvJclA06ihwW2RAgoxp67JW/mA9RRiF+Q5iitUPPmHW48b3J66jqw8poy
e3k79JUxgnot1zRSO24W5v0k6QIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFLq8TGcR
U4gejEHIce96n5MQmUhsMB8GA1UdIwQYMBaAFLsH7UZLKA1X+ncYQfd/Uup9UHkn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Q4NS85MTUzMjUyMDNG
QzkxMUU5OTc5QkI4M0JDNEY5QUUwMi91d2Z0Umtzb0RWZjZkeGhCOTM5UzZuMVFl
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V3ZnRSa3NvRFZmNmR4aEI5MzlTNm4xUWVTYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTNEODUvOTE1MzI1MjAzRkM5MTFFOTk3OUJCODNCQzRGOUFFMDIvQUIyRDY5QTQy
MTdBMTFFQTlBQjcyMTFCQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBANniCgDBABniCowDQYJKoZIhvcNAQELBQADggEBAK6kPXgKb8kW
9x9atE9C1IwBavL7iWbQYdT2peezsOsWUkoP4udaTHUOxmiFukK6/ElRhbl6Okj9
9lSzT+B9fZmqdtzqUywNJbDK8t3e6V/DscvQbM68zXke1bO5JMMZGpAGQuxb2KcC
mZk0v4XKJ66YV1iZ/TkBtHlJE3kSovNaeIJKKw6mvFdfqI88sVPFthVV3W7+k1hB
88ORRIGs1hJU/jZgTH1vKGA2bT01nit/S9TM9NoOmQemaFUrBWACoiYhPaCc8vRd
3sVKrbaKbGXB18LEpfN5RbbawAA19ZO5auUR53iiqNKaPPYFB8uGKNh4+VNEQiYi
bY4K5NmeN0s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:39 2026 by rpki-client