
$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
File: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (raw, json)
Hash identifier: 7OeSyO2wfCU7G/jwTKHphNuk6Fzij8xlng5WBAWL814=
Subject key identifier: 7D:1B:AD:90:08:E5:7A:7D:CC:46:1F:E4:E5:13:A4:85:0B:2B:4D:AA
Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial: 1556
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
Signing time: Sun 31 May 2026 18:03:13 +0000
ROA not before: Sun 31 May 2026 18:03:13 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 135298
IP address blocks: 103.213.104.0/24 maxlen: 24
103.213.105.0/24 maxlen: 24
103.213.106.0/24 maxlen: 24
103.213.107.0/24 maxlen: 24
223.26.20.0/24 maxlen: 24
223.26.21.0/24 maxlen: 24
223.26.22.0/24 maxlen: 24
223.26.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:46:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5462 (0x1556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Validity
Not Before: May 31 18:03:13 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c77e1-ce0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:07:5c:f1:ab:9e:e8:b4:fc:df:8c:93:2e:
63:99:87:e1:45:a7:41:8f:9a:1f:9f:57:62:ff:eb:
fa:b6:99:89:81:76:cd:6f:90:d1:9a:6b:2f:10:8d:
1a:84:71:1b:33:9e:0b:f9:1f:58:11:c2:e5:60:d2:
48:fa:e6:3a:3f:61:b2:04:2d:39:0c:68:4e:23:51:
99:89:47:03:9c:a0:f2:40:e5:b7:91:cd:a0:e4:d9:
6e:e0:89:1e:4c:bf:db:09:d3:a4:a9:21:1b:92:63:
d8:49:76:44:10:f1:d4:17:c5:fa:66:d5:0c:c6:da:
94:6a:71:b6:7c:42:a1:55:97:65:67:e1:44:b4:cc:
f2:e0:27:21:9a:07:c3:38:34:b7:4a:eb:c2:25:6e:
94:79:88:bc:ff:1f:72:e9:4e:39:95:06:d8:c6:bb:
c6:42:9b:47:5b:a1:b7:d9:c4:46:b0:1c:b9:df:45:
6c:30:4f:83:62:f9:35:a1:fe:fe:98:86:df:60:27:
a5:9e:72:b3:15:e0:c3:88:15:16:36:9f:ee:cc:1e:
04:d7:99:a0:68:17:75:53:56:b3:89:e4:74:f2:73:
e8:89:a7:76:ff:24:52:a8:63:13:8f:e3:20:28:53:
f0:13:17:17:dc:c3:3b:80:84:84:12:c1:bd:cd:ee:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1B:AD:90:08:E5:7A:7D:CC:46:1F:E4:E5:13:A4:85:0B:2B:4D:AA
X509v3 Authority Key Identifier:
keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.104.0/22
223.26.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:00:ed:b2:17:59:da:c8:68:85:5e:62:b4:31:a7:7a:e3:27:
86:74:33:c1:31:7a:91:bc:c1:76:5f:50:a2:0c:46:52:6f:3b:
d5:6b:9b:c2:a6:eb:9d:d3:ba:d5:d9:10:cb:97:04:c5:db:ae:
6a:78:54:78:a0:0f:58:5e:fc:3e:a3:32:70:ba:68:82:2c:3c:
c0:87:dc:1f:41:a8:d4:07:41:12:66:5f:c4:da:5d:a5:16:e1:
8f:9d:59:9a:8d:09:73:ee:c0:76:cc:f8:67:c5:ae:de:cb:15:
f1:59:49:e4:6d:28:8a:25:fc:aa:0b:76:b7:b6:14:07:70:72:
ed:59:da:97:2b:ac:c0:69:b3:8c:0a:79:2c:1a:f8:e4:0b:7c:
42:48:fa:a7:4e:da:85:a1:a3:f9:2e:ee:fe:10:f8:8c:10:aa:
03:45:9f:9b:45:4d:4a:ff:ac:85:8b:64:86:83:7d:d8:06:23:
27:86:6d:cd:df:1a:13:57:3e:58:d8:df:4c:28:05:36:f9:bc:
2b:0b:82:50:9f:3d:b7:cb:2e:0d:ee:e4:ab:c0:3b:d2:28:7d:
4f:b9:7c:ef:c0:f0:98:2f:a6:09:3c:f8:35:49:0a:0f:dd:f9:
33:f2:72:e3:28:76:e8:05:33:cc:84:1b:cc:df:2a:86:1c:f3:
c0:07:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:16 2026 by rpki-client