
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C6EDD52EF4C011EAA7B25986C4F9AE02.roa
File: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (raw, json)
Hash identifier: qaJjlXwaj9JptzN90zbu/ByDY7c80MUFCf+ZwtqowYg=
Subject key identifier: 1E:E1:A8:C0:74:17:A9:97:C8:27:A3:49:FB:2B:67:BA:B2:7F:F3:E5
Certificate issuer: /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Certificate serial: 088C
Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C6EDD52EF4C011EAA7B25986C4F9AE02.roa
Signing time: Mon 30 Mar 2026 21:26:59 +0000
ROA not before: Mon 30 Mar 2026 21:26:59 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 132883
IP address blocks: 103.87.8.0/24 maxlen: 24
103.87.9.0/24 maxlen: 24
103.87.10.0/24 maxlen: 24
103.87.11.0/24 maxlen: 24
116.204.208.0/24 maxlen: 24
116.204.209.0/24 maxlen: 24
116.204.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 20:35:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2188 (0x88c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Validity
Not Before: Mar 30 21:26:59 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69caeaa3-6558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:45:03:bb:78:a4:0d:3a:e0:09:78:bd:86:
cc:8d:33:c4:f8:01:85:72:a8:f2:a8:e3:8a:a1:b8:
a5:0b:2a:1e:af:d6:28:9b:61:80:58:27:fb:75:72:
25:07:77:b3:a0:e0:ec:c8:17:8f:b8:f9:22:f2:2b:
fa:6a:fe:82:ee:0a:2a:5b:be:f1:90:07:d7:79:b3:
00:bc:2b:00:e8:4e:03:d8:56:a9:4e:a3:23:fb:e4:
df:aa:6a:b8:45:a9:1f:0c:77:6b:49:c0:fb:c5:7b:
7e:92:ec:a7:90:d0:ab:3a:4e:19:4f:54:81:56:ac:
c2:3e:fc:f4:8d:e5:17:a3:1b:fd:87:e2:7a:5d:4c:
9c:1f:24:c5:af:b7:36:12:d4:a9:f2:d6:e3:fa:98:
3b:84:d5:50:26:c2:fb:f1:3b:6a:17:81:74:2d:6f:
dc:99:56:ca:b4:c9:ce:7f:1c:f0:d2:a3:27:96:fe:
d8:bc:17:7c:ac:e5:9b:1a:67:33:9b:18:c0:30:7c:
ee:f4:27:93:ea:27:ec:f2:d8:f1:cf:64:a1:4b:eb:
cd:ca:df:ad:b3:12:ae:4f:1e:97:c0:83:b5:9c:4d:
8b:ba:f1:16:5e:ca:2f:1b:15:b4:29:4f:b9:ad:97:
7f:54:4f:29:9f:be:25:57:fe:57:5d:b2:88:a7:7a:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E1:A8:C0:74:17:A9:97:C8:27:A3:49:FB:2B:67:BA:B2:7F:F3:E5
X509v3 Authority Key Identifier:
keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/C6EDD52EF4C011EAA7B25986C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.87.8.0/22
116.204.208.0-116.204.210.255
Signature Algorithm: sha256WithRSAEncryption
bf:9e:7b:2b:a9:e1:c8:50:bf:fb:c2:e4:bc:8e:56:f3:e8:40:
ec:13:43:cc:34:79:90:0d:49:de:a1:cf:04:7a:e5:40:dc:29:
2a:62:32:82:f7:7d:d5:3b:c1:f9:ce:dd:fc:1b:e0:8c:1f:ea:
81:79:38:1a:f3:96:f6:f2:8f:53:63:46:6a:6e:e3:af:63:02:
a7:d3:eb:32:f8:c1:94:8f:ee:22:28:84:b9:e5:2b:0a:dc:21:
63:80:77:f6:a8:58:89:b5:50:c9:b7:3d:ef:99:11:11:1d:22:
bf:27:38:3f:36:6b:9c:92:29:b1:b4:60:81:33:f7:cb:f8:02:
25:01:f6:b6:f0:c3:56:d4:6a:c9:9c:4c:e2:ce:30:71:0c:3f:
74:80:bc:a2:82:54:41:de:8d:d4:94:e1:ee:b6:3d:58:69:52:
7a:ce:d0:3c:e6:ae:c5:f6:fc:c1:81:1c:c8:c9:c6:53:b8:cd:
d0:1a:ac:8e:9d:46:24:dd:6a:59:b5:ba:29:dd:e3:a9:b0:4b:
e9:16:2d:27:5a:2d:6d:19:2f:01:9b:34:db:6a:30:2a:7c:8e:
d4:45:cd:44:d1:af:a9:bb:26:05:f0:72:42:dd:86:42:40:97:
67:08:11:23:31:bb:ae:91:c1:50:a6:d1:52:c0:db:fb:b5:55:
c7:9f:8d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:58 2026 by rpki-client