
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/AFDA40003AB511E9A79AA42DC4F9AE02.roa
File: AFDA40003AB511E9A79AA42DC4F9AE02.roa (raw, json)
Hash identifier: YkgZVrV5vjIQhVdrVUxXczN4RAkHyGEMn+Q/a9az7v4=
Subject key identifier: D9:31:20:D7:B3:E5:E6:B8:D8:35:FD:EA:1A:BC:44:F7:4D:76:4C:BE
Certificate issuer: /CN=A9199CE9/serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Certificate serial: 113C
Authority key identifier: D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/AFDA40003AB511E9A79AA42DC4F9AE02.roa
Signing time: Sat 04 Apr 2026 17:21:25 +0000
ROA not before: Sat 04 Apr 2026 17:21:25 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 3
IP address blocks: 103.134.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4412 (0x113c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199CE9, serialNumber=D50EE693CB4844DD2E76034BECBD36A881C37897
Validity
Not Before: Apr 4 17:21:25 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69d14895-3657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5c:77:16:30:be:85:b9:90:42:39:84:e5:80:
38:c1:74:05:c6:c0:9f:03:7d:81:48:78:f1:cd:67:
69:52:8e:ce:43:82:8a:4f:46:8c:84:49:1f:6f:be:
8b:79:21:d6:f9:64:c6:76:61:7c:11:b6:02:94:30:
6e:1a:8b:40:c3:42:8d:df:df:ee:fe:19:c9:b5:62:
be:fe:54:5d:36:70:23:bb:8d:83:2f:6a:fe:fd:8a:
f6:b7:44:fd:90:1d:b1:09:5c:34:0e:25:a6:e4:ff:
23:b2:79:66:37:51:a9:8b:2c:3a:dd:ad:96:87:d0:
a1:4b:09:27:3d:6c:b7:9e:62:09:e0:bf:fe:fb:32:
d8:2c:d8:06:fb:78:1b:36:2b:3c:89:e5:e6:fa:30:
95:81:75:0e:6f:3d:20:30:ce:66:d4:96:ff:4c:12:
c8:5b:33:81:46:04:39:ce:dd:2f:ad:88:f5:8e:54:
87:25:06:b5:bf:bb:a5:81:48:e1:83:21:83:a5:91:
e8:45:64:33:a1:85:8c:db:4d:07:5a:60:3f:9e:c4:
b8:25:9b:18:16:23:84:42:4e:3b:b9:b9:d0:7d:af:
a8:99:b0:56:6d:c4:f6:9e:5f:21:85:c9:85:ae:55:
6a:3f:cb:0c:0a:08:27:ec:36:66:e6:e8:77:94:b1:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:31:20:D7:B3:E5:E6:B8:D8:35:FD:EA:1A:BC:44:F7:4D:76:4C:BE
X509v3 Authority Key Identifier:
keyid:D5:0E:E6:93:CB:48:44:DD:2E:76:03:4B:EC:BD:36:A8:81:C3:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/1Q7mk8tIRN0udgNL7L02qIHDeJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Q7mk8tIRN0udgNL7L02qIHDeJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199CE9/6CBB84F431F111E98A7B9317C4F9AE02/AFDA40003AB511E9A79AA42DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.63.0/24
Signature Algorithm: sha256WithRSAEncryption
24:2d:af:a9:af:25:57:f3:6a:12:d0:2a:04:4c:51:d1:a9:29:
3e:6e:c6:a8:1f:ae:23:8e:19:85:18:c5:58:3f:41:da:6b:2f:
36:c7:fb:8e:74:02:eb:e2:29:4f:be:68:5f:40:da:84:ba:35:
ce:c1:ee:0a:98:14:27:17:4f:2a:4e:22:24:fc:63:bd:ea:ca:
f4:22:93:77:0b:fc:e8:12:2d:bf:4c:15:ad:70:c3:ce:4a:cb:
d0:5c:68:8b:09:e4:03:68:a8:c0:c1:02:0a:a2:20:ca:a1:aa:
32:b3:fb:c8:3c:4d:e7:95:7e:f0:28:3d:df:3b:d4:eb:b0:b5:
df:80:bc:5a:74:7a:7f:46:ad:35:5f:48:ef:05:7f:d8:ea:68:
f7:57:f4:f3:ea:53:35:07:ab:74:a9:b6:fe:17:ac:e3:f9:81:
34:30:02:47:80:ca:aa:95:8a:b2:c8:9f:95:48:21:10:76:0d:
ff:6b:c0:b0:da:42:42:4f:04:3e:ba:f2:b3:e9:fb:f1:4e:ee:
73:8c:af:ac:62:ad:cc:b5:46:1a:04:09:39:21:d2:55:fd:02:
12:00:70:93:aa:08:87:41:e6:8b:f7:ec:13:74:79:35:be:06:
fb:70:0e:6b:d9:78:9d:5b:3f:3e:38:e5:bf:0f:d5:d3:6e:6e:
62:d6:b8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:17 2026 by rpki-client