
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8AF73C7E7BF511F0BEBF8326C4F9AE02.roa
File: 8AF73C7E7BF511F0BEBF8326C4F9AE02.roa (raw, json)
Hash identifier: DrgQ3c30s/8aRln/0QBML0s10GhufbUYZIMkX/pX6Mc=
Subject key identifier: 23:69:1A:8E:66:8A:BF:64:1C:A9:B7:2B:D1:36:C6:0D:C6:05:93:41
Certificate issuer: /CN=A919D588/serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
Certificate serial: DA
Authority key identifier: 88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8AF73C7E7BF511F0BEBF8326C4F9AE02.roa
Signing time: Thu 03 Sep 2026 01:57:51 +0000
ROA not before: Thu 03 Sep 2026 01:57:51 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 55581
IP address blocks: 103.55.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl
rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D588, serialNumber=882859D52301F01571D9D4CF953F45E075E09A98
Validity
Not Before: Sep 3 01:57:51 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98d41f-cf29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:b8:65:a1:8c:ec:9c:b8:1d:56:f6:c5:33:
27:9b:2e:1e:c1:5d:6b:3c:aa:df:b5:ae:8d:4c:73:
8a:f7:a8:8a:b5:86:da:7c:78:cd:cc:ef:38:86:93:
e3:2b:e3:9d:10:8b:ff:8e:dc:4e:74:53:ff:a1:29:
51:01:b5:16:45:bd:71:fd:0b:cd:23:7e:b5:fb:28:
69:8e:e1:cc:d5:29:b1:c9:3a:09:7a:ff:74:8c:c2:
50:29:60:ad:7f:fe:21:78:f7:5d:cb:23:79:53:d0:
ff:86:a2:52:9d:46:1e:f2:83:fd:d3:0b:aa:0b:33:
d5:f7:17:de:52:5f:36:4b:a8:84:8e:60:a6:9e:e8:
5c:94:d9:d5:c1:63:3b:71:60:ef:32:bd:94:dd:1d:
1c:bc:3f:ad:78:b6:b2:bf:ac:00:9b:bd:1f:f1:bb:
3e:99:b1:6a:3c:45:65:c1:5b:1e:b2:b6:ee:bc:75:
f7:05:1a:70:ae:f5:1c:df:04:09:41:6a:96:61:4f:
41:8e:ad:f2:77:bc:ec:27:39:33:42:ec:e1:1e:b0:
89:82:f4:12:1f:55:c7:f2:7f:77:1a:ca:f0:05:4b:
f1:b9:eb:e6:63:af:80:8f:c3:83:02:bc:a1:64:e7:
5b:10:04:2a:e5:20:1b:1f:35:f6:7b:ac:e8:06:be:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:69:1A:8E:66:8A:BF:64:1C:A9:B7:2B:D1:36:C6:0D:C6:05:93:41
X509v3 Authority Key Identifier:
keyid:88:28:59:D5:23:01:F0:15:71:D9:D4:CF:95:3F:45:E0:75:E0:9A:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/iChZ1SMB8BVx2dTPlT9F4HXgmpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iChZ1SMB8BVx2dTPlT9F4HXgmpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D588/BF7D5E767BF311F0A05FAD82C4F9AE02/8AF73C7E7BF511F0BEBF8326C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.55.132.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d5:9f:4b:32:97:87:4d:16:e0:48:dc:36:f9:d5:21:78:ed:
cc:bc:27:99:00:ba:41:89:ee:09:23:f1:32:bb:0b:49:3f:3f:
c1:65:8d:44:af:1f:ec:c5:4a:dc:45:30:d5:d7:15:22:f1:79:
5a:ec:1c:1a:27:93:fd:62:84:1a:aa:f6:5c:0a:30:cb:11:ba:
e8:ca:c9:0d:9d:48:01:81:8f:29:de:35:d6:28:b0:01:8a:f2:
ca:8c:91:62:27:44:97:58:26:a9:12:ee:95:dd:cd:79:08:94:
4b:f4:01:88:af:16:a3:02:ff:56:0a:04:39:7c:2f:8d:be:ea:
33:d4:e1:69:b2:65:2f:f4:2c:25:96:a9:97:3e:e1:e0:c8:77:
7b:62:a0:98:f8:04:b7:5d:4d:15:53:c4:29:be:95:ea:85:5c:
93:48:d9:2f:f0:76:84:7e:a2:15:1f:28:fb:89:95:05:ec:e5:
77:18:62:56:46:cc:5a:32:ec:7a:a6:87:75:20:48:a0:39:53:
93:d8:ad:12:52:cf:4b:75:1a:62:5b:d1:4f:c6:a8:84:e8:fd:
ac:5e:34:13:38:39:fd:f8:d4:9a:42:c2:a5:c9:40:59:a6:75:
49:8e:f8:06:c7:46:92:07:fa:34:8f:2c:6a:86:83:dd:f9:b4:
f1:4f:cd:cd
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUQ1ODgxMTAvBgNVBAUTKDg4Mjg1OUQ1MjMwMUYwMTU3MUQ5RDRDRjk1M0Y0NUUw
NzVFMDlBOTgwHhcNMjYwOTAzMDE1NzUxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ZDQxZi1jZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8+4ZaGM7Jy4HVb2xTMnmy4ewV1rPKrfta6NTHOK96iKtYbafHjNzO84hpPj
K+OdEIv/jtxOdFP/oSlRAbUWRb1x/QvNI361+yhpjuHM1SmxyToJev90jMJQKWCt
f/4hePddyyN5U9D/hqJSnUYe8oP90wuqCzPV9xfeUl82S6iEjmCmnuhclNnVwWM7
cWDvMr2U3R0cvD+teLayv6wAm70f8bs+mbFqPEVlwVsesrbuvHX3BRpwrvUc3wQJ
QWqWYU9Bjq3yd7zsJzkzQuzhHrCJgvQSH1XH8n93GsrwBUvxuevmY6+Aj8ODAryh
ZOdbEAQq5SAbHzX2e6zoBr7cHQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCNpGo5m
ir9kHKm3K9E2xg3GBZNBMB8GA1UdIwQYMBaAFIgoWdUjAfAVcdnUz5U/ReB14JqY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDU4OC9CRjdENUU3NjdC
RjMxMUYwQTA1RkFEODJDNEY5QUUwMi9pQ2haMVNNQjhCVngyZFRQbFQ5RjRIWGdt
cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lDaFoxU01COEJWeDJkVFBsVDlGNEhYZ21wZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUQ1ODgvQkY3RDVFNzY3QkYzMTFGMEEwNUZBRDgyQzRGOUFFMDIvOEFGNzNDN0U3
QkY1MTFGMEJFQkY4MzI2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZzeEMA0GCSqGSIb3DQEBCwUAA4IBAQAC1Z9LMpeHTRbgSNw2+dUh
eO3MvCeZALpBie4JI/EyuwtJPz/BZY1Erx/sxUrcRTDV1xUi8Xla7BwaJ5P9YoQa
qvZcCjDLEbroyskNnUgBgY8p3jXWKLABivLKjJFiJ0SXWCapEu6V3c15CJRL9AGI
rxajAv9WCgQ5fC+Nvuoz1OFpsmUv9CwllqmXPuHgyHd7YqCY+AS3XU0VU8QpvpXq
hVyTSNkv8HaEfqIVHyj7iZUF7OV3GGJWRsxaMux6pod1IEigOVOT2K0SUs9LdRpi
W9FPxqiE6P2sXjQTODn9+NSaQsKlyUBZpnVJjvgGx0aSB/o0jyxqhoPd+bTxT83N
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:12 2026 by rpki-client