
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/974EBF7CB82D11F1A61D0ABF3F11F970.roa
File: 974EBF7CB82D11F1A61D0ABF3F11F970.roa (raw, json)
Hash identifier: 0zU3QVFp2AuLbCUg4ObkkKjGIwaRzDdyeZGkUpalRQg=
Subject key identifier: 65:7E:38:D5:29:F9:AA:59:D3:1C:6E:F1:43:BA:2A:2C:E2:DD:79:42
Certificate issuer: /CN=A911270F/serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Certificate serial: 0C39
Authority key identifier: 50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/974EBF7CB82D11F1A61D0ABF3F11F970.roa
Signing time: Thu 24 Sep 2026 15:35:38 +0000
ROA not before: Thu 24 Sep 2026 15:35:38 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 140040
IP address blocks: 103.147.190.0/23 maxlen: 23
103.147.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 18:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911270F, serialNumber=50AB13100543F646C0C55375DEF8505D14F366B8
Validity
Not Before: Sep 24 15:35:38 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6ab5434a-1a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:5e:ed:dd:ae:2c:4f:18:4e:04:ba:d3:bd:
91:b7:5a:0d:8d:2f:48:b2:00:2d:c9:2c:e1:7f:94:
1a:a4:41:31:23:3a:d9:a6:c6:b4:41:ec:b6:2b:8b:
93:2d:2f:e1:3d:71:3c:57:19:cb:bf:63:cf:bc:cd:
92:17:6c:b2:b2:87:23:5e:21:fb:a9:73:53:7f:03:
6a:e4:ee:91:b8:d8:ab:75:33:a0:67:29:70:47:46:
b3:ba:91:86:17:bf:b0:07:b4:99:d5:e6:85:3c:28:
a2:e3:3f:86:a3:f7:8b:a0:d4:53:f9:94:00:bc:c7:
29:91:4a:6c:3d:1e:62:ea:e3:e6:86:63:46:5f:b8:
4e:ec:47:f1:23:fc:32:2d:2c:13:be:44:17:56:e2:
87:c4:c2:63:1c:e7:37:bb:a3:59:63:7b:b4:3e:7a:
e3:ff:70:e1:02:32:3c:fe:08:2d:d9:81:22:81:3c:
8a:45:62:1e:1e:67:43:99:b0:64:7c:4b:07:2e:77:
4a:86:f1:77:58:2b:04:51:4a:7d:11:0c:93:67:aa:
ea:84:36:63:d9:16:13:98:28:03:72:19:1a:18:a8:
d0:96:67:c3:e4:9a:bb:47:20:29:0b:1d:ab:22:e4:
2b:9a:98:a6:71:06:62:84:58:f1:aa:a8:3c:05:29:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7E:38:D5:29:F9:AA:59:D3:1C:6E:F1:43:BA:2A:2C:E2:DD:79:42
X509v3 Authority Key Identifier:
keyid:50:AB:13:10:05:43:F6:46:C0:C5:53:75:DE:F8:50:5D:14:F3:66:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/UKsTEAVD9kbAxVN13vhQXRTzZrg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKsTEAVD9kbAxVN13vhQXRTzZrg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911270F/05D82EE039F711EA967EBA2EC4F9AE02/974EBF7CB82D11F1A61D0ABF3F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.190.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:05:47:3d:d0:0e:46:92:81:bc:0e:2b:2e:e5:64:d2:98:10:
fe:a5:93:a9:43:e4:96:2f:df:17:a2:74:e7:05:9b:8d:8d:80:
e8:f3:85:5e:4c:c1:55:91:37:04:93:5e:a3:cd:48:76:dd:36:
c4:54:8b:29:9e:33:6a:ea:80:8d:1f:54:bd:b1:6d:52:57:e3:
59:2b:cf:b7:dd:aa:8d:06:97:c0:10:9e:c8:ae:7b:44:85:df:
e9:ea:31:45:54:6c:5c:6a:15:49:f8:95:e2:83:4c:2b:4f:ba:
19:5b:ff:a6:19:61:01:ec:82:db:0b:be:42:81:0a:f4:f4:35:
8d:4f:a5:e8:4f:f7:a8:fe:24:6b:0c:d5:ca:01:1b:0f:b9:30:
40:85:92:f9:4a:a1:a5:a6:18:1b:a2:02:7e:f7:5b:24:d2:d5:
c8:1f:dd:55:f3:57:d1:e2:20:4b:a2:14:46:ba:7e:7a:f0:80:
a8:cb:57:63:4a:fb:5d:0e:b3:c0:ae:e0:ed:c4:d7:db:4c:93:
66:47:e0:a8:b3:6c:7a:fb:db:02:cb:3e:f5:fc:f2:d8:f9:47:
46:7f:51:35:23:3c:db:62:ed:83:34:3d:63:12:0b:2f:90:c0:
bb:8a:2f:ef:a0:d5:ba:7d:e2:b3:91:4f:de:45:05:67:c1:a9:
9e:ad:ae:1c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI3MEYxMTAvBgNVBAUTKDUwQUIxMzEwMDU0M0Y2NDZDMEM1NTM3NURFRjg1MDVE
MTRGMzY2QjgwHhcNMjYwOTI0MTUzNTM4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI1NDM0YS0xYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkpZe7d2uLE8YTgS6072Rt1oNjS9IsgAtySzhf5QapEExIzrZpsa0Qey2K4uT
LS/hPXE8VxnLv2PPvM2SF2yysocjXiH7qXNTfwNq5O6RuNirdTOgZylwR0azupGG
F7+wB7SZ1eaFPCii4z+Go/eLoNRT+ZQAvMcpkUpsPR5i6uPmhmNGX7hO7EfxI/wy
LSwTvkQXVuKHxMJjHOc3u6NZY3u0Pnrj/3DhAjI8/ggt2YEigTyKRWIeHmdDmbBk
fEsHLndKhvF3WCsEUUp9EQyTZ6rqhDZj2RYTmCgDchkaGKjQlmfD5Jq7RyApCx2r
IuQrmpimcQZihFjxqqg8BSklmwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGV+ONUp
+apZ0xxu8UO6Kizi3XlCMB8GA1UdIwQYMBaAFFCrExAFQ/ZGwMVTdd74UF0U82a4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwRi8wNUQ4MkVFMDM5
RjcxMUVBOTY3RUJBMkVDNEY5QUUwMi9VS3NURUFWRDlrYkF4Vk4xM3ZoUVhSVHpa
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VLc1RFQVZEOWtiQXhWTjEzdmhRWFJUelpyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI3MEYvMDVEODJFRTAzOUY3MTFFQTk2N0VCQTJFQzRGOUFFMDIvOTc0RUJGN0NC
ODJEMTFGMUE2MUQwQUJGM0YxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5O+MA0GCSqGSIb3DQEBCwUAA4IBAQCqBUc90A5GkoG8Disu5WTS
mBD+pZOpQ+SWL98XonTnBZuNjYDo84VeTMFVkTcEk16jzUh23TbEVIspnjNq6oCN
H1S9sW1SV+NZK8+33aqNBpfAEJ7IrntEhd/p6jFFVGxcahVJ+JXig0wrT7oZW/+m
GWEB7ILbC75CgQr09DWNT6XoT/eo/iRrDNXKARsPuTBAhZL5SqGlphgbogJ+91sk
0tXIH91V81fR4iBLohRGun568ICoy1djSvtdDrPAruDtxNfbTJNmR+Cos2x6+9sC
yz71/PLY+UdGf1E1IzzbYu2DND1jEgsvkMC7ii/voNW6feKzkU/eRQVnwamera4c
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:31:39 2026 by rpki-client