
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
File: F9869896C8F411EBB460DB52C4F9AE02.roa (raw, json)
Hash identifier: K6M5+omsh8sdWzUbRK0rqy52Lgh96SakH3WSKDZW7gk=
Subject key identifier: 55:BD:65:2C:E1:42:31:5A:93:58:CB:82:F4:B2:82:9B:50:0E:DC:06
Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Certificate serial: 0648
Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:37:18 +0000
ROA not before: Wed 24 Sep 2025 18:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142058
IP address blocks: 103.166.38.0/23 maxlen: 23
103.166.38.0/24 maxlen: 24
103.166.39.0/24 maxlen: 24
2001:df5:4f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Validity
Not Before: Sep 24 18:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a432fe-b5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:35:38:90:51:c2:f6:11:30:2e:bf:d3:9d:64:
b7:cd:96:de:80:de:2c:f8:cd:98:cf:02:6f:c1:dd:
4e:86:c1:3f:dc:60:55:90:75:5d:07:0d:d8:fe:c5:
df:b0:e9:fb:03:ce:b7:40:f1:63:4e:87:1b:99:93:
fa:8c:00:37:a3:da:ac:ee:cb:9e:53:5a:29:c1:52:
e2:d9:96:fa:e1:56:8d:34:6f:3d:e7:9d:49:88:af:
f5:8f:75:84:8f:9b:1b:fc:f8:b2:27:19:3b:a4:e0:
dc:fd:20:0e:a4:61:87:f7:9d:85:78:4d:82:8e:5f:
10:5a:3f:4c:09:30:c6:5b:fe:5d:42:c0:75:a4:72:
c1:af:ce:90:49:10:58:71:5f:b7:5b:81:5f:4c:51:
8a:a7:04:c1:19:70:1d:d5:30:ce:71:46:26:8e:13:
e4:b1:e3:23:c7:67:06:32:33:f9:d0:4c:fb:f2:50:
58:0e:f6:fd:81:cf:62:77:6e:2b:63:46:a3:9d:34:
a7:18:37:5f:96:c0:62:02:d9:d0:b7:39:a7:7c:5e:
f1:42:ba:74:50:2d:bc:7a:91:b1:ef:37:ee:9f:c3:
2e:14:29:9d:e6:f6:8e:8a:20:4b:33:0b:6e:19:03:
f2:89:9b:ae:cd:a3:c8:e6:19:84:c1:30:30:e7:43:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BD:65:2C:E1:42:31:5A:93:58:CB:82:F4:B2:82:9B:50:0E:DC:06
X509v3 Authority Key Identifier:
keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.38.0/23
IPv6:
2001:df5:4f40::/48
Signature Algorithm: sha256WithRSAEncryption
99:f5:cd:02:32:12:85:80:db:58:bc:e7:d7:02:61:d9:9a:37:
50:8c:98:83:da:09:10:5d:8e:e8:b1:6c:a8:b2:fb:46:f5:cc:
8f:26:ba:0d:71:c1:2d:a8:17:75:00:c5:ca:a0:de:c0:e0:c8:
41:8a:01:9a:64:fc:45:44:8f:04:bb:3a:90:bc:b7:71:60:d7:
21:c3:36:bb:a1:16:41:52:5f:26:d9:8b:2f:5f:ab:2d:ec:b4:
87:2a:9f:e7:45:72:a1:9e:ca:32:60:40:cc:8b:0b:b2:9d:6d:
0b:bc:fa:9d:f7:1a:3f:c2:df:0b:6e:51:78:e1:35:b7:26:6c:
85:be:14:31:ba:fe:81:a1:e2:d9:37:99:cb:24:3d:29:5f:2e:
7e:a9:60:3c:ef:9f:a0:ff:8e:29:61:65:01:44:72:f7:3e:fc:
5b:fc:3a:ec:ce:db:bf:94:3d:9d:19:69:52:12:2a:92:a9:bd:
a3:bf:b5:aa:69:92:d7:d2:4b:7d:7d:d7:a8:6b:58:76:df:08:
fc:d4:af:a2:d1:62:a6:9e:b0:d5:bd:77:e0:48:77:f1:a5:cb:
2c:3d:0c:c7:8b:02:5e:e8:3f:11:f2:b4:37:08:d6:b0:c6:a9:
48:9f:ad:78:ae:d5:63:3d:24:7c:c2:82:5a:ca:bc:48:78:e7:
f1:29:9c:91
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2
NTRGQjFBMDQwHhcNMjUwOTI0MTg0OTQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MzJmZS1iNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAijU4kFHC9hEwLr/TnWS3zZbegN4s+M2YzwJvwd1OhsE/3GBVkHVdBw3Y/sXf
sOn7A863QPFjTocbmZP6jAA3o9qs7sueU1opwVLi2Zb64VaNNG89551JiK/1j3WE
j5sb/PiyJxk7pODc/SAOpGGH952FeE2Cjl8QWj9MCTDGW/5dQsB1pHLBr86QSRBY
cV+3W4FfTFGKpwTBGXAd1TDOcUYmjhPkseMjx2cGMjP50Ez78lBYDvb9gc9id24r
Y0ajnTSnGDdflsBiAtnQtzmnfF7xQrp0UC28epGx7zfun8MuFCmd5vaOiiBLMwtu
GQPyiZuuzaPI5hmEwTAw50N6MQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFW9ZSzh
QjFak1jLgvSygptQDtwGMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4
RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTNFMTUvNjcwQzA5ODBDOEYyMTFFQjhFM0ZBRDUwQzRGOUFFMDIvRjk4Njk4OTZD
OEY0MTFFQkI0NjBEQjUyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ6YmMA8EAgACMAkDBwAgAQ31T0AwDQYJKoZIhvcNAQELBQADggEB
AJn1zQIyEoWA21i859cCYdmaN1CMmIPaCRBdjuixbKiy+0b1zI8mug1xwS2oF3UA
xcqg3sDgyEGKAZpk/EVEjwS7OpC8t3Fg1yHDNruhFkFSXybZiy9fqy3stIcqn+dF
cqGeyjJgQMyLC7KdbQu8+p33Gj/C3wtuUXjhNbcmbIW+FDG6/oGh4tk3mcskPSlf
Ln6pYDzvn6D/jilhZQFEcvc+/Fv8OuzO27+UPZ0ZaVISKpKpvaO/tappktfSS319
16hrWHbfCPzUr6LRYqaesNW9d+BId/Glyyw9DMeLAl7oPxHytDcI1rDGqUifrXiu
1WM9JHzCglrKvEh45/EpnJE=
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:33 2026 by rpki-client