
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
File: F9869896C8F411EBB460DB52C4F9AE02.roa (raw, json)
Hash identifier: PdQ6SgMlmZ2SB5NNfyfJDeiEP6MIsU2W1VedXKrV9I4=
Subject key identifier: 22:0C:74:F5:DC:62:87:6E:A1:3D:F7:4E:D0:FC:4C:65:16:0A:50:17
Certificate issuer: /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Certificate serial: 0666
Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
Signing time: Mon 20 Apr 2026 23:28:56 +0000
ROA not before: Mon 20 Apr 2026 23:28:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142058
IP address blocks: 103.166.38.0/23 maxlen: 23
103.166.38.0/24 maxlen: 24
103.166.39.0/24 maxlen: 24
2001:df5:4f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:42:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1638 (0x666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Validity
Not Before: Apr 20 23:28:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69e6b6b8-31ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:14:1b:fd:f6:d1:13:4c:6e:fe:14:43:45:
fb:b7:dd:c8:f9:e1:1a:a1:f7:82:64:e9:07:41:89:
c7:6e:9a:c9:87:f9:13:dd:26:43:41:d9:db:7d:3a:
68:5c:ce:1e:76:ed:13:bf:da:b5:02:69:fa:e4:48:
68:bf:e6:87:f9:84:d8:79:25:71:a2:9f:0d:ce:b6:
46:a9:63:b9:1e:23:3f:3c:6d:e3:3f:55:81:f5:d0:
d5:c9:89:c7:25:49:ea:d2:c4:74:16:dc:68:58:b5:
41:db:21:03:ef:61:18:49:3a:ee:81:27:1b:21:19:
bb:98:58:4b:6b:52:66:1f:6b:a2:c5:26:c3:a3:86:
33:f0:43:de:ab:5c:b6:53:e1:eb:99:6a:02:ec:65:
cd:7d:99:91:aa:0c:44:fa:cd:b9:d0:08:31:a3:11:
a7:da:de:89:b1:58:99:fe:57:ae:22:51:3a:19:5e:
6b:8e:5d:2f:3d:31:a6:3f:f5:bf:ed:2e:31:f6:df:
17:74:58:08:f1:cb:5d:12:22:49:8a:56:80:18:a1:
8c:40:91:78:c0:4b:95:40:09:d5:cb:76:06:5f:81:
0a:a7:7a:fa:73:67:2f:1d:9d:0f:d5:74:06:23:b2:
02:60:7a:24:49:6d:1c:d0:fc:75:66:46:d4:81:5e:
f5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0C:74:F5:DC:62:87:6E:A1:3D:F7:4E:D0:FC:4C:65:16:0A:50:17
X509v3 Authority Key Identifier:
keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/F9869896C8F411EBB460DB52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.38.0/23
IPv6:
2001:df5:4f40::/48
Signature Algorithm: sha256WithRSAEncryption
23:d0:54:05:11:a4:94:fe:41:16:3a:2c:0c:5c:c4:9b:43:c8:
a4:1c:2c:46:27:7d:67:c4:c3:b1:56:47:82:98:02:3b:29:73:
2c:bb:df:93:eb:d8:d6:9e:9b:4a:e8:1e:a1:8b:b2:2f:8f:b0:
49:5d:91:44:55:f9:e2:b6:16:2f:4e:c3:38:ea:78:ca:fa:f9:
32:c7:72:cd:31:2d:1e:99:d0:f8:8e:02:2e:25:65:ed:10:a8:
9f:4c:4e:45:c4:53:1e:28:da:19:cc:6e:5d:20:41:44:2e:b9:
f9:76:0e:24:5e:01:e8:c2:3e:29:f3:6e:a1:54:c9:da:bb:0b:
ab:d0:0c:27:23:9b:e9:78:48:1b:d1:8f:f3:98:24:d4:bc:e3:
0f:4b:4d:fc:ac:47:e7:54:a7:e7:60:6d:b9:31:be:06:c4:a4:
46:4f:62:7d:3e:02:db:5c:84:cc:d5:b3:29:11:13:aa:16:ea:
b4:56:98:18:2a:d9:04:92:13:45:12:16:05:ce:5b:55:19:ec:
26:7c:3a:3a:3b:8f:b5:5c:61:6d:db:55:44:aa:dd:a8:0f:ed:
f4:05:37:1f:8f:7c:84:45:9c:1b:32:be:20:fc:c5:60:70:5e:
13:2f:38:b3:e4:de:9b:73:26:15:43:5a:57:46:ce:f7:25:f6:
cb:e5:7b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:52 2026 by rpki-client