
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/4B6ACA2E21B511F19C8EC293183D8C67.roa
File: 4B6ACA2E21B511F19C8EC293183D8C67.roa (raw, json)
Hash identifier: VPa6yyp/eEFlOacVhCtM4XlEL20jroaHa78D9GMgJRY=
Subject key identifier: BA:C0:4E:A5:DB:99:94:B1:9F:32:E5:83:92:8D:5E:90:67:CB:79:20
Certificate issuer: /CN=A9120960/serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Certificate serial: 47
Authority key identifier: 8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/4B6ACA2E21B511F19C8EC293183D8C67.roa
Signing time: Tue 17 Mar 2026 03:56:36 +0000
ROA not before: Tue 17 Mar 2026 03:56:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138940
IP address blocks: 103.137.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:29:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120960, serialNumber=8A031762E09439C1F577667E42FE0C1379AB1DFD
Validity
Not Before: Mar 17 03:56:36 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b8d0f4-d9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:fb:f4:d1:28:26:e5:6b:a8:46:c3:be:3b:
d6:84:0c:7c:2a:7f:b5:7e:0c:0a:d0:ac:26:4b:d0:
cc:25:96:b3:70:db:1b:00:d4:30:4c:a9:93:93:63:
8d:19:6d:b4:f6:dd:dd:1a:69:8c:73:a9:59:53:8c:
14:99:61:2f:d0:5a:e2:56:f4:a6:6c:02:2f:df:87:
f7:ee:2e:01:8d:28:99:d9:ba:9c:e3:c6:8f:cb:97:
fa:23:4f:28:47:d0:b4:33:8f:7e:81:31:ae:e6:32:
f8:90:bd:28:81:9e:bb:28:72:7c:81:bd:8a:a2:1e:
62:25:8a:5f:29:b6:a1:f3:07:cc:d7:14:a6:d4:d5:
94:2b:a4:ad:e0:a2:a2:92:9d:22:05:9c:6d:65:00:
5d:b8:f3:39:87:ff:7e:a7:e2:3a:07:b0:18:f9:5f:
47:f1:3b:a4:93:08:85:7e:45:90:05:30:0f:61:07:
22:f0:58:db:17:2e:af:3a:1e:e1:98:5e:85:37:82:
0e:a6:07:4a:60:a5:bb:dc:74:89:56:dd:42:99:c2:
9a:81:8a:e3:18:16:83:8a:a1:6a:f5:c3:6d:44:11:
39:c9:4b:e9:d8:76:e3:16:ce:c1:86:0b:04:ac:3f:
50:6a:14:53:39:4f:f3:fb:91:5d:ee:39:95:d7:f9:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:4E:A5:DB:99:94:B1:9F:32:E5:83:92:8D:5E:90:67:CB:79:20
X509v3 Authority Key Identifier:
keyid:8A:03:17:62:E0:94:39:C1:F5:77:66:7E:42:FE:0C:13:79:AB:1D:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/igMXYuCUOcH1d2Z-Qv4ME3mrHf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120960/CB302A9CBB9E11F08558D119C4F9AE02/4B6ACA2E21B511F19C8EC293183D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.137.116.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b2:82:5d:d0:89:d5:4e:a0:98:b5:a2:25:7c:0f:54:89:77:
53:6d:ee:32:ef:28:c8:ae:1c:27:5e:fb:87:a1:61:27:7f:38:
e0:f6:df:b1:b9:18:8f:c1:e7:75:0f:cf:fc:1f:60:0d:a5:80:
80:08:3f:53:0f:67:bc:3c:2a:fd:a6:98:18:e0:e9:90:6e:eb:
b4:6a:6d:fd:7f:dc:68:dc:63:44:9e:c5:64:27:42:9b:77:c3:
7f:c3:bf:fb:95:2f:e3:aa:50:f7:51:67:76:64:24:47:1f:21:
12:69:34:7f:99:f1:b5:ab:28:26:63:42:1e:9c:84:ec:73:78:
b4:fb:26:7e:39:4c:4e:08:1a:55:cf:b9:df:90:d6:79:09:c9:
11:f2:67:9e:49:0e:08:5d:73:5b:0d:80:74:ed:23:29:5b:cf:
88:39:28:a9:70:d2:42:a5:0e:e2:b1:4d:c8:ab:c3:fc:08:bd:
a9:b0:57:fe:85:db:d2:69:3a:4d:18:ce:7b:d4:9f:e0:f6:bc:
94:dd:eb:4e:1c:32:29:de:44:ac:f5:58:b3:d9:e2:de:9d:f2:
ad:08:71:90:90:f5:28:d9:88:36:ec:23:fe:97:8d:fa:d8:dd:
d9:bd:55:5e:6f:88:8e:74:48:ff:d6:80:48:89:7d:8b:ca:d3:
38:10:53:5b
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MDk2MDExMC8GA1UEBRMoOEEwMzE3NjJFMDk0MzlDMUY1Nzc2NjdFNDJGRTBDMTM3
OUFCMURGRDAeFw0yNjAzMTcwMzU2MzZaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YjhkMGY0LWQ5ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtG/v00Sgm5WuoRsO+O9aEDHwqf7V+DArQrCZL0MwllrNw2xsA1DBMqZOTY40Z
bbT23d0aaYxzqVlTjBSZYS/QWuJW9KZsAi/fh/fuLgGNKJnZupzjxo/Ll/ojTyhH
0LQzj36BMa7mMviQvSiBnrsocnyBvYqiHmIlil8ptqHzB8zXFKbU1ZQrpK3goqKS
nSIFnG1lAF248zmH/36n4joHsBj5X0fxO6STCIV+RZAFMA9hByLwWNsXLq86HuGY
XoU3gg6mB0pgpbvcdIlW3UKZwpqBiuMYFoOKoWr1w21EETnJS+nYduMWzsGGCwSs
P1BqFFM5T/P7kV3uOZXX+dGtAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUusBOpduZ
lLGfMuWDko1ekGfLeSAwHwYDVR0jBBgwFoAUigMXYuCUOcH1d2Z+Qv4ME3mrHf0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIwOTYwL0NCMzAyQTlDQkI5
RTExRjA4NTU4RDExOUM0RjlBRTAyL2lnTVhZdUNVT2NIMWQyWi1RdjRNRTNtckhm
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWdNWFl1Q1VPY0gxZDJaLVF2NE1FM21ySGYwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDk2MC9DQjMwMkE5Q0JCOUUxMUYwODU1OEQxMTlDNEY5QUUwMi80QjZBQ0EyRTIx
QjUxMUYxOUM4RUMyOTMxODNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABniXQwDQYJKoZIhvcNAQELBQADggEBAGKygl3QidVOoJi1oiV8D1SJ
d1Nt7jLvKMiuHCde+4ehYSd/OOD237G5GI/B53UPz/wfYA2lgIAIP1MPZ7w8Kv2m
mBjg6ZBu67Rqbf1/3GjcY0SexWQnQpt3w3/Dv/uVL+OqUPdRZ3ZkJEcfIRJpNH+Z
8bWrKCZjQh6chOxzeLT7Jn45TE4IGlXPud+Q1nkJyRHyZ55JDghdc1sNgHTtIylb
z4g5KKlw0kKlDuKxTcirw/wIvamwV/6F29JpOk0YznvUn+D2vJTd604cMineRKz1
WLPZ4t6d8q0IcZCQ9SjZiDbsI/6XjfrY3dm9VV5viI50SP/WgEiJfYvK0zgQU1s=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:17:55 2026 by rpki-client