
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/9728C64EF10811EE8F128341C4F9AE02.roa
File: 9728C64EF10811EE8F128341C4F9AE02.roa (raw, json)
Hash identifier: oPiJqmRhnsqJ9VzYZizn2gWr3NtxijO+hht/Af3EOxY=
Subject key identifier: BF:B7:6B:9B:58:6D:B3:59:FA:2B:65:44:46:DB:97:74:7F:E1:57:9D
Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial: 01FA
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/9728C64EF10811EE8F128341C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:17:34 +0000
ROA not before: Fri 29 Aug 2025 04:22:39 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 151636
IP address blocks: 103.244.92.0/24 maxlen: 24
103.244.93.0/24 maxlen: 24
2401:8620::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Validity
Not Before: Aug 29 04:22:39 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3f61e-f122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:00:d7:6d:db:ae:92:40:af:40:1f:bd:6b:
62:9a:57:b6:6f:1f:78:3d:f6:6c:f5:c5:39:62:a8:
1d:78:2f:b4:74:dc:b5:6a:c0:47:09:93:ac:93:52:
1e:87:7d:e4:32:67:99:14:b1:27:7a:9d:cd:93:71:
69:02:12:c7:d8:23:9b:83:59:2d:b6:b3:17:00:a0:
ae:91:ea:61:40:e0:a0:93:6e:c1:e3:b8:93:4b:2f:
9b:45:a4:2c:4a:06:e9:a4:8f:3c:ff:fe:db:a2:99:
4f:3b:94:3a:cc:ac:0a:9c:e0:61:09:1a:a7:d6:97:
c3:24:b5:f1:d4:f6:2a:01:5d:5c:3a:32:dc:59:e2:
e0:ca:71:99:94:c8:39:c2:ce:65:c6:eb:1d:2b:82:
38:3d:81:96:20:6f:bb:fc:00:2c:ed:a8:15:84:6c:
a4:66:1f:47:ef:6d:5b:73:88:15:29:ed:26:d7:6d:
4b:cc:3c:2d:3a:95:71:4b:32:6f:44:ab:93:8d:45:
69:d7:6a:d0:d3:4e:47:fd:c7:40:5f:81:36:56:2b:
08:d9:2b:53:05:22:29:9b:8d:db:23:78:02:a7:62:
56:e4:9b:ae:13:a7:9d:d7:af:1e:72:0d:ec:a3:94:
a8:94:e8:25:c5:0f:2c:86:b6:2f:be:28:6a:2c:56:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:6B:9B:58:6D:B3:59:FA:2B:65:44:46:DB:97:74:7F:E1:57:9D
X509v3 Authority Key Identifier:
keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/9728C64EF10811EE8F128341C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.244.92.0/23
IPv6:
2401:8620::/32
Signature Algorithm: sha256WithRSAEncryption
56:b0:5e:30:61:03:6a:30:b5:48:1a:28:a0:d4:e4:ed:68:d6:
9a:26:4e:be:e4:d9:55:6b:5d:b2:db:ee:63:0d:71:ca:23:74:
a2:44:3b:5c:19:4e:a6:55:80:ab:a4:58:e7:0a:0e:57:a9:e8:
f8:7f:8f:c3:88:92:ae:e7:a2:99:a0:af:3b:d1:14:9a:7a:6d:
46:a3:82:fc:db:73:3e:c0:4d:a6:bc:12:c1:94:32:25:ba:bf:
f4:e1:f3:b1:1d:f1:76:12:42:0b:c0:d9:8e:cc:98:06:e4:3c:
0b:ee:09:0a:52:a3:e6:a2:3e:e3:e4:94:f4:5d:88:3d:9b:2e:
e5:c6:04:7e:5b:b5:9f:65:5e:04:b8:3d:02:29:fb:5a:7a:29:
d5:ed:32:08:8a:a6:79:f5:91:08:bb:e1:c3:8c:e4:b8:2a:96:
aa:a6:39:a1:c1:14:42:03:4a:79:ed:54:52:f9:38:24:ef:3f:
e4:7d:a0:55:15:8d:86:b1:e0:44:1d:3b:7e:59:0d:51:25:f4:
46:c3:c0:90:72:a8:97:8e:5c:65:16:c4:08:3d:a2:bc:1a:c8:
f2:1a:46:b6:f1:59:52:fd:3f:dd:2d:53:07:e4:1c:33:37:7d:
c8:53:8e:78:56:1c:1f:af:f5:6c:8e:9c:af:b3:4b:f2:f6:eb:
2b:65:de:ab
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG
MDMzRDQ1QzQwHhcNMjUwODI5MDQyMjM5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjYxZS1mMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmhQA123brpJAr0AfvWtimle2bx94PfZs9cU5YqgdeC+0dNy1asBHCZOsk1Ie
h33kMmeZFLEnep3Nk3FpAhLH2CObg1kttrMXAKCukephQOCgk27B47iTSy+bRaQs
SgbppI88//7boplPO5Q6zKwKnOBhCRqn1pfDJLXx1PYqAV1cOjLcWeLgynGZlMg5
ws5lxusdK4I4PYGWIG+7/AAs7agVhGykZh9H721bc4gVKe0m121LzDwtOpVxSzJv
RKuTjUVp12rQ005H/cdAX4E2VisI2StTBSIpm43bI3gCp2JW5JuuE6ed168ecg3s
o5SolOglxQ8shrYvvihqLFbbDwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFL+3a5tY
bbNZ+itlREbbl3R/4VedMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE
NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNGMjYvNzAzQTAyNTQyRDU1MTFFRTg5QUEyMDA5QzRGOUFFMDIvOTcyOEM2NEVG
MTA4MTFFRThGMTI4MzQxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ/RcMA0EAgACMAcDBQAkAYYgMA0GCSqGSIb3DQEBCwUAA4IBAQBW
sF4wYQNqMLVIGiig1OTtaNaaJk6+5NlVa12y2+5jDXHKI3SiRDtcGU6mVYCrpFjn
Cg5Xqej4f4/DiJKu56KZoK870RSaem1Go4L823M+wE2mvBLBlDIlur/04fOxHfF2
EkILwNmOzJgG5DwL7gkKUqPmoj7j5JT0XYg9my7lxgR+W7WfZV4EuD0CKftaeinV
7TIIiqZ59ZEIu+HDjOS4KpaqpjmhwRRCA0p57VRS+Tgk7z/kfaBVFY2GseBEHTt+
WQ1RJfRGw8CQcqiXjlxlFsQIPaK8GsjyGka28VlS/T/dLVMH5BwzN33IU454Vhwf
r/Vsjpyvs0vy9usrZd6r
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:27 2026 by rpki-client