
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/0F6B8D969A6B11F08E49AE43C4F9AE02.roa
File: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (raw, json)
Hash identifier: H04QBDV26pSEqU+6Gzyw1sm5OlSGepj/HF/CM4cYOU8=
Subject key identifier: BA:CB:B3:6F:39:A3:F9:AC:0A:EE:31:E7:CE:89:23:08:53:71:02:3C
Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Certificate serial: 2E86
Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/0F6B8D969A6B11F08E49AE43C4F9AE02.roa
Signing time: Sun 30 Aug 2026 16:22:21 +0000
ROA not before: Sun 30 Aug 2026 16:22:21 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 139906
IP address blocks: 103.146.192.0/23 maxlen: 24
203.31.161.0/24 maxlen: 24
2405:d7c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 15:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11910 (0x2e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Validity
Not Before: Aug 30 16:22:21 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9458bc-1eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:d8:6d:32:d2:0c:5b:c9:05:43:84:87:80:
7c:fd:ae:97:aa:a0:6c:83:0e:e7:d4:4a:67:7c:9e:
0f:4f:15:50:5b:3a:27:0d:58:d7:8a:0b:6b:b8:d0:
85:b1:ff:c1:a9:b3:ff:2f:b8:d9:ed:9f:ad:56:2a:
0d:06:b5:f3:c5:cc:88:59:34:90:e2:86:17:ae:34:
01:9a:71:86:f7:b1:bd:1b:88:e6:8c:61:08:a7:4d:
73:82:59:5f:48:94:41:c0:1e:f7:4a:e1:c2:c2:74:
9e:32:5d:af:27:12:fd:13:13:0f:7f:ed:88:08:f1:
26:b2:38:03:c7:88:f7:03:52:00:8f:34:ad:91:08:
fd:cb:96:11:56:db:00:23:b1:66:0e:01:e6:86:10:
79:fb:18:9d:ed:60:27:f5:1f:e1:75:cc:c4:9f:fb:
aa:13:4d:9d:54:28:31:47:4c:4b:8f:d6:59:cc:d5:
ea:98:e6:0d:04:26:2b:ea:2e:3c:3d:bf:57:eb:db:
b0:39:50:60:c1:43:ec:aa:ad:77:0e:19:bd:9e:5e:
8b:c2:04:84:87:64:2c:ac:c0:af:76:6e:01:02:a2:
8c:99:3e:19:04:b2:5f:fe:c9:a4:c5:f1:d2:55:c0:
94:92:f9:c7:f3:35:d8:9d:8e:da:1a:8c:34:25:49:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CB:B3:6F:39:A3:F9:AC:0A:EE:31:E7:CE:89:23:08:53:71:02:3C
X509v3 Authority Key Identifier:
keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/0F6B8D969A6B11F08E49AE43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.192.0/23
203.31.161.0/24
IPv6:
2405:d7c0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:ef:75:e4:0a:08:a9:c2:d0:2c:54:aa:a2:35:39:10:f4:69:
1f:52:5c:f9:95:b1:16:c4:a7:3c:c9:43:a3:00:e4:40:e3:53:
d5:f9:a4:49:67:8f:6e:41:30:ba:d7:55:7e:76:c5:3d:ea:ba:
43:c0:61:66:e6:dc:39:3e:e9:a7:61:d8:c7:3b:5a:bc:43:18:
8b:5e:51:bb:ed:fe:84:55:bf:3a:85:a7:61:e3:20:02:72:10:
22:61:d4:2b:88:b2:b2:0b:49:ae:5a:0d:05:db:b8:7e:93:c2:
1e:07:97:08:63:53:c3:3b:02:56:c7:b2:4e:52:e4:75:ec:49:
18:f4:19:bc:09:8e:45:bd:67:91:b3:56:76:ca:6c:d6:82:c1:
40:52:4c:74:66:a1:7c:b7:e1:c6:fa:e8:37:ca:90:3c:5e:0d:
49:c9:95:f6:ec:5d:c0:47:31:79:75:33:85:ce:d3:81:e1:ca:
2f:ad:1e:ee:81:f7:95:dd:1b:95:cf:8e:87:df:1e:6d:65:0f:
de:0c:1d:20:fa:dd:ab:d4:df:35:51:6a:d6:78:1b:c4:00:f7:
c1:27:d2:cf:b0:01:9b:66:38:e1:00:c5:46:6b:93:30:a8:fb:
d8:6e:ed:9e:81:69:72:f5:ef:1a:61:c5:37:68:49:1d:d1:b1:
53:a8:7a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:33:34 2026 by rpki-client