
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa
File: 8719518C26AD11EDA881874BC4F9AE02.roa (raw, json)
Hash identifier: HnkNlTBBr0V13yoGHOW4BptAYJ1soj2Ny1kwLkAPKBc=
Subject key identifier: E7:BE:37:6D:AC:A7:9B:65:AD:36:B0:84:21:B7:D8:E5:57:94:99:D7
Certificate issuer: /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial: 0401
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa
Signing time: Wed 01 Jul 2026 02:26:23 +0000
ROA not before: Wed 01 Jul 2026 02:26:23 +0000
ROA not after: Fri 30 Oct 2026 00:00:00 +0000
asID: 149810
IP address blocks: 103.186.240.0/23 maxlen: 23
103.186.240.0/24 maxlen: 24
103.186.241.0/24 maxlen: 24
2400:7620::/32 maxlen: 32
2400:7620::/35 maxlen: 35
2400:7620:2000::/35 maxlen: 35
2400:7620:4000::/35 maxlen: 35
2400:7620:6000::/35 maxlen: 35
2400:7620:8000::/35 maxlen: 35
2400:7620:a000::/35 maxlen: 35
2400:7620:c000::/35 maxlen: 35
2400:7620:e000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B71, serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Validity
Not Before: Jul 1 02:26:23 2026 GMT
Not After : Oct 30 00:00:00 2026 GMT
Subject: CN=6a447acf-3350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:96:2d:e7:e0:91:f5:ac:70:2b:61:48:ac:
8e:e2:dc:02:66:03:4d:4e:cc:d6:b2:c4:68:9e:97:
c0:fd:b9:99:98:31:ce:1d:e3:0b:dd:dd:f0:31:2d:
95:3e:ed:24:4f:fd:a7:83:9b:3e:87:e1:8e:07:a9:
33:25:74:ff:35:f8:ce:49:1a:7f:38:fa:45:c1:ce:
e7:ca:12:2d:0a:03:a1:a6:0e:29:f5:ce:e1:1d:c0:
69:bd:89:28:9e:db:de:0e:ce:2a:18:ca:87:d8:47:
2f:ea:9a:38:fb:d1:99:9b:21:eb:e3:a1:69:04:d7:
8a:4f:81:58:b0:b6:ff:40:0c:4b:41:cf:ac:f8:16:
6b:63:19:c1:36:0c:97:87:6b:42:37:c2:e7:d4:87:
c4:b9:ec:c2:05:54:9a:fe:9f:39:f5:48:10:26:73:
7d:56:a0:ed:1c:0b:87:0b:90:d1:f9:ca:5f:dc:7c:
d5:31:a3:75:c2:73:fb:cb:eb:3f:4b:94:9f:0b:8f:
e8:3b:cb:52:26:4e:e7:3f:c3:c1:25:68:84:27:cd:
dc:39:ab:80:17:41:37:b8:75:f3:4b:b6:cc:e4:8f:
9e:f0:8a:0f:7f:74:19:c1:7c:63:3f:01:cb:7f:ee:
1a:22:c3:f2:54:79:fd:07:3f:af:e6:ff:7c:17:bf:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BE:37:6D:AC:A7:9B:65:AD:36:B0:84:21:B7:D8:E5:57:94:99:D7
X509v3 Authority Key Identifier:
keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/8719518C26AD11EDA881874BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.240.0/23
IPv6:
2400:7620::/32
Signature Algorithm: sha256WithRSAEncryption
59:31:88:78:17:00:c4:27:e7:9a:d7:48:4b:61:03:23:19:dc:
a6:14:b7:ff:5e:06:21:fa:ef:c6:7a:ef:4a:33:eb:92:9b:0c:
ab:06:6f:50:64:e7:4b:1e:10:9f:83:02:d8:5a:89:df:a2:06:
1b:75:e9:d0:3a:6b:2a:56:bb:cf:96:75:0e:e6:9d:33:c1:3e:
08:e8:e3:0c:a1:0d:6d:84:7e:24:2e:6d:73:ac:b2:4b:41:1e:
6c:17:34:aa:56:97:33:9e:16:b9:1d:a3:e2:fd:4e:e1:cd:5e:
9c:c7:e0:07:89:20:67:43:3c:cd:50:34:0b:0f:54:b9:94:0e:
78:73:0d:9c:b4:62:5d:60:6f:b1:75:19:41:96:65:f9:e6:59:
3c:45:ea:9e:8b:75:9c:76:9c:7a:33:a0:2f:08:4c:f7:6f:7e:
12:40:20:f9:e8:36:6e:61:29:e2:4d:51:41:f3:d7:8b:d5:bf:
6f:9c:86:56:f0:6d:3f:36:dc:a8:77:4b:f3:13:82:7c:9b:af:
48:c6:ce:00:ee:33:41:39:9d:47:e3:62:a4:b0:24:b8:a1:11:
d1:f7:96:34:b5:39:8e:0c:74:e0:36:7a:ca:1f:4a:04:43:fa:
4b:65:ff:a7:93:79:80:b3:d3:ac:f6:71:6c:62:c2:bf:2b:16:
4e:26:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:29 2026 by rpki-client