
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/C6185536273011F1A8149F74AC833773.roa
File: C6185536273011F1A8149F74AC833773.roa (raw, json)
Hash identifier: XZNI2I+TEYcAvEVGQBDMHCtqr9clDTEVottNypWj6ow=
Subject key identifier: 6D:3A:C7:A3:8F:2D:91:C1:D3:48:CA:E4:48:76:52:6A:C0:06:F6:C0
Certificate issuer: /CN=A9147750/serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87
Certificate serial: 02
Authority key identifier: AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/C6185536273011F1A8149F74AC833773.roa
Signing time: Tue 24 Mar 2026 03:23:06 +0000
ROA not before: Tue 24 Mar 2026 03:23:06 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 16509
IP address blocks: 103.13.216.0/23 maxlen: 24
103.29.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl
rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147750, serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87
Validity
Not Before: Mar 24 03:23:06 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69c2039a-3471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:dc:15:0a:77:a9:b2:77:47:61:48:76:ba:
3f:3c:3d:e9:83:b9:41:84:b1:31:23:a5:71:1c:d4:
93:f1:42:50:aa:93:a0:45:c2:af:f4:c3:4f:65:79:
a9:25:54:24:f9:9b:c8:36:c0:2a:fe:d3:57:55:34:
a5:23:8d:05:ac:4e:1b:b6:57:e0:48:40:6a:1c:73:
fe:00:9b:d7:10:8e:b8:ed:4b:6a:e5:fb:3f:8e:2a:
03:da:73:40:ed:04:c3:1a:95:38:11:06:13:b5:a8:
18:d5:03:cd:cd:36:26:eb:af:ea:f6:82:94:8a:73:
f6:3f:38:b8:cc:3b:43:77:c9:1e:97:aa:ce:6d:39:
36:f5:01:d4:fa:07:89:52:0a:cc:be:d4:f5:ef:80:
f7:7b:56:77:31:3e:19:a8:90:ae:fd:f3:87:07:9e:
2c:7f:b5:e1:9b:ce:13:dd:36:22:3d:0c:7e:ca:0c:
fa:13:67:9e:89:26:89:b1:31:74:43:ed:e4:e7:d9:
36:a9:43:60:74:81:8e:16:e9:4d:df:a4:02:16:0e:
ac:07:b1:e7:ee:d8:54:b7:ee:b8:e2:87:94:bd:16:
9a:71:4a:65:4e:79:b2:d9:7b:fa:93:f8:76:4b:c2:
75:32:1d:bb:ff:90:91:65:eb:76:e3:a5:b9:77:a6:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3A:C7:A3:8F:2D:91:C1:D3:48:CA:E4:48:76:52:6A:C0:06:F6:C0
X509v3 Authority Key Identifier:
keyid:AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/C6185536273011F1A8149F74AC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.13.216.0/23
103.29.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:b6:33:cf:98:ae:5c:be:11:18:a9:30:5d:99:27:05:79:27:
40:e3:73:4e:1e:6d:32:f7:ef:c5:e6:2b:11:4f:7b:b3:f9:56:
05:0a:9c:6f:e0:35:89:c5:b7:0d:0f:ec:ed:0d:7d:a5:63:94:
ae:08:2d:79:61:61:ff:c3:e8:d9:d3:91:e4:24:99:c2:da:2e:
e8:f3:a8:5c:8a:e7:f0:af:d8:95:b6:17:5d:cc:9d:a1:3b:8e:
fd:5a:e4:fb:ff:62:d7:c7:91:8f:74:f7:3a:c1:94:31:7d:d3:
75:e8:58:48:79:f0:3d:98:e5:f8:11:45:c0:e5:11:42:9d:f1:
21:d6:cc:47:f4:b4:f1:0d:78:1b:0b:4d:42:d3:86:a3:ca:cd:
b1:98:fa:e1:24:21:91:b3:d1:de:0c:3e:78:3f:80:20:9d:ed:
e9:dc:a6:3b:a9:3a:6f:48:26:dc:cb:69:78:bb:c5:b8:f7:36:
81:62:9a:a2:63:3d:08:10:de:ad:09:37:c9:2a:25:79:87:7c:
14:e8:3f:c1:5a:da:2e:70:ff:53:79:19:70:e6:a3:48:b2:86:
15:e5:0b:d6:17:83:b2:46:67:0c:b5:eb:e9:f9:8d:fe:09:ff:
41:8a:d6:3f:e7:b1:d1:ef:e0:90:6f:59:59:f8:64:dd:a8:76:
cd:02:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:46 2026 by rpki-client