
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa
File: 1BCA5982656311ECA4E81323C4F9AE02.roa (raw, json)
Hash identifier: IT79Hkoa22EueYUEPb7uUMkBxRjft5NtH+6nYpQUQTE=
Subject key identifier: EF:A6:FB:3E:9A:5D:FA:A5:23:01:F0:FE:23:FE:9C:5D:2D:23:C0:4E
Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Certificate serial: 109D
Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:48:03 +0000
ROA not before: Mon 30 Jun 2025 17:50:20 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 59382
IP address blocks: 103.237.36.0/22 maxlen: 24
160.202.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4253 (0x109d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E
Validity
Not Before: Jun 30 17:50:20 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a44393-e580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:97:4e:98:f2:db:f5:ed:2d:a8:ff:64:01:
6a:28:94:fc:c9:23:ad:96:f3:9d:1d:1f:5d:6f:32:
ed:12:20:97:48:72:98:d0:b1:57:fd:6d:bf:37:82:
19:c4:8a:d7:5c:f5:dc:c4:9e:dd:46:c6:0c:30:d1:
df:2f:b6:10:61:ad:73:52:fe:75:08:b5:c9:1e:35:
92:68:0e:bd:e1:3a:18:23:40:f7:e4:c0:36:5d:16:
fc:75:33:d2:94:30:b3:1c:fb:9f:70:85:1f:17:25:
2d:42:38:5a:39:cc:bd:31:8a:04:29:5a:ca:46:d8:
ef:9e:86:9a:2f:c7:6d:04:34:9a:c9:de:83:a8:ac:
cc:82:88:c8:9f:ff:d4:1b:61:0f:98:e3:c4:7b:83:
80:02:ad:e2:23:a7:cf:42:2c:64:d7:5f:60:50:8f:
75:9c:b3:56:d8:1e:a2:84:33:e0:5b:94:a1:f3:a3:
71:d5:59:ab:b4:bd:3b:05:06:d8:c5:9a:57:f5:61:
f4:01:bd:33:b1:26:c2:ee:4f:c1:8c:07:9e:28:04:
51:01:32:f7:0a:1d:f3:7c:54:dc:5e:b1:34:dd:9c:
9d:09:e7:5f:9d:a0:2c:29:40:70:a6:59:1c:99:d5:
d4:f3:ad:0a:39:ad:20:0f:54:87:8d:7d:68:fa:8d:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A6:FB:3E:9A:5D:FA:A5:23:01:F0:FE:23:FE:9C:5D:2D:23:C0:4E
X509v3 Authority Key Identifier:
keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/1BCA5982656311ECA4E81323C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.237.36.0/22
160.202.144.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:76:97:f7:e4:ec:cc:01:42:a3:7c:8c:74:6d:b9:27:f0:66:
3d:6d:e2:57:4d:ee:b4:a9:a2:0e:c7:68:fc:ea:59:3b:ff:09:
11:19:3b:e1:87:bd:08:e0:98:50:7c:95:bd:4e:3b:16:1e:d8:
41:8a:27:1f:6d:4e:63:18:e5:4d:a8:d3:0d:fe:1b:e3:ef:19:
14:7e:79:79:7f:12:b1:1f:84:78:0b:9c:6c:a0:9e:c2:d2:52:
12:f6:9a:b5:a7:56:c3:bb:18:6b:40:0a:7d:8a:ec:e1:d9:7d:
3f:df:f4:69:46:6b:9f:2a:bd:6a:09:e7:b8:dc:c2:54:a1:c9:
47:b6:31:27:68:d1:a1:6e:98:18:f6:56:63:66:7c:e6:74:0f:
cc:6c:c2:e5:5f:2c:e7:9d:af:24:20:b1:1a:58:f1:94:0f:04:
24:57:4e:66:73:a8:64:40:8a:68:42:b2:72:b7:86:fc:b9:5f:
46:6c:e8:ee:ab:12:c4:3e:c6:00:49:89:4e:99:c7:d9:af:4b:
9c:a8:11:9a:66:dd:c5:45:ec:b4:00:2d:10:30:84:57:41:c4:
f6:30:84:17:0c:4c:41:58:c9:cc:21:fc:e9:8b:78:ed:1f:51:
66:50:e4:6f:0f:fd:37:cd:4f:4a:4b:fc:79:30:9b:71:4c:87:
39:c2:13:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:33:51 2026 by rpki-client