
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/6D3BA6B0834D11F18EA3856060A30FBC.roa
File: 6D3BA6B0834D11F18EA3856060A30FBC.roa (raw, json)
Hash identifier: 02eJd1zQT0JnnntRDHq6rSGX1dpQL3jq24n2qQzP6QM=
Subject key identifier: C6:BD:F8:60:F5:EC:E8:E0:16:EF:3B:FC:E5:EE:EC:0A:3C:B5:CD:38
Certificate issuer: /CN=A9166E2B/serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Certificate serial: 0D25
Authority key identifier: 01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/6D3BA6B0834D11F18EA3856060A30FBC.roa
Signing time: Mon 20 Jul 2026 19:19:30 +0000
ROA not before: Mon 20 Jul 2026 19:19:30 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 139294
IP address blocks: 103.115.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3365 (0xd25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166E2B, serialNumber=01032D9DFC362A958743E86D3C8D0611A6ADB05B
Validity
Not Before: Jul 20 19:19:30 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a5e74c2-2f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:25:a0:95:ac:14:01:bb:99:b8:75:b8:06:
9e:33:f0:9f:4a:8a:96:22:09:98:41:33:19:59:4c:
f2:c4:67:c2:0d:9e:b8:bd:c0:91:85:96:fb:ce:e5:
25:e3:e0:9b:d2:03:a6:56:c9:8c:48:46:c2:33:f3:
9e:c3:db:b9:95:79:71:08:2a:35:b8:47:70:49:55:
4f:5c:66:ef:3d:e2:d1:ac:19:0a:11:26:ce:91:ac:
12:03:fd:12:82:52:cd:3e:87:74:2d:80:72:08:be:
55:4a:f9:93:0e:25:7b:42:8d:0c:82:ef:5c:11:12:
48:ec:86:f8:25:d4:4c:00:7f:c8:c9:97:61:cd:38:
f2:1a:db:aa:d5:d6:6b:f1:6a:55:68:85:9f:31:18:
9e:78:22:11:8b:49:73:e8:01:86:29:25:ea:60:60:
c8:98:16:b6:78:54:5c:12:ea:c5:82:93:ea:f7:20:
5b:c3:5d:ae:bc:a0:45:41:a6:2c:83:8e:f8:d8:a9:
11:9a:51:fb:74:33:16:b5:98:2e:cb:d8:69:ff:55:
9a:34:20:8e:1a:68:f4:c1:53:84:67:81:95:49:91:
d8:a3:63:e9:d2:01:2b:25:28:8a:e4:c0:62:a6:b6:
ba:9a:da:22:0f:86:4b:62:37:a6:fd:d1:be:4e:12:
e5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BD:F8:60:F5:EC:E8:E0:16:EF:3B:FC:E5:EE:EC:0A:3C:B5:CD:38
X509v3 Authority Key Identifier:
keyid:01:03:2D:9D:FC:36:2A:95:87:43:E8:6D:3C:8D:06:11:A6:AD:B0:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/AQMtnfw2KpWHQ-htPI0GEaatsFs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQMtnfw2KpWHQ-htPI0GEaatsFs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E2B/27E7CAA60C2D11EAB029DB53C4F9AE02/6D3BA6B0834D11F18EA3856060A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c3:4a:e7:04:c4:76:b6:13:bc:8b:35:03:08:d5:1b:20:b5:
6d:0e:8d:50:6d:f7:dd:5e:18:30:49:7f:9c:3e:c9:e7:1f:f1:
26:f1:5d:d0:39:ad:99:12:ca:85:a7:65:03:1b:90:38:f3:20:
74:63:91:08:c0:bb:1b:dc:5c:5a:eb:b7:e3:4b:e7:a4:f5:f0:
14:ca:7b:30:d8:87:62:33:e8:f3:44:55:dc:1f:96:f6:24:4c:
44:a6:53:4f:70:8c:34:49:76:d5:9f:52:53:a3:54:51:9a:9b:
19:e4:d9:d6:6d:da:5a:00:50:47:6b:47:7d:a5:2b:43:81:c4:
73:8d:1a:13:b5:79:79:65:9c:ef:98:7b:78:14:4e:57:2a:3b:
6f:59:78:7a:10:5c:1e:87:5b:a0:17:61:7c:bd:29:42:df:d4:
63:8d:9e:78:69:a9:97:97:68:e7:20:fd:73:65:d9:75:61:6a:
e9:de:f9:5b:6d:c2:84:6e:b9:a7:7a:ee:fc:48:49:5b:51:7c:
71:42:fd:ee:f3:c5:83:58:08:d5:e4:0b:a9:0e:2d:8e:da:3b:
a9:55:18:03:f8:a5:99:5a:64:2c:66:7f:13:c8:c6:ea:31:1f:
1c:5b:a6:96:53:af:28:d6:c4:f1:12:b4:b4:87:0c:c0:00:fb:
76:78:b3:29
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZFMkIxMTAvBgNVBAUTKDAxMDMyRDlERkMzNjJBOTU4NzQzRTg2RDNDOEQwNjEx
QTZBREIwNUIwHhcNMjYwNzIwMTkxOTMwWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlNzRjMi0yZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjGkloJWsFAG7mbh1uAaeM/CfSoqWIgmYQTMZWUzyxGfCDZ64vcCRhZb7zuUl
4+Cb0gOmVsmMSEbCM/Oew9u5lXlxCCo1uEdwSVVPXGbvPeLRrBkKESbOkawSA/0S
glLNPod0LYByCL5VSvmTDiV7Qo0Mgu9cERJI7Ib4JdRMAH/IyZdhzTjyGtuq1dZr
8WpVaIWfMRieeCIRi0lz6AGGKSXqYGDImBa2eFRcEurFgpPq9yBbw12uvKBFQaYs
g4742KkRmlH7dDMWtZguy9hp/1WaNCCOGmj0wVOEZ4GVSZHYo2Pp0gErJSiK5MBi
pra6mtoiD4ZLYjem/dG+ThLlGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMa9+GD1
7OjgFu87/OXu7Ao8tc04MB8GA1UdIwQYMBaAFAEDLZ38NiqVh0PobTyNBhGmrbBb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkUyQi8yN0U3Q0FBNjBD
MkQxMUVBQjAyOURCNTNDNEY5QUUwMi9BUU10bmZ3MktwV0hRLWh0UEkwR0VhYXRz
RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRTXRuZncyS3BXSFEtaHRQSTBHRWFhdHNGcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjZFMkIvMjdFN0NBQTYwQzJEMTFFQUIwMjlEQjUzQzRGOUFFMDIvNkQzQkE2QjA4
MzREMTFGMThFQTM4NTYwNjBBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ3N3MA0GCSqGSIb3DQEBCwUAA4IBAQBLw0rnBMR2thO8izUDCNUb
ILVtDo1QbffdXhgwSX+cPsnnH/Em8V3QOa2ZEsqFp2UDG5A48yB0Y5EIwLsb3Fxa
67fjS+ek9fAUynsw2IdiM+jzRFXcH5b2JExEplNPcIw0SXbVn1JTo1RRmpsZ5NnW
bdpaAFBHa0d9pStDgcRzjRoTtXl5ZZzvmHt4FE5XKjtvWXh6EFweh1ugF2F8vSlC
39RjjZ54aamXl2jnIP1zZdl1YWrp3vlbbcKEbrmneu78SElbUXxxQv3u88WDWAjV
5AupDi2O2jupVRgD+KWZWmQsZn8TyMbqMR8cW6aWU68o1sTxErS0hwzAAPt2eLMp
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:52 2026 by rpki-client