
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa
File: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (raw, json)
Hash identifier: nJvpana4kulWgfMWn8Ke1ZkiWP+ZraOaHP2EjEVXLI8=
Subject key identifier: 8F:76:89:B6:73:CA:35:63:EF:05:FE:EA:94:7F:45:A5:AF:CB:C8:0B
Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial: 1512
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa
Signing time: Thu 02 Jul 2026 17:17:48 +0000
ROA not before: Thu 02 Jul 2026 17:17:48 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137899
IP address blocks: 103.106.188.0/22 maxlen: 24
103.116.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5394 (0x1512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Validity
Not Before: Jul 2 17:17:48 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a469d3c-09d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:eb:de:97:08:43:c7:96:73:b5:27:b4:de:
ff:cf:b9:b3:bf:c2:24:c8:31:5e:fd:c9:ac:ac:08:
5e:0d:54:fb:0b:97:06:04:f2:4f:e4:ac:e2:70:a7:
8d:43:4f:1b:b1:a8:a8:55:6f:6b:dd:16:d1:09:e7:
56:da:16:b3:95:f8:f7:56:78:37:38:e9:3c:1e:df:
58:d0:26:ae:5a:a7:aa:b4:5d:d5:39:ef:8f:10:29:
37:2f:ea:b4:fb:d5:73:66:38:28:65:88:96:0d:c6:
6d:6d:9b:d0:3e:13:e1:1a:a1:bc:15:99:56:1a:7a:
54:b8:c8:47:1e:8b:2c:55:c7:cf:4d:1a:52:ec:49:
5c:78:e1:a6:78:44:5b:8a:a2:b1:79:9c:12:67:1e:
63:7c:ed:a5:a4:02:e4:a2:51:9c:a5:77:8b:db:65:
55:81:53:1e:84:7a:bf:4b:6a:ad:6b:09:30:be:b9:
e9:d4:f5:a0:60:d2:e7:be:73:bc:30:ac:cd:c3:a9:
1c:c2:2c:3f:25:95:8c:cb:23:4d:f1:0d:34:12:52:
62:82:e1:39:ff:b5:3b:4a:b5:4c:d4:2b:b7:e1:21:
04:d6:8f:48:c6:82:b7:44:ac:1c:a3:78:76:33:4c:
b5:af:07:e2:4a:9e:61:f1:3a:71:d9:8e:cc:76:23:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:76:89:B6:73:CA:35:63:EF:05:FE:EA:94:7F:45:A5:AF:CB:C8:0B
X509v3 Authority Key Identifier:
keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/4C6227D2B69B11EFA181E00AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.106.188.0/22
103.116.244.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:2d:a9:82:7e:76:db:e4:4d:c0:e2:39:6c:20:90:a2:be:b8:
13:14:c4:6c:58:dd:73:3a:0f:07:88:8f:20:53:70:74:34:ec:
cb:ef:ed:13:3f:ac:2f:04:7c:7a:ed:03:83:fa:da:f1:cc:ac:
21:ec:29:a8:ec:08:14:c9:9f:2b:6f:81:e3:b2:d5:cd:e1:43:
43:ef:e6:64:63:4d:e3:c2:2d:60:39:7b:22:a2:ab:44:11:f6:
33:96:e5:81:45:6c:ba:20:3d:88:df:50:51:d3:81:a6:35:55:
b1:2e:19:d3:22:47:5b:63:ca:83:b4:25:4d:a1:29:03:fb:c8:
4c:02:68:e1:27:c7:75:20:a1:82:2e:88:68:c0:1c:18:b3:e5:
04:21:a0:cc:56:50:00:71:44:d2:ba:fa:e9:cc:9c:5d:49:a8:
28:3e:70:bf:8e:06:91:ab:25:1b:43:fc:70:8d:29:66:63:80:
61:2f:aa:98:1c:1a:f1:87:2c:4a:1b:92:e1:7b:d5:31:4f:93:
6e:d2:58:61:f4:76:61:3a:77:99:63:82:f9:73:8c:77:ba:e7:
32:99:f5:c9:26:93:a6:1a:3d:0c:f8:b3:d9:ed:cd:49:78:b2:
64:63:70:1e:25:f0:d7:29:1a:ee:31:72:7f:09:1a:9c:e5:76:
b9:06:bb:9a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICFRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC
RDY0MDBFMDkwHhcNMjYwNzAyMTcxNzQ4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ2OWQzYy0wOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlhTr3pcIQ8eWc7UntN7/z7mzv8IkyDFe/cmsrAheDVT7C5cGBPJP5KzicKeN
Q08bsaioVW9r3RbRCedW2hazlfj3Vng3OOk8Ht9Y0CauWqeqtF3VOe+PECk3L+q0
+9VzZjgoZYiWDcZtbZvQPhPhGqG8FZlWGnpUuMhHHossVcfPTRpS7ElceOGmeERb
iqKxeZwSZx5jfO2lpALkolGcpXeL22VVgVMehHq/S2qtawkwvrnp1PWgYNLnvnO8
MKzNw6kcwiw/JZWMyyNN8Q00ElJiguE5/7U7SrVM1Cu34SEE1o9IxoK3RKwco3h2
M0y1rwfiSp5h8Tpx2Y7MdiM13QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFI92ibZz
yjVj7wX+6pR/RaWvy8gLMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw
MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjhCNEEvMEFEQjE3QzA4MDBBMTFFODlCNDgzRTdDQzRGOUFFMDIvNEM2MjI3RDJC
NjlCMTFFRkExODFFMDBBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ2q8AwQCZ3T0MA0GCSqGSIb3DQEBCwUAA4IBAQBMLamCfnbb5E3A
4jlsIJCivrgTFMRsWN1zOg8HiI8gU3B0NOzL7+0TP6wvBHx67QOD+trxzKwh7Cmo
7AgUyZ8rb4HjstXN4UND7+ZkY03jwi1gOXsioqtEEfYzluWBRWy6ID2I31BR04Gm
NVWxLhnTIkdbY8qDtCVNoSkD+8hMAmjhJ8d1IKGCLohowBwYs+UEIaDMVlAAcUTS
uvrpzJxdSagoPnC/jgaRqyUbQ/xwjSlmY4BhL6qYHBrxhyxKG5Lhe9UxT5Nu0lhh
9HZhOneZY4L5c4x3uucymfXJJpOmGj0M+LPZ7c1JeLJkY3AeJfDXKRruMXJ/CRqc
5Xa5Brua
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:49:15 2026 by rpki-client