
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/68A35F78831411EC90E07C19C4F9AE02.roa
File: 68A35F78831411EC90E07C19C4F9AE02.roa (raw, json)
Hash identifier: nmSajl93syLonToAepyIBTZIeFMb1rAz42BPhTJ/USw=
Subject key identifier: 53:71:6F:B5:99:0B:69:2C:37:77:F8:B1:60:38:F1:3E:9A:7A:E6:A5
Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Certificate serial: 0D06
Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/68A35F78831411EC90E07C19C4F9AE02.roa
Signing time: Wed 02 Sep 2026 18:37:19 +0000
ROA not before: Wed 02 Sep 2026 18:37:19 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134383
IP address blocks: 103.121.140.0/22 maxlen: 22
2001:df6:4300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3334 (0xd06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734
Validity
Not Before: Sep 2 18:37:19 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a986cdf-32ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:ea:77:6e:d3:bd:4c:9f:b9:d6:30:30:8d:
7a:c8:89:b5:1d:55:5c:e0:4f:9b:47:15:e9:b7:c0:
6a:8a:13:ad:08:b8:bf:53:02:df:2d:4c:69:16:89:
18:5f:21:be:c5:fa:3a:a5:50:67:d5:70:23:14:87:
a7:b4:79:47:c2:7e:e2:ec:11:b6:e2:aa:b5:0e:de:
f7:1d:dd:8d:a8:e7:1e:ac:e2:18:58:33:e9:08:14:
6d:00:db:89:84:4a:b3:be:76:b3:b8:af:e7:3e:c1:
28:bc:12:75:0d:5a:7d:50:ec:6d:ba:5a:67:40:75:
7b:97:52:87:70:78:97:22:10:e9:22:f9:06:f2:2b:
24:ae:bd:05:39:b7:1f:11:83:59:5d:94:43:fd:77:
9e:07:53:28:a8:c2:f8:45:0a:69:8c:cf:49:27:63:
6d:af:3d:9e:a9:b3:3d:2b:55:d5:5b:6d:fb:27:0d:
0e:2b:a6:30:c2:a5:8c:0e:63:5c:d5:ca:46:65:83:
87:46:36:5d:69:37:a7:ba:d3:00:64:ca:a1:c5:dd:
5d:4d:87:e9:f0:e1:c6:51:3c:ad:05:b9:66:6b:50:
4d:80:5b:13:e9:23:6b:95:33:66:ef:c6:ca:cb:b9:
00:51:92:47:62:89:1b:79:86:37:cc:f4:b3:7b:ed:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:6F:B5:99:0B:69:2C:37:77:F8:B1:60:38:F1:3E:9A:7A:E6:A5
X509v3 Authority Key Identifier:
keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/68A35F78831411EC90E07C19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.140.0/22
IPv6:
2001:df6:4300::/48
Signature Algorithm: sha256WithRSAEncryption
7a:4a:08:7f:9f:fa:43:ac:19:70:a5:2b:38:61:c2:7d:0a:1e:
48:e1:10:11:15:8d:85:df:e6:41:8b:ea:56:2a:ad:f0:11:da:
ce:d2:70:f1:b6:34:e6:29:0f:e2:fa:6d:ac:f0:d8:34:3a:21:
d2:bb:55:07:87:58:05:97:4c:bb:3e:7b:42:7f:94:1c:fc:59:
a8:f8:c1:7b:d5:b6:68:a0:51:c3:d2:0b:cd:42:bb:ba:15:39:
b2:89:6d:81:0b:83:fa:e4:69:a7:aa:d6:4d:6d:de:4d:b7:2e:
00:14:df:5a:8f:d1:25:fc:82:d0:90:53:2c:64:7f:a6:bf:af:
77:66:f0:ff:fb:37:aa:6d:62:54:49:1d:b6:14:e6:2e:63:88:
d1:2c:e2:a0:0d:29:29:c2:59:7e:78:4f:44:7f:f9:d9:52:ad:
96:d1:6f:31:49:50:d3:4f:79:53:68:87:e3:45:f4:d3:06:8c:
63:4c:58:d6:3e:18:c7:e0:6a:93:7e:25:4c:e8:6c:ae:41:5c:
14:39:b3:49:20:b3:8e:f6:be:b2:da:2c:44:90:51:53:64:e7:
3f:57:7b:3e:92:9a:e9:12:21:d1:db:db:32:16:d7:80:f3:10:
be:53:9c:d7:02:10:69:d4:63:83:98:90:15:28:24:1a:f9:37:
c0:56:10:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:50:43 2026 by rpki-client