
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/920E981CCAAA11ED8371524CC4F9AE02.roa
File: 920E981CCAAA11ED8371524CC4F9AE02.roa (raw, json)
Hash identifier: fkyJKn8Oh+03JayycchiXNnOyFPcVFyNkr5e5TiQlCU=
Subject key identifier: 05:1E:10:08:B3:82:89:24:0F:C1:87:96:EC:91:3D:D8:77:DB:0D:40
Certificate issuer: /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial: 036D
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/920E981CCAAA11ED8371524CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:02:16 +0000
ROA not before: Fri 27 Jun 2025 01:37:57 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 150683
IP address blocks: 103.189.68.0/24 maxlen: 24
103.189.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Validity
Not Before: Jun 27 01:37:57 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a40098-10dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b0:f9:a8:5b:62:78:50:51:17:f4:b1:82:d0:
cc:33:81:a3:de:35:1e:e3:70:2a:4c:ea:f9:eb:ad:
df:01:6c:9e:fa:21:35:ec:4a:da:bd:6a:fb:9f:cc:
5a:ec:39:59:4f:b4:f7:4c:9b:94:c8:25:17:41:51:
ee:94:63:59:d5:15:39:42:34:10:f7:26:34:35:5b:
91:82:2e:38:8b:b7:08:f0:be:a9:0a:77:b6:9a:85:
a2:c2:9e:00:1a:c6:c6:90:d9:7a:aa:96:91:d3:fc:
0f:30:66:e6:09:07:90:85:d9:a4:f3:3b:6b:a3:52:
11:25:95:e0:2b:fb:81:98:bf:22:39:7a:3b:f9:2e:
c3:88:1d:a8:20:f4:97:8c:77:8d:e5:10:1d:ab:99:
dc:3c:ed:6b:30:4c:36:de:09:89:ac:11:d8:c1:29:
52:43:28:f5:95:e4:d2:4b:14:1a:1c:5a:b8:8b:fa:
26:a0:ba:0a:f3:1b:3a:09:82:37:9a:90:8a:24:0c:
31:c2:89:be:36:85:5f:a4:91:22:2d:33:36:71:a8:
c3:3c:7c:20:a5:fd:e7:26:98:15:66:58:d1:87:3a:
95:c9:67:81:f5:58:a3:89:7b:4d:3d:67:1a:15:68:
d0:d6:4d:a9:94:64:46:f6:00:3a:cb:4e:4d:85:4f:
59:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:10:08:B3:82:89:24:0F:C1:87:96:EC:91:3D:D8:77:DB:0D:40
X509v3 Authority Key Identifier:
keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/920E981CCAAA11ED8371524CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:22:b4:eb:01:a9:90:fa:68:36:3f:64:f4:90:31:51:2c:10:
ac:63:20:b2:3a:5c:6a:f5:d8:25:46:37:27:2d:5a:d0:c6:ae:
04:1d:2e:84:93:61:50:56:5f:a5:12:66:a4:70:f0:b0:de:81:
90:91:bb:f1:30:cd:60:34:92:04:53:29:55:62:f1:27:28:b5:
5f:c9:3c:79:0a:6e:e9:10:8d:f6:44:ad:e2:40:1b:22:3f:c3:
72:8a:47:52:fc:c9:45:23:8d:20:f6:2f:22:ef:61:d8:05:20:
77:29:43:aa:d6:2a:f0:a0:df:a5:5b:f2:d4:10:e2:0a:72:04:
a9:74:c2:da:b6:2c:cf:bb:8c:ad:1f:fc:a4:fe:07:b4:52:3b:
b1:9b:f9:67:49:55:6e:25:a0:6b:a4:e2:cf:c7:68:1b:8d:33:
f1:d9:2c:53:32:14:a9:f4:1f:d6:1d:da:23:f2:1a:84:f6:8b:
d6:99:cb:4f:16:f1:44:7e:66:a2:4d:09:de:73:e1:70:84:b9:
c5:06:7d:64:a1:51:fe:2e:a5:19:06:ed:d9:f6:bb:db:a3:7d:
29:06:b3:e4:85:a8:70:4e:8c:28:7b:1d:88:ee:14:a8:07:24:
8c:40:9a:b9:00:c8:f2:3d:8e:6e:d8:35:7c:c8:b8:87:9b:22:
ed:6c:09:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:37 2026 by rpki-client