
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/C5AB6AECCEB211F0AFD62649C4F9AE02.roa
File: C5AB6AECCEB211F0AFD62649C4F9AE02.roa (raw, json)
Hash identifier: ARZnLLBPL9WbI3yikKYAliNv6SgIj8oeCXP/C89a8Ho=
Subject key identifier: 9E:A5:36:F7:A7:E8:DA:5B:79:A5:33:EE:D6:70:23:27:06:59:CD:F8
Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Certificate serial: 0206
Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/C5AB6AECCEB211F0AFD62649C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:16:56 +0000
ROA not before: Mon 01 Dec 2025 12:39:26 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 142647
IP address blocks: 103.186.76.0/24 maxlen: 24
103.186.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91
Validity
Not Before: Dec 1 12:39:26 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3f5f8-7879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:7e:6e:38:5a:0c:55:db:ac:e2:f0:1c:83:
17:fb:bc:ba:d4:96:7b:7b:19:bd:93:f6:de:33:a3:
44:10:c1:be:b4:07:c8:5c:d0:08:70:5c:6d:bf:1e:
77:d3:9c:8e:07:d6:5d:0d:e5:ac:61:9a:f5:fb:e0:
bb:93:ce:c8:0b:50:2d:88:2d:ab:41:57:31:d0:7f:
bf:6f:4e:31:f0:d5:0f:d2:80:1e:01:25:36:40:89:
77:08:ac:cd:75:23:62:6d:bd:2d:c3:86:55:77:fe:
1a:41:fc:95:70:fe:2e:5c:50:7d:44:fe:c3:42:1e:
19:88:55:bd:70:99:74:d5:cb:83:05:1c:a5:55:f3:
25:6a:02:06:31:75:0a:41:2f:a2:4b:be:64:80:38:
b2:ec:9d:4b:1f:ae:1a:1e:4f:ee:fa:62:41:7c:a4:
90:fb:83:83:db:83:11:f6:5b:08:a1:49:2f:34:26:
0c:f5:51:ab:b8:c5:bb:85:e1:c2:be:b9:fc:16:48:
0a:4a:f5:fc:6b:7d:40:18:c2:dd:7c:bd:2e:2f:70:
88:49:bb:b0:0a:db:f3:ed:4d:d6:d2:da:b8:dd:db:
49:da:d9:bf:cc:e1:5b:ee:16:ed:5a:22:0e:16:a3:
41:ab:bc:15:2d:c3:10:91:6b:18:cf:15:9b:ac:f1:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A5:36:F7:A7:E8:DA:5B:79:A5:33:EE:D6:70:23:27:06:59:CD:F8
X509v3 Authority Key Identifier:
keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/C5AB6AECCEB211F0AFD62649C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.76.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:12:67:55:20:05:7f:4f:fd:21:af:28:4c:b0:c3:8b:a3:52:
64:24:4f:f4:f7:17:c5:49:f2:f4:a3:25:96:2a:4a:56:f6:06:
2c:cc:10:75:37:d0:7d:82:c9:04:18:cf:73:bd:78:a5:f4:ee:
ef:48:0f:85:c6:80:2f:a2:7b:75:42:d7:e6:c6:4f:f9:98:29:
79:19:04:e4:06:93:d7:8b:3e:17:bf:a1:ab:76:14:de:df:91:
d8:03:58:2f:39:c7:dc:7e:4a:13:3a:3a:e4:0d:ad:b5:d7:f0:
04:85:93:0f:93:10:38:9d:ab:a6:94:25:52:d9:aa:91:b3:5a:
9f:48:45:e2:25:d2:13:7d:06:55:b5:95:02:e2:c5:2c:02:01:
75:73:23:1c:19:59:b7:ac:e4:1f:6c:5b:24:f7:84:29:d3:56:
b1:f1:08:0f:8d:9b:5a:eb:c1:81:4f:c4:2e:68:9d:da:a7:73:
9c:f3:0b:05:a3:42:a0:5c:f5:18:51:65:90:42:ee:e2:7e:70:
5d:8a:f2:10:fe:81:91:3c:46:10:3a:3a:6a:ec:85:72:e7:da:
be:c2:91:4e:f5:13:06:a8:4d:d1:59:61:47:4b:d8:39:d0:0f:
f5:3c:ff:13:6a:42:a1:c5:fa:5e:3b:ba:b1:64:7a:6a:f3:e9:
e1:98:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:45 2026 by rpki-client