
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa
File: 001209082A2111EAB1BF9C2EC4F9AE02.roa (raw, json)
Hash identifier: o//FOsDCWkj3ETUCgrMQsQNdHfeL0LqE5x3ch3IDkEM=
Subject key identifier: 45:75:E5:19:A8:E5:27:BB:CF:D3:C2:33:73:FA:D6:F3:43:4F:9A:AF
Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Certificate serial: 0C7D
Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa
Signing time: Mon 31 Aug 2026 19:36:01 +0000
ROA not before: Mon 31 Aug 2026 19:36:01 +0000
ROA not after: Fri 01 Jan 2027 00:00:00 +0000
asID: 139885
IP address blocks: 103.146.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3197 (0xc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C
Validity
Not Before: Aug 31 19:36:01 2026 GMT
Not After : Jan 1 00:00:00 2027 GMT
Subject: CN=6a95d7a1-c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:b7:b4:25:d0:77:28:66:5d:31:09:46:00:
f4:0a:a5:79:e1:0b:91:98:41:ae:4b:0c:4c:01:9c:
6a:d0:c4:dc:d6:2d:4e:ba:82:48:26:65:a0:21:2f:
d7:50:93:66:9e:b2:60:5e:1e:51:42:e3:23:e2:f5:
f3:77:c8:6c:06:53:b9:b4:1a:f3:57:f4:05:81:fd:
24:d4:8e:46:54:2c:49:60:73:4f:14:ab:87:a6:45:
20:c9:66:03:fa:4d:c4:cc:dd:96:e3:d7:2d:11:0f:
cb:7c:6f:82:b3:38:98:8d:83:c2:0c:89:94:7e:07:
1d:d5:d4:24:40:5a:85:84:97:7d:1d:cb:58:9c:3a:
4b:55:67:d7:a8:33:ee:fe:f5:21:67:2c:5d:9c:13:
44:3b:58:97:d6:dc:a8:80:0d:81:4b:b4:d9:b8:5d:
dd:3b:62:e4:0e:78:8c:d8:a6:62:77:ad:34:9a:d6:
ce:a5:f8:d0:67:bc:c9:5f:9f:4d:4d:16:22:aa:e7:
8a:cc:f7:a0:df:5e:4c:f9:fd:d6:e7:90:e6:e7:36:
c0:6f:0b:1e:4d:7f:0c:29:32:a7:04:e6:dd:f2:e1:
4b:2b:c0:45:85:0e:6a:f1:8a:ab:ec:51:cd:f3:f4:
9a:50:b2:b6:5e:d5:81:e4:63:4f:66:a2:6f:36:e4:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:E5:19:A8:E5:27:BB:CF:D3:C2:33:73:FA:D6:F3:43:4F:9A:AF
X509v3 Authority Key Identifier:
keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/001209082A2111EAB1BF9C2EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.146.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a9:25:c9:6b:c9:7e:f2:1c:8b:d1:1a:8f:d7:0f:49:4f:ed:
5b:a0:c6:76:9e:d8:36:a8:f9:e7:c7:f3:19:ec:d7:c7:62:5f:
70:06:7b:45:84:b3:ce:08:44:e9:f6:5e:a9:a1:73:e4:c8:b8:
04:42:1c:f5:1b:b0:0b:3b:d0:99:4a:ba:2f:0b:d4:63:3a:1e:
30:c5:1b:cc:ca:cf:ae:6a:8f:7b:bc:f7:27:d2:2c:e8:3b:be:
13:3f:b9:e2:d6:ac:d8:8a:f7:9a:38:78:60:73:87:dd:0c:ca:
a0:60:09:7a:d8:2d:8c:99:74:e7:3d:12:50:96:d1:ee:3c:ff:
5f:bc:01:5e:d9:25:4d:c1:4a:ae:53:c1:d0:e2:e5:85:00:e1:
8c:14:8c:f6:92:97:91:7c:82:eb:8d:7d:fe:cd:47:7d:14:97:
b0:a0:32:5f:57:0c:fe:d1:30:44:c0:37:a7:5f:89:3e:65:09:
2e:59:5f:3e:7c:72:9f:bb:bb:17:0b:8a:d0:82:10:02:27:b7:
9f:31:4e:f5:34:07:65:50:1b:8f:ca:b4:19:25:c7:b7:b9:f7:
2d:99:4d:6b:0e:de:29:65:09:b5:a2:99:18:a1:54:66:58:bf:
0b:31:52:f5:3a:76:e7:2a:91:cd:48:79:8c:6a:79:d3:d6:58:
07:65:7e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:31:01 2026 by rpki-client