
$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/1AC2369A010911ECB732340DC4F9AE02.roa
File: 1AC2369A010911ECB732340DC4F9AE02.roa (raw, json)
Hash identifier: 1d5DWa9kmJ4w10WbuE7/Yrtfavj9f+ay8eq6OsazIQw=
Subject key identifier: 16:6C:10:9D:EA:47:92:C4:66:C1:0D:2E:DC:E8:74:7B:EC:68:D2:B1
Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial: 0842
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/1AC2369A010911ECB732340DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:07:17 +0000
ROA not before: Fri 16 Jan 2026 21:17:20 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138552
IP address blocks: 103.132.192.0/22 maxlen: 24
2404:3dc0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:44:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114 (0x842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Validity
Not Before: Jan 16 21:17:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44815-0506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:6a:85:60:f2:42:2d:ba:87:ff:2f:f6:bb:
53:a3:eb:0a:65:05:ca:d3:f0:33:12:74:be:5c:bf:
52:69:ea:37:9b:50:af:0c:dd:ab:01:1d:8b:d6:c1:
72:2c:e6:56:1d:88:41:49:cc:a2:fa:27:4e:96:1a:
9f:66:ce:ff:21:18:49:c6:60:a9:28:30:46:79:48:
ad:17:90:db:19:c9:b0:8b:bf:65:57:c7:aa:8d:c5:
ad:21:bf:7d:23:d1:49:49:a8:4a:c1:2a:c3:ec:37:
66:5a:98:43:10:b6:98:b3:8c:46:cd:ac:17:7c:83:
61:5e:ae:7b:2d:39:1e:9a:e2:1b:c2:7b:d5:94:81:
1e:d8:e0:05:7a:98:48:77:a3:41:bb:f8:87:6a:a4:
0e:1a:ce:1f:db:3a:13:47:a7:a8:8e:b1:34:3f:3f:
4f:07:2a:48:d6:6e:28:d7:5e:ca:bb:d4:d6:17:e9:
7e:33:84:9e:7a:88:96:0d:f2:0f:37:e4:e6:78:93:
1e:71:e4:84:92:50:ed:94:bb:d8:39:8b:40:d2:71:
11:4f:1d:ba:0f:57:2a:fa:18:79:22:74:ee:1f:f4:
4c:72:06:17:57:eb:b0:31:e6:b6:de:16:5c:1a:53:
ee:84:5c:43:80:87:f3:ed:4a:d9:7f:13:41:cf:a3:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6C:10:9D:EA:47:92:C4:66:C1:0D:2E:DC:E8:74:7B:EC:68:D2:B1
X509v3 Authority Key Identifier:
keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/1AC2369A010911ECB732340DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.132.192.0/22
IPv6:
2404:3dc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
af:e0:67:c5:40:26:e3:a2:29:2f:ee:85:04:37:21:df:3a:c4:
aa:a4:85:3a:9a:4d:cd:cb:fd:86:a9:18:b5:48:82:08:8f:1a:
3a:58:4e:39:c2:e4:07:0c:65:c1:53:5f:8e:49:46:d0:6b:47:
a5:94:9e:1c:55:85:5b:14:21:79:c8:da:7d:64:b0:c8:98:91:
3a:0a:b5:6d:38:39:f5:b4:35:34:3e:9b:55:e0:ae:78:82:7c:
be:42:f7:03:b6:31:7a:bd:ce:ed:16:6a:9e:69:a6:1f:1d:33:
a6:01:ea:2a:45:93:7a:a3:20:46:71:38:e6:31:a5:33:fb:30:
6d:98:22:ea:cd:a2:b3:10:e7:8b:4b:6f:a1:7c:40:df:29:6b:
39:99:2c:7f:fc:ef:03:8b:40:d0:50:45:42:93:7c:04:c4:a1:
87:17:b3:3b:78:41:a1:9e:1d:68:6b:06:82:af:03:82:35:42:
83:14:c2:8c:53:4e:d6:a9:93:4c:ec:66:b3:de:3e:33:d8:8b:
18:fc:4b:a7:c2:60:7a:62:47:9a:53:d7:b2:b0:67:69:b2:a6:
5f:7b:e2:b1:c0:d2:2f:4d:70:6a:e4:1c:36:ab:0c:3d:0d:54:
66:ca:4a:97:b0:3a:cb:14:d4:93:97:14:f7:cf:ac:30:dd:52:
d9:aa:50:22
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCEIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF
QURBOEQ0NzcwHhcNMjYwMTE2MjExNzIwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDgxNS0wNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi/tqhWDyQi26h/8v9rtTo+sKZQXK0/AzEnS+XL9Saeo3m1CvDN2rAR2L1sFy
LOZWHYhBScyi+idOlhqfZs7/IRhJxmCpKDBGeUitF5DbGcmwi79lV8eqjcWtIb99
I9FJSahKwSrD7DdmWphDELaYs4xGzawXfINhXq57LTkemuIbwnvVlIEe2OAFephI
d6NBu/iHaqQOGs4f2zoTR6eojrE0Pz9PBypI1m4o117Ku9TWF+l+M4SeeoiWDfIP
N+TmeJMeceSEklDtlLvYOYtA0nERTx26D1cq+hh5InTuH/RMcgYXV+uwMea23hZc
GlPuhFxDgIfz7UrZfxNBz6MaNQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFBZsEJ3q
R5LEZsENLtzodHvsaNKxMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy
MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzgwNkUvOURCRkFCMzgwMjJGMTFFQjkzMzMxODNDQzRGOUFFMDIvMUFDMjM2OUEw
MTA5MTFFQ0I3MzIzNDBEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQCZ4TAMA8EAgACMAkDBwAkBD3AAAEwDQYJKoZIhvcNAQELBQADggEB
AK/gZ8VAJuOiKS/uhQQ3Id86xKqkhTqaTc3L/YapGLVIggiPGjpYTjnC5AcMZcFT
X45JRtBrR6WUnhxVhVsUIXnI2n1ksMiYkToKtW04OfW0NTQ+m1XgrniCfL5C9wO2
MXq9zu0Wap5pph8dM6YB6ipFk3qjIEZxOOYxpTP7MG2YIurNorMQ54tLb6F8QN8p
azmZLH/87wOLQNBQRUKTfATEoYcXszt4QaGeHWhrBoKvA4I1QoMUwoxTTtapk0zs
ZrPePjPYixj8S6fCYHpiR5pT17KwZ2mypl974rHA0i9NcGrkHDarDD0NVGbKSpew
OssU1JOXFPfPrDDdUtmqUCI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:33 2026 by rpki-client