
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/6AC2B9AA187B11ED92148716C4F9AE02.roa
File: 6AC2B9AA187B11ED92148716C4F9AE02.roa (raw, json)
Hash identifier: +UAgsVaXZoSQj/ZYR+yFyFDWt3cCf9QbUv1c+9sTgjM=
Subject key identifier: 48:81:BD:23:65:2B:E6:E0:0D:B0:95:E6:25:BF:81:E6:86:83:9D:53
Certificate issuer: /CN=A9138478/serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Certificate serial: 079C
Authority key identifier: 34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/6AC2B9AA187B11ED92148716C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:28:48 +0000
ROA not before: Fri 24 Oct 2025 22:41:16 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 134072
IP address blocks: 103.76.112.0/22 maxlen: 22
103.76.112.0/24 maxlen: 24
103.76.113.0/24 maxlen: 24
103.76.114.0/24 maxlen: 24
103.76.115.0/24 maxlen: 24
116.206.116.0/22 maxlen: 22
116.206.116.0/24 maxlen: 24
116.206.117.0/24 maxlen: 24
116.206.118.0/24 maxlen: 24
116.206.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl
rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 21:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138478, serialNumber=34E8C662AA9DCD51950DF5FAC405ACF16C8D30A0
Validity
Not Before: Oct 24 22:41:16 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43100-564d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:8e:3c:d3:7f:c4:9d:ac:69:55:e4:60:59:
d4:ab:28:99:47:b4:5a:53:c5:35:f8:e8:5b:b0:31:
70:fe:24:92:74:49:b8:64:5a:64:de:3d:93:b7:1c:
8b:ff:67:df:1d:ce:68:d9:7d:e2:55:30:12:d0:d4:
f9:42:5b:f7:2c:ad:23:ad:01:c2:73:0f:35:3a:81:
2e:04:60:83:fe:03:a5:5d:2f:de:19:92:37:d9:8c:
e2:4b:68:21:00:da:b1:c9:17:da:5b:33:e5:00:d5:
af:93:cb:db:6a:5d:cf:f4:3b:e2:6c:cb:a0:1e:74:
3e:b2:60:34:b4:e1:c4:50:f9:a4:ff:45:bf:8c:ef:
18:68:fd:93:8c:cb:f9:07:5b:ef:f8:0a:14:f4:02:
82:e4:3f:f8:1c:c0:57:a6:a1:53:54:f3:e1:09:b9:
ad:0b:a2:66:e0:b6:1d:be:21:b5:f0:27:a1:fd:0a:
a1:2b:05:29:03:f2:47:54:da:b4:63:5f:75:ac:7d:
d4:48:a3:4f:58:9e:7b:86:00:3a:fc:08:01:b2:d8:
85:95:c0:cf:0f:1c:9b:25:7b:17:89:8b:8a:c5:63:
19:82:e6:2a:4d:42:5f:cc:e8:ac:71:a4:ce:f0:6a:
27:97:b0:6f:a5:ca:b8:d1:a3:cc:a4:c6:32:ea:d0:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:BD:23:65:2B:E6:E0:0D:B0:95:E6:25:BF:81:E6:86:83:9D:53
X509v3 Authority Key Identifier:
keyid:34:E8:C6:62:AA:9D:CD:51:95:0D:F5:FA:C4:05:AC:F1:6C:8D:30:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/NOjGYqqdzVGVDfX6xAWs8WyNMKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOjGYqqdzVGVDfX6xAWs8WyNMKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138478/6B8AD84E433011EBA6E0221EC4F9AE02/6AC2B9AA187B11ED92148716C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.76.112.0/22
116.206.116.0/22
Signature Algorithm: sha256WithRSAEncryption
23:2a:ff:15:34:c0:02:b0:4a:b1:17:e9:25:dc:fe:cb:bf:4d:
6c:98:9a:76:ab:ab:c7:b2:a6:96:2e:3b:ba:46:cb:f5:b5:5a:
dd:7b:5d:b0:d6:1e:51:51:b1:58:a3:34:fb:0c:0e:31:ca:3b:
7e:50:29:b6:f7:0c:d2:40:13:eb:33:a3:a2:68:33:94:21:cc:
ca:77:5b:9d:d3:19:d9:d5:2f:a9:df:04:fa:97:c9:d4:e7:f7:
de:e8:5f:7d:8c:a2:dd:c4:ee:f0:f8:a2:c0:c9:d3:86:c2:2e:
fc:9c:8c:e3:69:cf:8d:8b:e3:ba:2a:ec:49:e8:e3:6d:09:81:
bb:08:6c:1c:89:40:70:d0:16:e8:de:6c:84:ab:71:cc:16:8f:
0c:55:74:bb:2f:1e:27:33:ae:c7:97:9c:eb:ef:80:cf:4d:4f:
16:66:d7:81:b3:f0:4d:11:5e:55:54:cc:cc:fc:24:b4:02:96:
8c:3f:8e:f2:d1:cd:e9:ee:2e:30:80:9a:9e:87:85:73:59:69:
1d:8d:f1:c0:12:b2:46:88:4f:44:cd:e7:5d:94:83:07:43:79:
9e:73:fe:f6:2c:4b:92:81:cf:a3:b1:c1:b3:72:56:47:b0:fe:
70:3a:0d:ee:63:f3:c2:fb:a2:9f:f3:26:10:6c:1a:e2:2c:19:
9c:89:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:03:59 2026 by rpki-client