
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa
File: DE6603CAEBD711F092381BAE6B6F56BC.roa (raw, json)
Hash identifier: OlHN3Z95xBcSg+xyNVo2Ng88UP/U5/OysPmUalPIArA=
Subject key identifier: 92:2D:B6:ED:6F:94:74:42:82:8E:27:51:7C:67:28:A4:6E:6B:6A:D1
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 06A7
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa
Signing time: Sun 04 Oct 2026 23:43:48 +0000
ROA not before: Sun 04 Oct 2026 23:43:48 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 401160
IP address blocks: 103.135.208.0/22 maxlen: 24
103.172.110.0/23 maxlen: 24
125.3.192.0/21 maxlen: 24
203.168.128.0/22 maxlen: 24
203.168.192.0/20 maxlen: 24
222.167.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 23:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1703 (0x6a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Oct 4 23:43:48 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2e4b4-c108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:9b:3c:37:96:e1:86:e0:17:44:d2:c7:c1:
b8:66:32:38:52:87:d5:a3:21:27:c3:22:07:4c:b4:
e7:56:18:ab:a0:cf:cc:5c:94:f1:11:8c:a6:9f:f2:
51:95:88:59:af:3b:df:23:6c:e1:8b:40:0c:cc:2f:
31:3e:85:dc:e2:76:51:a1:4a:64:d2:c2:d5:16:12:
0f:9b:87:ca:7f:39:6b:82:dc:99:43:1d:bf:93:62:
e2:22:f0:ec:20:7c:90:ee:b8:64:b7:ef:39:4c:61:
9b:0b:cd:3c:28:4f:5d:44:bb:fb:e3:7e:d5:8f:c9:
4b:29:c5:cc:b0:a0:24:be:3d:80:5e:21:70:7e:d5:
4c:ce:14:df:13:3f:e8:30:ac:dd:1c:e7:0c:e6:4f:
8d:65:a3:0d:89:9c:c1:ee:ce:fb:b8:d3:9c:f5:a3:
c0:e4:c5:71:e4:e9:07:56:d5:5b:90:ee:75:54:e1:
8c:14:9f:b7:29:2a:b5:fb:bb:50:84:1e:9a:34:1d:
a8:60:f5:4d:ce:10:9b:13:80:24:6e:3c:04:a7:28:
f8:58:cd:48:6a:b9:34:42:13:e9:b5:f6:fb:1b:a6:
18:cf:6f:d9:ca:c1:81:18:31:45:3c:07:e0:fa:67:
a2:42:13:fb:90:41:67:8d:ed:de:cc:91:c0:62:b4:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2D:B6:ED:6F:94:74:42:82:8E:27:51:7C:67:28:A4:6E:6B:6A:D1
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/DE6603CAEBD711F092381BAE6B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.208.0/22
103.172.110.0/23
125.3.192.0/21
203.168.128.0/22
203.168.192.0/20
222.167.32.0/22
Signature Algorithm: sha256WithRSAEncryption
94:d3:f6:61:4c:71:3a:b0:d8:3f:14:48:b8:8b:0b:ab:7c:5a:
d4:3b:99:de:ac:bb:e3:39:bc:8e:63:f1:cd:6e:0e:3a:32:03:
40:56:9d:b8:08:34:97:d3:1e:89:4c:47:69:be:bc:f7:d5:ff:
a3:5b:d7:bc:27:ba:bd:d5:1f:2a:87:64:67:8a:de:eb:06:68:
c8:70:f8:0c:77:14:23:8c:f2:d8:d6:2f:7d:2a:a1:93:45:8b:
5e:4b:b9:32:ed:5d:93:0c:22:2c:55:2f:14:18:b1:f5:95:f3:
8b:2f:67:3c:0b:b9:9f:33:10:a9:92:de:fc:0b:c5:8e:88:86:
fd:ba:c6:3e:39:83:36:ec:1a:33:8c:92:41:6f:bc:f4:42:ac:
b9:a0:45:36:d5:c3:95:1f:f9:ad:c0:fb:c3:d9:d5:75:95:90:
63:9e:8f:e0:33:17:a8:2d:0c:e5:09:52:8d:ad:12:70:ef:33:
f1:3b:e5:48:d1:0f:3f:90:94:07:8a:80:2f:35:c1:bf:68:70:
6e:bf:16:b1:1e:01:16:b3:42:0f:96:37:5f:66:01:f7:0b:22:
65:b5:72:08:5d:0a:ac:48:d0:97:31:6a:bf:18:32:d5:66:b8:
f4:4d:c8:7f:9e:35:cf:48:c0:ac:1f:c4:c5:af:2d:7e:1d:97:
86:17:7a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:33:42 2026 by rpki-client