
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/1090CE74EBC211EEB58D4343C4F9AE02.roa
File: 1090CE74EBC211EEB58D4343C4F9AE02.roa (raw, json)
Hash identifier: lh7b/tPQgjVztJOWiRH2xasWEweYYWz05xpd/0kRPZY=
Subject key identifier: 18:18:C7:5B:0E:17:2C:73:EB:15:1B:4A:3E:98:9E:7D:2C:0A:3E:77
Certificate issuer: /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial: 01AC
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/1090CE74EBC211EEB58D4343C4F9AE02.roa
Signing time: Sun 31 May 2026 04:36:54 +0000
ROA not before: Sun 31 May 2026 04:36:54 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 132240
IP address blocks: 103.8.72.0/23 maxlen: 23
103.8.72.0/24 maxlen: 24
103.16.172.0/23 maxlen: 23
103.16.172.0/24 maxlen: 24
103.229.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Validity
Not Before: May 31 04:36:54 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1bbae6-7e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:9e:af:6f:39:5f:77:ac:e7:8a:61:07:3a:
d0:cb:79:d6:16:44:46:60:f4:c8:53:e3:b5:d3:01:
eb:c7:c6:3c:59:04:79:e1:d9:ef:07:26:07:16:ad:
73:18:69:9c:5f:af:75:22:00:7c:e9:64:03:dc:f6:
36:16:54:e1:26:82:e3:ba:cd:5e:90:35:50:9d:9d:
6e:5c:4f:f8:7b:d4:84:d8:26:af:e8:4b:0b:fe:91:
61:01:62:b9:03:e5:60:38:53:26:8f:d2:51:58:a0:
af:1f:2d:57:2d:c1:09:f8:df:7a:65:b4:29:d3:2f:
80:ab:1b:b7:f9:17:4b:ec:f7:8a:7c:b5:1c:4f:5a:
a2:b5:bf:6d:7a:93:de:f9:6a:2c:a8:76:ff:7c:7d:
f8:31:e0:e9:9e:f9:b2:67:0d:35:c6:db:f5:0a:1c:
50:3b:c0:dd:6b:d1:dd:09:f9:ea:95:f3:3f:9b:29:
3c:22:b9:4e:f7:bc:24:b5:2c:46:c6:11:ff:5d:27:
3f:0e:b3:5a:17:3a:bd:37:99:0c:f1:57:ba:9e:fa:
b7:4b:3f:dc:ae:b8:64:d9:8d:53:99:48:d9:3e:47:
d6:e1:dd:7b:5a:0d:07:12:b1:35:fa:95:6d:e5:59:
88:94:b2:9f:4a:4b:da:57:34:b6:fb:1e:d1:e0:8b:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:18:C7:5B:0E:17:2C:73:EB:15:1B:4A:3E:98:9E:7D:2C:0A:3E:77
X509v3 Authority Key Identifier:
keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/1090CE74EBC211EEB58D4343C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.8.72.0/23
103.16.172.0/23
103.229.98.0/23
Signature Algorithm: sha256WithRSAEncryption
48:7c:01:91:09:97:37:a9:70:ca:10:91:9e:44:4f:24:cd:d1:
0a:d7:88:15:ac:0a:c1:42:8f:e3:1f:47:fb:bd:b5:bd:0a:b9:
6c:d2:d1:2b:cc:c2:2c:0e:b2:6c:fd:9c:6e:a9:aa:d5:33:29:
75:ce:d3:4a:00:7b:32:fc:25:11:68:ce:dc:d3:61:13:48:02:
fe:0a:bc:b7:e5:3f:2f:c9:22:67:17:6a:d4:8f:92:1c:49:38:
59:42:63:97:23:ff:90:14:b3:7a:e5:fb:79:89:79:7a:07:ce:
f5:08:46:ba:0a:86:89:c4:42:64:ff:e0:1f:b8:f8:b9:9b:27:
99:50:4d:39:b0:bd:66:b2:40:72:a6:e1:e2:ac:08:1d:3e:a1:
ed:2e:fc:5b:39:f7:1b:2a:38:4b:27:4a:71:8e:ef:06:53:c4:
e2:23:e6:51:49:7e:eb:25:f8:74:ae:d0:25:e6:7c:79:9e:84:
2f:75:32:9c:65:fd:5b:37:b6:06:57:f1:95:d7:4f:d9:d7:8b:
80:ec:94:60:57:7c:29:3a:2c:45:50:bb:fa:fb:ec:e7:6e:c0:
a7:61:4f:87:0e:5d:f5:f8:cd:cf:9a:6e:d3:17:22:c1:5e:e9:
7d:43:87:4e:f1:bb:d9:8d:a9:59:e2:03:4d:b3:c5:b8:e6:96:
5b:cf:16:f4
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY1MTQxMTAvBgNVBAUTKDRBNEQ3RjU4RUZCRDQ4Qjg2MzZEQjZBMEJGN0MyREU1
MEYwNDM2MjEwHhcNMjYwNTMxMDQzNjU0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFiYmFlNi03ZTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApl6er285X3es54phBzrQy3nWFkRGYPTIU+O10wHrx8Y8WQR54dnvByYHFq1z
GGmcX691IgB86WQD3PY2FlThJoLjus1ekDVQnZ1uXE/4e9SE2Cav6EsL/pFhAWK5
A+VgOFMmj9JRWKCvHy1XLcEJ+N96ZbQp0y+Aqxu3+RdL7PeKfLUcT1qitb9tepPe
+WosqHb/fH34MeDpnvmyZw01xtv1ChxQO8Dda9HdCfnqlfM/myk8IrlO97wktSxG
xhH/XSc/DrNaFzq9N5kM8Ve6nvq3Sz/crrhk2Y1TmUjZPkfW4d17Wg0HErE1+pVt
5VmIlLKfSkvaVzS2+x7R4IucLwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFBgYx1sO
Fyxz6xUbSj6Ynn0sCj53MB8GA1UdIwQYMBaAFEpNf1jvvUi4Y222oL98LeUPBDYh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUxNC9CNzczQTE2NEVC
QzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNMaGpiYmFndjN3dDVROEVO
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NrMV9XTy05U0xoamJiYWd2M3d0NVE4RU5pRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDY1MTQvQjc3M0ExNjRFQkMwMTFFRTlCQjNGNDNGQzRGOUFFMDIvMTA5MENFNzRF
QkMyMTFFRUI1OEQ0MzQzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQBZwhIAwQBZxCsAwQBZ+ViMA0GCSqGSIb3DQEBCwUAA4IBAQBIfAGR
CZc3qXDKEJGeRE8kzdEK14gVrArBQo/jH0f7vbW9Crls0tErzMIsDrJs/ZxuqarV
Myl1ztNKAHsy/CURaM7c02ETSAL+Cry35T8vySJnF2rUj5IcSThZQmOXI/+QFLN6
5ft5iXl6B871CEa6CoaJxEJk/+AfuPi5myeZUE05sL1mskBypuHirAgdPqHtLvxb
OfcbKjhLJ0pxju8GU8TiI+ZRSX7rJfh0rtAl5nx5noQvdTKcZf1bN7YGV/GV10/Z
14uA7JRgV3wpOixFULv6++znbsCnYU+HDl31+M3Pmm7TFyLBXul9Q4dO8bvZjalZ
4gNNs8W45pZbzxb0
-----END CERTIFICATE-----
Generated at Wed Jun 17 15:17:40 2026 by rpki-client