
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/0F6B8D969A6B11F08E49AE43C4F9AE02.roa
File: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (raw, json)
Hash identifier: VFEJ2pC2bmVwEIh9Ul33fbeRMTH5fCAYFl8iU/+lajY=
Subject key identifier: 35:17:30:D0:C1:2E:33:81:97:F5:E3:0C:BC:4C:D8:F8:47:4F:48:08
Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Certificate serial: 2E20
Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/0F6B8D969A6B11F08E49AE43C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:00:03 +0000
ROA not before: Fri 26 Sep 2025 01:15:18 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 139906
IP address blocks: 103.146.192.0/23 maxlen: 24
203.31.161.0/24 maxlen: 24
2405:d7c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11808 (0x2e20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Validity
Not Before: Sep 26 01:15:18 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a47ea3-a456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dd:84:e2:bd:0c:fa:e9:0d:21:68:64:19:4c:
15:c2:00:ab:c3:19:85:36:a0:23:af:fc:97:c9:e0:
67:18:8e:22:9e:a5:6b:b1:b4:4d:b5:ff:00:10:dc:
e1:9e:5a:61:dd:81:58:e4:b2:4a:39:20:23:14:12:
8d:cc:a3:8a:a0:3f:ac:15:29:ca:e8:aa:40:42:52:
e0:3f:8e:76:84:a1:90:42:e7:fc:87:d4:13:ca:65:
48:5a:38:ee:52:78:19:8e:e2:27:b3:86:34:51:d2:
74:bc:1e:3e:f8:4f:14:87:7c:fb:df:ab:9b:7d:28:
c7:dd:e6:01:f6:4f:ec:83:1e:b3:cd:c0:37:83:81:
e4:16:e4:dc:8f:05:0a:a0:1a:0c:f1:c0:e4:e1:c6:
cc:ef:07:c3:d0:c8:af:97:54:8f:7e:97:28:79:02:
58:68:67:49:06:94:43:61:87:b1:fe:1a:44:21:dd:
1c:c9:b2:af:b6:e2:3e:7a:6a:f8:09:05:12:bf:c7:
1d:86:26:3f:53:d3:dc:3b:20:61:b4:36:00:ca:03:
f5:e9:ce:a8:6b:91:99:62:2f:16:aa:de:f7:d5:a7:
ab:95:7d:91:91:71:bd:3f:55:2f:78:b4:19:6a:2c:
a9:9c:f1:fa:73:b4:1e:d9:22:9c:56:d0:36:3a:b7:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:30:D0:C1:2E:33:81:97:F5:E3:0C:BC:4C:D8:F8:47:4F:48:08
X509v3 Authority Key Identifier:
keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/0F6B8D969A6B11F08E49AE43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.192.0/23
203.31.161.0/24
IPv6:
2405:d7c0::/32
Signature Algorithm: sha256WithRSAEncryption
01:4e:a0:70:cb:6a:13:f0:b1:b2:ad:2c:a0:81:10:5f:a7:4d:
5d:49:c0:41:af:92:87:c8:01:79:bb:f3:ff:96:44:8d:d8:ac:
55:df:ce:67:5a:7f:8d:ff:fd:49:30:6e:c6:a5:a1:4e:6c:f1:
9f:0e:91:4f:dd:cb:3a:7a:e3:23:a5:2b:98:cb:11:9d:86:51:
32:88:d7:05:c9:b3:ac:75:02:e6:2d:8a:ca:56:83:ef:1d:e5:
1b:13:f7:02:f8:99:6c:bf:e9:8c:c0:f1:80:72:59:72:b3:bc:
aa:ce:21:f6:fd:39:c5:7c:9b:8c:71:bb:a6:0f:a3:fb:fe:af:
16:a2:40:51:a6:77:69:f8:da:e9:53:1d:41:0a:ba:24:e4:bc:
fb:1f:86:4a:0c:64:ed:6c:d2:ef:f3:ea:e1:a3:97:22:8c:5f:
90:45:70:55:c0:af:25:b5:5f:69:79:2a:57:a4:a4:ba:29:7a:
00:2a:7e:62:98:50:af:0b:20:4a:0e:8e:78:16:45:e7:50:6a:
d8:b7:08:73:12:9d:9d:be:bc:9e:53:64:1a:dd:95:6f:7f:9c:
eb:e1:e4:f6:fb:94:98:17:7d:66:d0:02:88:5e:8f:e6:55:cd:
6d:ac:ae:69:b8:e6:e2:ec:cd:7f:6f:03:c4:3d:ca:c8:94:eb:
90:40:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:05 2026 by rpki-client