
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/F2AE85D6128E11F1BA652BAD3A3D8C67.roa
File: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (raw, json)
Hash identifier: XFZyAVomr+D6cpEwC0fdueBEAmEYpPj3c5fCswDRg+E=
Subject key identifier: D4:CB:94:4E:74:E1:0A:A9:46:DD:36:6E:D2:43:E4:80:14:90:78:5D
Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Certificate serial: 2E87
Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/F2AE85D6128E11F1BA652BAD3A3D8C67.roa
Signing time: Sun 30 Aug 2026 16:22:23 +0000
ROA not before: Sun 30 Aug 2026 16:22:23 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 141710
IP address blocks: 103.162.119.0/24 maxlen: 24
2001:df5:f180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11911 (0x2e87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4
Validity
Not Before: Aug 30 16:22:23 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a9458bf-2adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:ea:3c:b6:14:cd:03:5d:59:75:0d:83:32:
fb:0e:c0:83:46:bd:58:e0:4b:07:87:ad:01:af:ef:
5d:fc:10:68:5e:eb:72:ca:c2:41:34:50:bc:d8:10:
76:c8:83:b4:c2:4c:09:d3:d3:51:1e:29:96:38:f8:
11:e9:3b:c2:30:9f:d5:e4:d8:63:0c:3d:8d:2b:76:
96:8a:40:85:14:f2:05:ca:ce:0e:fc:b9:69:2a:72:
82:69:89:29:ae:25:c6:e4:de:1f:40:9f:86:2e:b0:
15:e7:b4:a9:11:8f:c8:04:0a:e1:25:20:a2:b4:5b:
29:62:81:f5:e5:e3:7a:b3:e3:1f:84:5a:0f:1d:4a:
c0:53:df:05:39:60:92:f5:aa:c9:e3:05:09:bc:02:
81:27:c7:3a:74:05:94:61:a4:1e:d7:fa:2e:bd:7b:
59:89:7e:9d:9f:2c:c9:34:ad:00:a7:0c:cb:1e:9f:
9d:47:72:0f:45:ea:09:69:2c:ce:cd:a0:7e:7a:66:
0c:79:ce:6c:56:a2:e6:a2:3e:af:38:95:3c:a1:32:
8d:81:0c:6e:3a:da:01:d4:87:b3:b0:90:1d:be:ef:
34:36:17:b7:27:33:19:2e:c4:00:ce:9b:fb:c3:0c:
bd:5b:8d:c5:b9:a3:27:f8:0b:69:2a:51:9e:24:5e:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:94:4E:74:E1:0A:A9:46:DD:36:6E:D2:43:E4:80:14:90:78:5D
X509v3 Authority Key Identifier:
keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/F2AE85D6128E11F1BA652BAD3A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.162.119.0/24
IPv6:
2001:df5:f180::/48
Signature Algorithm: sha256WithRSAEncryption
86:95:33:de:0c:74:2d:1a:e9:39:2a:eb:b4:37:2c:a7:0d:17:
3f:1d:42:25:ea:f8:24:ba:8a:e9:c6:eb:fa:4e:8b:99:3b:b2:
12:23:7c:16:55:45:43:fd:d0:d7:7a:9b:87:23:25:c1:0f:2f:
e2:7a:b1:99:13:61:52:76:4c:45:7d:69:c5:be:cb:ac:d0:78:
35:b9:eb:f5:61:45:f8:e3:a0:88:80:b5:f9:da:ec:43:af:87:
1d:7f:03:ad:25:9c:e4:81:cd:b1:6e:16:27:48:a8:15:24:15:
28:4c:40:c0:59:d8:01:dc:d7:2c:e2:65:ca:b0:5d:8a:1a:21:
80:f2:2e:08:cf:18:e7:81:c9:09:a3:5b:d7:17:6f:9d:c0:24:
06:63:58:2c:76:5d:dd:d9:a7:d6:a4:de:1e:d0:bc:dd:94:10:
c6:89:d7:04:28:30:9e:f0:03:f0:30:e2:33:28:1a:11:98:29:
9d:d3:dd:d7:89:22:69:2d:a6:9b:f9:19:d9:ea:ce:2e:20:ac:
30:8d:64:76:61:26:47:90:63:dd:9c:ff:b5:fb:b1:3c:f4:37:
a2:3d:99:c9:b6:22:a6:d1:a2:e7:a6:8a:e1:4c:1d:62:c2:d5:
64:34:95:5c:63:63:44:d7:a7:ec:43:58:0e:26:4e:c7:32:51:
fa:3d:8d:d3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICLocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG
N0JEQkFDRTQwHhcNMjYwODMwMTYyMjIzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk0NThiZi0yYWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAokTqPLYUzQNdWXUNgzL7DsCDRr1Y4EsHh60Br+9d/BBoXutyysJBNFC82BB2
yIO0wkwJ09NRHimWOPgR6TvCMJ/V5NhjDD2NK3aWikCFFPIFys4O/LlpKnKCaYkp
riXG5N4fQJ+GLrAV57SpEY/IBArhJSCitFspYoH15eN6s+MfhFoPHUrAU98FOWCS
9arJ4wUJvAKBJ8c6dAWUYaQe1/ouvXtZiX6dnyzJNK0ApwzLHp+dR3IPReoJaSzO
zaB+emYMec5sVqLmoj6vOJU8oTKNgQxuOtoB1IezsJAdvu80Nhe3JzMZLsQAzpv7
wwy9W43FuaMn+AtpKlGeJF5CYwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNTLlE50
4QqpRt02btJD5IAUkHhdMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5
RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZBNzIvMDVDODkxREE4OUVEMTFFMzg2OTE2RUE1NTkxMUVBMzIvRjJBRTg1RDYx
MjhFMTFGMUJBNjUyQkFEM0EzRDhDNjcucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ6J3MA8EAgACMAkDBwAgAQ318YAwDQYJKoZIhvcNAQELBQADggEB
AIaVM94MdC0a6Tkq67Q3LKcNFz8dQiXq+CS6iunG6/pOi5k7shIjfBZVRUP90Nd6
m4cjJcEPL+J6sZkTYVJ2TEV9acW+y6zQeDW56/VhRfjjoIiAtfna7EOvhx1/A60l
nOSBzbFuFidIqBUkFShMQMBZ2AHc1yziZcqwXYoaIYDyLgjPGOeByQmjW9cXb53A
JAZjWCx2Xd3Zp9ak3h7QvN2UEMaJ1wQoMJ7wA/Aw4jMoGhGYKZ3T3deJImktppv5
Gdnqzi4grDCNZHZhJkeQY92c/7X7sTz0N6I9mcm2IqbRouemiuFMHWLC1WQ0lVxj
Y0TXp+xDWA4mTscyUfo9jdM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:41:45 2026 by rpki-client