
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa
File: F09C691AEBB511ECA410BF6DC4F9AE02.roa (raw, json)
Hash identifier: Rw8wdhCI/rNZP6FgC9C+qd0EQ9zAMz5LAI5l6VZT91I=
Subject key identifier: 0D:E6:FD:1C:9E:0E:04:57:87:27:A5:2B:2D:7F:81:87:8C:7A:ED:F7
Certificate issuer: /CN=A9146C84/serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Certificate serial: 036D
Authority key identifier: 29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:03:28 +0000
ROA not before: Fri 11 Apr 2025 01:36:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18188
IP address blocks: 103.134.13.0/24 maxlen: 24
202.125.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:14:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146C84, serialNumber=29662F513A254F0DB5F07DB5819FBEAE40F7BF15
Validity
Not Before: Apr 11 01:36:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42b10-4e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:78:89:f2:a3:27:a1:7c:67:76:d8:13:26:
62:78:64:75:a8:d0:94:a5:e2:3e:0d:e4:7d:da:45:
b1:7c:fe:a5:86:69:fc:09:77:2c:80:df:ef:11:1a:
08:b3:2b:48:dd:3c:e8:5d:ae:a1:69:c0:55:7e:28:
1c:31:e8:d0:6d:83:ce:7b:bd:e3:04:bf:33:e5:fd:
d5:09:41:1b:19:00:39:04:41:8a:13:47:1e:ea:66:
6a:13:d6:32:b8:08:99:e3:1c:5a:07:0b:d9:d6:04:
8c:1c:4d:38:57:de:74:36:c8:66:06:43:05:0f:25:
91:67:16:6b:3f:15:9b:ce:ae:6c:75:4c:53:e5:c2:
a1:d3:04:e1:13:af:94:b8:17:83:a4:bf:42:10:08:
41:9d:d9:91:ba:90:bb:cc:c5:6d:32:57:89:f1:87:
c2:a6:a8:74:d1:d4:2b:44:e8:91:34:b1:d4:82:0f:
2f:f7:e8:bc:0c:1d:2c:9f:0e:b5:95:21:d3:38:ab:
ed:26:62:70:c7:8a:4e:6f:c1:f2:fe:27:95:fd:10:
a5:e2:f1:2a:4d:fa:b2:e4:54:c5:37:f5:58:8d:6e:
ed:5e:a2:97:0f:5f:11:74:87:9e:1f:0c:fe:58:e6:
ba:61:ab:74:f8:90:7d:c2:8f:f5:36:97:66:72:c8:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E6:FD:1C:9E:0E:04:57:87:27:A5:2B:2D:7F:81:87:8C:7A:ED:F7
X509v3 Authority Key Identifier:
keyid:29:66:2F:51:3A:25:4F:0D:B5:F0:7D:B5:81:9F:BE:AE:40:F7:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/KWYvUTolTw218H21gZ--rkD3vxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KWYvUTolTw218H21gZ--rkD3vxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146C84/2A9BB026EBB111EC86DE3565C4F9AE02/F09C691AEBB511ECA410BF6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.134.13.0/24
202.125.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:23:c7:87:7b:be:b2:55:18:69:e0:6d:67:f3:33:96:d1:77:
ce:8f:89:a6:7c:bc:a1:5e:a2:bc:89:a7:a7:20:f6:c7:0a:ee:
de:64:33:5b:c6:62:d0:9c:47:07:db:b2:46:74:0c:db:8f:df:
4f:b1:7f:0b:97:40:95:58:3b:e1:f0:70:70:19:c9:f7:00:b9:
66:26:35:5f:a0:cc:65:41:2d:09:61:1a:a4:be:26:b1:9e:22:
cf:44:90:64:c2:96:25:a1:bf:db:6c:c8:6a:1f:61:75:ab:42:
e7:0b:d3:83:74:d8:6b:3e:05:c2:c8:44:d1:b0:30:be:33:44:
82:45:1e:08:f5:69:67:9c:82:c4:36:34:89:56:ec:43:c8:5e:
89:61:16:80:b0:97:3d:37:27:fd:0b:a6:c8:5a:e0:47:7b:9b:
c7:fb:e0:1e:97:38:0b:b5:93:c7:e6:c3:3c:2c:ae:9e:e9:2e:
1b:6d:89:07:fe:a7:17:44:99:29:b2:6b:1c:42:e2:bf:bd:4a:
8d:39:62:04:c2:79:fe:8b:a6:a5:16:96:57:8a:9e:b3:1a:cf:
b0:92:b4:7f:fc:27:19:1f:8f:1f:5e:21:f6:6a:f7:f0:93:ca:
2d:64:75:b9:1e:02:65:d3:17:6b:7c:9a:a6:d9:ec:f9:83:85:
2b:f2:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:25 2026 by rpki-client