
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa
File: B6A436A8411F11EBA45D5857C4F9AE02.roa (raw, json)
Hash identifier: CBhh18vZOyR4JQkikusISo0dIZ4iDwfiMlfF9pT0UHU=
Subject key identifier: 26:21:45:05:FC:E7:F6:40:92:02:27:17:1D:DB:62:6E:DC:6A:55:D1
Certificate issuer: /CN=A9148F50/serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Certificate serial: 0809
Authority key identifier: 4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa
Signing time: Fri 04 Sep 2026 21:42:07 +0000
ROA not before: Fri 04 Sep 2026 21:42:06 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 131226
IP address blocks: 103.37.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148F50, serialNumber=4CF6BA29426CBC2074DF62C51FAF378C42D3B8AF
Validity
Not Before: Sep 4 21:42:06 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a9b3b2e-b6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:94:1b:24:7b:e0:80:5e:9d:ab:50:fd:0b:
3c:13:35:7e:47:1d:e8:4a:b7:07:a7:9d:a6:d7:f5:
f1:27:90:35:7f:0b:aa:80:7c:00:73:42:2c:8e:60:
40:14:eb:4e:25:67:32:1a:ae:d3:c0:5f:94:86:6a:
ff:5c:a9:7e:05:5c:41:8f:70:9e:a6:9a:2d:68:21:
b3:9d:b9:04:d7:c8:b2:80:a5:77:36:17:13:3d:eb:
82:a9:22:df:02:c4:11:94:7b:26:7b:8c:1c:f1:8b:
62:4c:75:1a:0e:8f:89:5a:50:89:cd:91:b6:f5:7d:
e4:47:7b:3f:ab:c2:bf:49:ee:fc:98:2f:b5:c6:5c:
ba:e8:24:a4:82:0b:d2:18:b0:3a:69:ce:b8:87:14:
1c:34:15:6f:15:9c:76:5a:00:4f:1c:e0:0f:ae:26:
77:98:13:c7:e3:f6:97:1b:78:5b:64:f8:71:1e:8d:
13:56:00:c6:81:58:dc:69:24:62:28:6c:3a:c5:3c:
c7:7c:81:8f:6f:68:d5:9c:a0:7a:38:32:2f:bc:46:
5a:b3:51:6a:52:ad:11:db:7f:5f:82:86:48:82:be:
3e:47:c5:4d:95:1a:d6:7b:73:af:d6:c0:df:87:4d:
af:d0:19:03:e8:f5:5f:a5:4e:b6:9f:b2:fe:2a:98:
bc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:21:45:05:FC:E7:F6:40:92:02:27:17:1D:DB:62:6E:DC:6A:55:D1
X509v3 Authority Key Identifier:
keyid:4C:F6:BA:29:42:6C:BC:20:74:DF:62:C5:1F:AF:37:8C:42:D3:B8:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/TPa6KUJsvCB032LFH683jELTuK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TPa6KUJsvCB032LFH683jELTuK8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148F50/A1E1F79C411E11EBA0B8FA56C4F9AE02/B6A436A8411F11EBA45D5857C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.37.200.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:72:6c:dc:5f:98:51:6c:83:d1:2a:70:35:b4:bf:71:fd:39:
16:ba:e1:c2:7d:b6:3d:e7:7e:37:be:29:9f:f8:f8:0d:6d:35:
5a:6d:e0:d3:e5:ab:f9:57:4c:ae:d3:57:69:ed:c0:57:44:e0:
46:35:75:04:b4:06:8d:74:51:3d:80:74:42:5b:f2:0d:17:14:
95:6f:32:d7:46:ab:e4:01:c8:2e:0e:e0:b7:5f:04:fb:6c:20:
0f:a8:ba:d7:40:9a:f3:1e:f6:d6:de:81:36:3c:28:25:e1:d4:
3c:3d:83:7a:c8:af:ec:87:aa:fd:d2:60:35:09:0b:c4:af:53:
e7:2d:bc:98:b8:20:bd:87:a0:0f:0b:3e:e4:6a:54:43:f6:12:
68:9c:fb:ac:1b:82:11:40:51:f8:f9:0a:a0:37:48:44:8c:a3:
a5:52:f3:50:93:76:30:00:11:df:28:6d:d9:1d:a1:0c:0d:47:
4e:24:53:4b:45:e6:bf:d8:23:a0:8e:de:b2:5d:e1:5e:3d:35:
cd:b1:c8:bd:c8:f1:5c:79:b3:85:ad:78:a9:1b:61:b5:46:5e:
6d:f1:bf:46:d7:f1:c8:9a:2f:1b:eb:15:d0:ef:fa:45:74:55:
63:74:c1:a4:b1:b9:e7:21:07:a8:25:cb:e1:5a:ac:e9:59:e6:
94:de:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:17:51 2026 by rpki-client