
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/BF6649687AC811EDAE44E656C4F9AE02.roa
File: BF6649687AC811EDAE44E656C4F9AE02.roa (raw, json)
Hash identifier: 2TFs/aN56YYfMKbO48cUZpiTEUxerrK/SeS8iFEvWTI=
Subject key identifier: BA:EF:A9:22:0F:1C:FC:CA:E7:CD:26:10:D0:D4:DE:BF:E3:07:11:59
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3C10
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/BF6649687AC811EDAE44E656C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:26:20 +0000
ROA not before: Fri 04 Jul 2025 14:50:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 131887
IP address blocks: 103.104.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15376 (0x3c10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Jul 4 14:50:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4aefb-a782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:db:5f:c8:f3:ed:c2:38:8a:3d:da:c6:e1:
7e:bc:9e:38:c9:1a:56:91:40:6f:25:73:af:67:b0:
c5:c9:b7:16:5f:cf:fd:bd:a1:a6:84:31:e2:45:6b:
25:65:ad:33:f1:d1:f1:bf:e9:0c:ba:e5:bb:cc:d9:
3f:33:39:13:1e:11:74:07:dd:ce:6a:54:a3:d2:30:
e3:fb:25:d7:fa:7f:3c:0f:a0:50:83:a3:58:50:29:
21:8d:e2:60:fc:db:31:62:a9:a9:f6:68:97:6c:89:
b7:91:56:92:a8:29:18:3b:d5:dd:ab:95:e1:14:6e:
d4:8a:ef:c3:56:d3:e5:3e:19:d4:9d:4b:6e:0e:f9:
c3:3f:b5:a2:c7:fa:14:77:06:b1:87:2f:51:f9:bb:
82:17:96:a7:d6:99:0a:96:7d:0b:95:0e:78:5b:a6:
cb:31:4f:68:6b:9e:ed:c7:f2:59:a3:b3:3d:77:1e:
d6:8d:cb:84:26:f7:6f:b1:99:06:18:b2:6c:30:51:
55:99:bf:8b:95:a3:bd:72:57:45:2a:a7:7c:b9:2f:
92:21:6c:f5:98:4d:e7:4a:92:38:9b:af:d6:9f:31:
37:7c:9c:02:c0:a2:97:ee:34:87:eb:ce:2e:f1:4d:
f2:6c:c0:8a:2f:19:34:1b:68:3b:24:ad:99:c3:17:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:A9:22:0F:1C:FC:CA:E7:CD:26:10:D0:D4:DE:BF:E3:07:11:59
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/BF6649687AC811EDAE44E656C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.104.86.0/24
Signature Algorithm: sha256WithRSAEncryption
38:56:e0:2b:9d:d8:ee:1b:32:82:d5:f7:18:6f:37:54:49:63:
1d:62:57:e5:f3:a6:35:8d:fe:c6:74:5b:35:78:bb:5d:56:78:
87:df:a6:44:9e:b9:4c:b1:49:04:c6:f4:7a:e7:9f:e3:ca:d8:
04:f2:b4:c6:4a:06:c2:bb:9d:1e:5d:5e:92:c9:a1:d1:25:a4:
d3:2f:4a:b9:93:3e:8c:b6:e6:f0:42:07:e9:37:08:e8:97:27:
03:f6:df:6f:1d:9e:72:c5:68:c5:b9:cf:fa:a7:c5:cb:df:dc:
97:7c:a6:d8:a5:94:bf:53:24:45:b1:0b:f7:fb:cc:e6:8b:fd:
4f:ac:78:2c:b5:08:aa:e0:31:24:8d:85:71:41:bd:2a:07:8e:
4e:35:1b:56:36:65:e5:eb:8c:13:7e:62:a4:14:74:8d:b5:77:
fa:99:77:78:f5:48:b9:18:2e:53:47:4f:18:c4:b7:42:c2:00:
63:62:5f:35:19:18:4d:98:91:5e:ef:7d:49:a2:25:9b:21:6a:
1d:fd:eb:f4:aa:79:d2:90:40:9c:1d:1e:42:eb:e1:74:25:af:
b6:73:63:f7:77:bf:4f:fa:cd:7f:6e:51:32:6a:91:63:26:db:
72:de:70:73:e6:64:d7:17:20:c9:3e:f7:a0:c3:e9:a4:a4:ef:
08:1d:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:25 2026 by rpki-client