
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
File: E4AAD78CEFFE11E991390613C4F9AE02.roa (raw, json)
Hash identifier: 6bd87kKcxEkzqR9DlqOb7Lyf/e9EEjGnzdd65g5tCQI=
Subject key identifier: E1:15:E3:15:F7:72:26:4A:1A:57:72:B3:5A:CF:12:19:26:85:D5:46
Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Certificate serial: 0ED2
Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
Signing time: Thu 10 Sep 2026 18:35:29 +0000
ROA not before: Thu 10 Sep 2026 18:35:29 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 137974
IP address blocks: 103.119.68.0/22 maxlen: 24
2403:3fc0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3794 (0xed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Validity
Not Before: Sep 10 18:35:29 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa2f871-833c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:d4:fd:d0:10:25:4c:4b:92:1c:6b:0b:5d:
b6:a7:5b:ac:63:35:fe:26:36:2e:8c:71:bb:d7:80:
92:2f:de:0a:c8:34:2b:f0:05:5b:71:06:dc:af:6b:
40:0a:82:16:19:23:73:fa:3e:14:4f:d0:a9:73:ad:
68:03:6e:93:7c:76:32:ce:76:5f:0d:36:f6:05:d8:
43:10:a1:8a:82:e0:8d:eb:a6:bd:29:ad:62:5c:18:
d1:fb:ff:82:9e:4b:b5:8b:79:ce:73:39:45:15:ee:
e5:4c:9c:e7:80:7b:d6:e1:60:d4:ce:9a:a2:28:6f:
46:09:b2:66:dc:d9:59:e0:60:6b:1c:e9:f0:a3:01:
c5:be:d6:20:34:9f:67:e8:65:4e:b5:b2:39:b0:b2:
8f:01:41:27:b6:b2:9c:c2:1a:da:c4:5e:16:e8:a5:
de:ba:d0:b7:a8:05:68:89:d2:b0:ba:dc:3f:f7:20:
1f:19:aa:bd:cc:1a:30:2b:8d:2f:5c:1f:d7:a5:1f:
92:58:fc:9e:73:ee:bb:10:af:c7:85:68:7c:38:97:
7e:1e:1b:b3:9b:85:bf:c4:db:56:5b:dc:9c:1f:33:
e0:50:26:a2:c8:25:ec:eb:8a:c0:5f:a5:04:94:8b:
42:db:5d:eb:ac:ef:3a:5f:a3:20:27:ba:88:4b:fd:
70:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:15:E3:15:F7:72:26:4A:1A:57:72:B3:5A:CF:12:19:26:85:D5:46
X509v3 Authority Key Identifier:
keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.119.68.0/22
IPv6:
2403:3fc0::/32
Signature Algorithm: sha256WithRSAEncryption
74:74:87:75:2e:3e:2c:d0:64:ea:3e:8e:ad:6f:6b:38:82:56:
bc:fe:6d:e9:80:02:9c:83:70:70:ca:43:79:bd:e4:7b:47:b7:
f0:cb:aa:53:82:70:2e:3c:04:57:99:59:db:7d:9c:c8:e2:07:
f4:f4:87:fd:92:e1:98:97:b7:0b:97:08:f6:30:90:90:6e:1e:
68:85:e2:95:a7:f8:7a:d7:01:85:65:27:65:3f:5d:08:06:60:
14:f7:40:61:4a:95:6b:6a:30:fe:1b:6c:8d:fd:5c:82:1b:df:
83:34:a8:2c:18:e9:73:0e:8e:c6:2f:b1:a9:14:80:88:16:e0:
71:d4:57:c6:e7:1c:24:1e:a9:74:68:17:21:f1:ed:74:f9:ba:
46:67:84:64:ce:56:cc:1c:1f:e4:ab:d0:7b:56:52:f1:f5:5d:
5d:9c:f5:03:36:50:a8:07:15:36:2d:0c:de:71:f5:89:94:43:
ae:ac:4e:e1:63:8a:90:05:3c:a9:d8:35:d6:f0:da:ba:e2:d0:
ca:60:35:69:5f:68:8f:e4:aa:40:5a:a0:d1:22:93:91:2b:c6:
e5:12:a9:0a:f3:76:13:3e:4d:fe:8a:9b:d5:f8:48:9e:88:1e:
0c:aa:1a:ff:86:f7:85:02:d5:c4:fb:de:a6:b5:e6:d5:c1:6d:
39:11:96:bd
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4
NDNEMUVBMDIwHhcNMjYwOTEwMTgzNTI5WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEyZjg3MS04MzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlLU/dAQJUxLkhxrC122p1usYzX+JjYujHG714CSL94KyDQr8AVbcQbcr2tA
CoIWGSNz+j4UT9Cpc61oA26TfHYyznZfDTb2BdhDEKGKguCN66a9Ka1iXBjR+/+C
nku1i3nOczlFFe7lTJzngHvW4WDUzpqiKG9GCbJm3NlZ4GBrHOnwowHFvtYgNJ9n
6GVOtbI5sLKPAUEntrKcwhraxF4W6KXeutC3qAVoidKwutw/9yAfGaq9zBowK40v
XB/XpR+SWPyec+67EK/HhWh8OJd+Hhuzm4W/xNtWW9ycHzPgUCaiyCXs64rAX6UE
lItC213rrO86X6MgJ7qIS/1wdwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFOEV4xX3
ciZKGldys1rPEhkmhdVGMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2
N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2
Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTJFRjMvNzZBN0Q2MjhCNjdEMTFFOThFMTNDNDg2QzRGOUFFMDIvRTRBQUQ3OENF
RkZFMTFFOTkxMzkwNjEzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ3dEMA0EAgACMAcDBQAkAz/AMA0GCSqGSIb3DQEBCwUAA4IBAQB0
dId1Lj4s0GTqPo6tb2s4gla8/m3pgAKcg3BwykN5veR7R7fwy6pTgnAuPARXmVnb
fZzI4gf09If9kuGYl7cLlwj2MJCQbh5oheKVp/h61wGFZSdlP10IBmAU90BhSpVr
ajD+G2yN/VyCG9+DNKgsGOlzDo7GL7GpFICIFuBx1FfG5xwkHql0aBch8e10+bpG
Z4RkzlbMHB/kq9B7VlLx9V1dnPUDNlCoBxU2LQzecfWJlEOurE7hY4qQBTyp2DXW
8Nq64tDKYDVpX2iP5KpAWqDRIpORK8blEqkK83YTPk3+ipvV+EieiB4Mqhr/hveF
AtXE+96mtebVwW05EZa9
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:12:47 2026 by rpki-client