
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/0A7FC90CEED311F096B1F0A4736F56BC.roa
File: 0A7FC90CEED311F096B1F0A4736F56BC.roa (raw, json)
Hash identifier: vzVQBVMmwkmKLF9gw2qbd+GWfUXHzR09NVFTQu0OTDQ=
Subject key identifier: 7B:77:83:0C:8D:9B:14:11:AE:6C:7D:0E:D0:35:C3:80:EC:C6:46:AC
Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Certificate serial: 0197
Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/0A7FC90CEED311F096B1F0A4736F56BC.roa
Signing time: Thu 11 Jun 2026 07:34:29 +0000
ROA not before: Thu 11 Jun 2026 07:34:29 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 154321
IP address blocks: 103.23.148.0/23 maxlen: 24
2401:95a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773
Validity
Not Before: Jun 11 07:34:29 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2a6505-6131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:a6:0e:68:76:e5:b9:7e:25:38:e2:07:3c:
c3:87:b5:32:2a:e3:ff:ac:60:f0:26:11:71:2f:86:
66:af:b0:f9:3b:3f:f7:8f:a7:b2:f1:9b:33:e9:4f:
61:4d:ca:f5:79:28:41:a0:f4:1a:3d:04:76:03:02:
4c:f7:c0:76:ec:88:7c:8c:7d:3f:25:48:80:51:f9:
2f:18:00:f2:63:28:c5:df:6f:66:79:b1:7a:04:fc:
16:33:51:a1:26:30:4c:ca:1b:6a:b4:ab:60:44:25:
93:2f:e7:8e:ed:6a:4b:9b:45:04:64:b3:e1:e4:c4:
8c:d8:85:5f:5e:c9:fb:f8:92:c5:cc:57:c5:58:84:
4c:a1:30:88:f2:73:04:e3:52:49:d0:33:a1:61:37:
73:d8:0f:77:b7:93:49:b8:7e:f2:ab:ec:6f:26:17:
26:42:9e:96:1f:cc:23:80:b5:55:28:3b:2d:75:f2:
42:dc:47:71:82:6f:5e:c7:e2:5c:e1:90:13:cb:b9:
09:de:e2:56:09:4f:17:90:83:c6:a2:c0:90:7a:c4:
c4:5d:8a:ab:ca:7f:42:a8:ef:b0:87:05:33:c4:23:
c0:9a:fd:32:fc:ae:09:e0:08:f0:6e:f7:54:d4:04:
ec:8b:78:03:9a:8e:3b:0c:cd:36:fb:93:7e:d5:d8:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:77:83:0C:8D:9B:14:11:AE:6C:7D:0E:D0:35:C3:80:EC:C6:46:AC
X509v3 Authority Key Identifier:
keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/0A7FC90CEED311F096B1F0A4736F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.148.0/23
IPv6:
2401:95a0::/32
Signature Algorithm: sha256WithRSAEncryption
80:ec:e7:e6:ab:ed:c9:e5:d8:76:e8:10:a9:ea:38:92:1e:5e:
d5:2d:7b:31:06:dc:ff:f2:28:09:ac:d9:73:17:00:90:6c:ab:
d5:7f:fe:cd:5f:d1:e2:b3:21:dd:8f:02:8c:70:74:b0:b9:0e:
78:b5:e5:cc:8e:e9:b6:38:d0:d5:b2:04:20:03:d1:19:5e:dc:
cf:a0:c6:44:a2:60:c6:cb:54:3a:72:9d:c8:ee:73:b1:d6:cc:
97:7f:b9:30:5e:92:6a:c3:53:d9:db:6a:ae:d8:33:bb:d0:d0:
50:32:2b:40:9b:05:62:6b:f4:a3:ab:34:d9:3b:be:6d:6b:62:
bd:d3:60:96:9c:7c:f5:51:d0:ce:93:1d:c9:22:f7:69:98:34:
6b:35:dc:37:f4:61:ec:63:31:30:8d:d1:5c:71:f7:53:9d:df:
5d:9e:3f:7f:67:38:1e:3c:62:4d:03:5c:24:86:fa:6f:8f:8b:
3e:b2:fb:68:70:b8:8d:71:bd:07:2a:1e:65:b1:a0:5c:90:8e:
8f:c4:eb:6a:df:3e:35:91:2c:6e:7d:05:a1:6a:c2:5d:e7:e7:
f8:cc:4e:16:8e:b1:02:3a:8c:d9:00:13:6d:0e:a5:a0:4d:c0:
d4:c1:0a:2f:4d:4f:32:45:bb:f5:48:a4:d4:b9:1a:14:28:45:
a3:51:b2:70
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2
NTQ0MDY3NzMwHhcNMjYwNjExMDczNDI5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJhNjUwNS02MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0wamDmh25bl+JTjiBzzDh7UyKuP/rGDwJhFxL4Zmr7D5Oz/3j6ey8Zsz6U9h
Tcr1eShBoPQaPQR2AwJM98B27Ih8jH0/JUiAUfkvGADyYyjF329mebF6BPwWM1Gh
JjBMyhtqtKtgRCWTL+eO7WpLm0UEZLPh5MSM2IVfXsn7+JLFzFfFWIRMoTCI8nME
41JJ0DOhYTdz2A93t5NJuH7yq+xvJhcmQp6WH8wjgLVVKDstdfJC3Edxgm9ex+Jc
4ZATy7kJ3uJWCU8XkIPGosCQesTEXYqryn9CqO+whwUzxCPAmv0y/K4J4AjwbvdU
1ATsi3gDmo47DM02+5N+1dgmAQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHt3gwyN
mxQRrmx9DtA1w4DsxkasMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG
REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTZGMTQvM0YxMjg4NjIxRkRCMTFFRkE3NTFGNzQ3QzRGOUFFMDIvMEE3RkM5MENF
RUQzMTFGMDk2QjFGMEE0NzM2RjU2QkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZxeUMA0EAgACMAcDBQAkAZWgMA0GCSqGSIb3DQEBCwUAA4IBAQCA
7Ofmq+3J5dh26BCp6jiSHl7VLXsxBtz/8igJrNlzFwCQbKvVf/7NX9HisyHdjwKM
cHSwuQ54teXMjum2ONDVsgQgA9EZXtzPoMZEomDGy1Q6cp3I7nOx1syXf7kwXpJq
w1PZ22qu2DO70NBQMitAmwVia/SjqzTZO75ta2K902CWnHz1UdDOkx3JIvdpmDRr
Ndw39GHsYzEwjdFccfdTnd9dnj9/ZzgePGJNA1wkhvpvj4s+svtocLiNcb0HKh5l
saBckI6PxOtq3z41kSxufQWhasJd5+f4zE4WjrECOozZABNtDqWgTcDUwQovTU8y
Rbv1SKTUuRoUKEWjUbJw
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:07 2026 by rpki-client