
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
File: 933D446C0BCA11ED888E5616C4F9AE02.roa (raw, json)
Hash identifier: BwTglrTGwGL013a6rchTSuAXuNIpf50YQ63BNngbxbs=
Subject key identifier: 59:32:3A:70:3F:D0:E4:F7:6A:3F:31:5C:26:B9:9F:FA:C5:11:5C:FE
Certificate issuer: /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial: 033B
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:05:40 +0000
ROA not before: Thu 19 Jun 2025 01:57:45 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137831
IP address blocks: 103.115.76.0/22 maxlen: 22
103.115.79.0/24 maxlen: 24
202.181.92.0/22 maxlen: 22
202.181.93.0/24 maxlen: 24
202.181.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Validity
Not Before: Jun 19 01:57:45 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a42b93-bdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c7:4e:19:27:bc:c5:8d:0e:c5:7a:26:5c:98:
bd:dd:92:ce:d6:30:6f:98:43:ff:ae:85:59:fe:fb:
b8:2f:a9:e2:10:a4:be:ec:15:65:3a:dc:7f:5a:48:
d8:e1:54:27:0c:69:0d:04:1e:a4:c6:82:db:58:26:
35:32:93:1f:9a:dd:e9:f0:a2:c3:7a:94:63:b4:ff:
57:5e:ad:4f:f6:9d:be:b2:b2:6b:35:88:fb:f3:15:
b7:b1:02:fe:d2:2a:1f:b9:3e:93:f1:3b:aa:0c:0c:
1f:73:33:37:5a:7c:5a:1a:95:82:76:df:30:fd:3d:
61:60:18:cf:8b:e1:3a:80:ca:5a:4e:4e:3f:81:f3:
40:73:f8:5e:6c:a1:15:c8:de:a6:8e:76:33:62:ec:
9b:5e:99:4f:6b:63:fa:4c:da:73:57:52:3a:05:d0:
3d:9f:24:38:36:d2:de:60:25:24:4f:d8:f1:e6:11:
15:0c:d9:3e:8c:7c:53:cc:5a:d3:cd:9d:a1:81:01:
25:c9:63:cf:b2:b4:6e:73:10:f9:8e:29:b4:54:0d:
89:c2:25:eb:cb:bf:22:08:64:d8:d8:83:ff:ea:d3:
9e:36:6d:9c:d2:c4:f0:52:a0:54:90:4c:f2:83:06:
9d:20:34:d2:fa:a6:25:28:bb:c9:bf:f5:c2:39:88:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:32:3A:70:3F:D0:E4:F7:6A:3F:31:5C:26:B9:9F:FA:C5:11:5C:FE
X509v3 Authority Key Identifier:
keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/933D446C0BCA11ED888E5616C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.115.76.0/22
202.181.92.0/22
Signature Algorithm: sha256WithRSAEncryption
12:f7:65:e5:b5:bf:c5:ea:23:56:ab:d3:f2:70:c9:75:d2:e3:
c1:18:c6:3d:98:93:b4:f8:08:ba:6a:fd:4e:ff:b1:a1:d3:ae:
68:17:b5:b7:e1:fa:ef:99:b7:1d:3a:c5:7a:f2:96:cd:fb:98:
b4:26:73:e1:8f:ca:d9:a6:8a:49:b6:af:af:1c:e8:b2:1c:f6:
23:30:bb:1e:3b:23:68:44:13:5d:0c:ee:f0:0a:ca:95:c4:7d:
00:60:c8:17:66:4d:df:d4:78:52:f4:33:63:8c:4c:5d:b7:40:
60:4b:2a:1f:55:37:96:bf:e4:20:e8:36:1f:2e:21:db:23:dc:
c3:c4:3f:cc:4d:09:9a:bd:80:63:ed:77:2a:f9:50:9f:96:f2:
38:3f:4b:54:fe:1e:25:49:21:cc:12:3d:7b:53:97:d2:5f:47:
d5:01:68:08:69:b7:f7:b3:01:f1:df:9d:8b:bf:02:e7:c6:32:
58:fe:5b:bb:ef:33:f6:5a:0a:7d:53:69:9b:cd:d6:c2:d0:f4:
d7:40:8b:b6:77:b4:66:2c:81:f3:4c:a3:5d:d1:18:f0:b1:ef:
9e:72:e6:15:92:0b:04:d1:0b:aa:e6:ef:7d:f3:01:ca:39:b8:
07:42:d2:b5:11:29:88:ae:ec:6b:32:86:ca:e9:58:b4:f9:3d:
76:88:fb:84
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB
MjA5MzU1OEEwHhcNMjUwNjE5MDE1NzQ1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MmI5My1iZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7MdOGSe8xY0OxXomXJi93ZLO1jBvmEP/roVZ/vu4L6niEKS+7BVlOtx/WkjY
4VQnDGkNBB6kxoLbWCY1MpMfmt3p8KLDepRjtP9XXq1P9p2+srJrNYj78xW3sQL+
0iofuT6T8TuqDAwfczM3WnxaGpWCdt8w/T1hYBjPi+E6gMpaTk4/gfNAc/hebKEV
yN6mjnYzYuybXplPa2P6TNpzV1I6BdA9nyQ4NtLeYCUkT9jx5hEVDNk+jHxTzFrT
zZ2hgQElyWPPsrRucxD5jim0VA2JwiXry78iCGTY2IP/6tOeNm2c0sTwUqBUkEzy
gwadIDTS+qYlKLvJv/XCOYhc4wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFkyOnA/
0OT3aj8xXCa5n/rFEVz+MB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjM5OTgvM0E0MTdENzQwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvOTMzRDQ0NkMw
QkNBMTFFRDg4OEU1NjE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ3NMAwQCyrVcMA0GCSqGSIb3DQEBCwUAA4IBAQAS92Xltb/F6iNW
q9PycMl10uPBGMY9mJO0+Ai6av1O/7Gh065oF7W34frvmbcdOsV68pbN+5i0JnPh
j8rZpopJtq+vHOiyHPYjMLseOyNoRBNdDO7wCsqVxH0AYMgXZk3f1HhS9DNjjExd
t0BgSyofVTeWv+Qg6DYfLiHbI9zDxD/MTQmavYBj7Xcq+VCflvI4P0tU/h4lSSHM
Ej17U5fSX0fVAWgIabf3swHx352LvwLnxjJY/lu77zP2Wgp9U2mbzdbC0PTXQIu2
d7RmLIHzTKNd0Rjwse+ecuYVkgsE0Quq5u998wHKObgHQtK1ESmIruxrMobK6Vi0
+T12iPuE
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:44 2026 by rpki-client