
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5C660A1C2B3B11F0A840B56CC4F9AE02.roa
File: 5C660A1C2B3B11F0A840B56CC4F9AE02.roa (raw, json)
Hash identifier: CtZnpMTP+JXc3fhD9mAhBMzs3cTfYIYMygL3wlEDQZY=
Subject key identifier: 05:88:36:A2:18:38:44:9E:46:56:F0:9B:DA:46:D5:B0:38:57:E8:F6
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3A51
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5C660A1C2B3B11F0A840B56CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:22:10 +0000
ROA not before: Fri 16 Jan 2026 16:13:14 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 138842
IP address blocks: 103.138.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14929 (0x3a51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:14 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4ae02-44b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:d9:5e:a5:41:2d:58:00:2d:87:3b:18:e4:
66:40:1b:1c:32:55:f4:c5:41:ba:7b:eb:f3:a7:19:
8b:91:4c:87:4e:6a:e4:46:b7:cb:37:f7:3a:99:ff:
52:4e:5e:dd:32:a8:13:82:78:84:d5:85:cf:05:74:
25:2d:14:9c:20:01:0f:90:20:af:0e:49:41:b5:87:
de:3a:7b:03:8f:2a:f5:30:26:f9:bd:ea:64:f1:d8:
d0:92:7a:2e:cc:d5:ee:ee:9c:28:cf:67:20:24:21:
0a:ce:dd:2d:9a:2f:bd:e5:13:23:ca:05:f1:1f:13:
2e:89:80:0c:bb:45:e8:57:85:27:02:cd:b2:fb:d4:
3c:b5:ba:e6:7d:28:b7:43:3d:b0:40:22:ee:4a:30:
bb:ce:ad:44:c8:2b:d9:a6:c2:f2:ba:4e:f6:32:6c:
b9:3c:06:91:95:02:47:5f:d3:fa:b0:d3:a3:c0:5c:
f7:93:80:8a:59:f9:db:e8:68:4a:2d:a6:07:0f:6c:
c2:c5:2a:a8:30:c3:94:61:65:e8:c9:f9:32:e2:94:
4a:ad:35:2d:67:9c:d5:2b:ef:72:f0:bf:ba:4b:4c:
d7:ac:2d:cf:68:2d:3a:cb:a4:64:d5:f8:6c:2d:fa:
d3:99:06:27:03:7d:4c:8a:7e:7d:42:ec:89:ce:c4:
d8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:36:A2:18:38:44:9E:46:56:F0:9B:DA:46:D5:B0:38:57:E8:F6
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/5C660A1C2B3B11F0A840B56CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.68.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:69:8e:07:30:dc:bf:76:2e:51:9d:fa:b1:d9:f3:e3:2b:36:
66:6f:1e:6b:e5:87:04:9e:6b:24:d2:a3:9d:5b:04:0e:82:41:
d9:f6:31:b9:b8:8a:e5:e1:2f:4b:1c:84:38:72:9f:1f:e3:69:
51:ea:19:28:27:13:74:92:e2:56:30:45:0f:c8:50:fb:99:83:
85:b7:50:d2:28:d9:1b:c4:ca:30:af:63:9d:81:74:c1:60:14:
61:ef:37:16:96:81:a4:88:7b:0e:e5:5e:e0:e5:a0:66:7c:12:
a6:d6:e4:9c:a2:f3:11:12:a6:18:1e:b8:ee:ac:aa:23:7c:5c:
b0:01:a0:c5:ef:97:05:46:fb:f9:6f:f1:2e:f7:2d:10:22:03:
7d:ae:29:79:21:8d:91:f5:b4:d3:8b:66:08:08:63:7d:30:47:
98:04:c1:51:65:2b:1d:32:54:9f:5f:ee:7e:a6:33:d6:00:bc:
2c:f1:a6:88:09:df:31:73:3b:8f:f0:f0:a7:c5:7f:41:b7:90:
02:a7:e0:a2:fe:5b:21:80:fe:40:14:32:2e:a6:da:1e:b9:a4:
f2:ef:1b:de:0a:47:b4:d1:82:77:ec:0d:be:a4:df:19:af:d1:
23:4e:c3:4f:c6:5a:83:70:21:77:79:93:ee:93:8d:56:91:ee:
9d:ae:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:18 2026 by rpki-client