
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa
File: 6C1DC926C3E111E9A0172583C4F9AE02.roa (raw, json)
Hash identifier: bewV1zWgSqPgmZVO4yAvKP11ZHlnn6UZHEZMn/9yIAY=
Subject key identifier: F6:0E:F2:A2:76:59:A6:00:E3:A3:11:4F:22:3D:E3:76:A3:39:D2:10
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3A5D
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:22:20 +0000
ROA not before: Fri 16 Jan 2026 16:13:26 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 24211
IP address blocks: 103.49.220.0/22 maxlen: 22
103.49.220.0/23 maxlen: 23
103.49.222.0/23 maxlen: 23
203.190.240.0/21 maxlen: 21
203.190.244.0/23 maxlen: 23
203.190.246.0/23 maxlen: 23
2402:a000::/32 maxlen: 32
2402:a000::/48 maxlen: 48
2402:a000:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14941 (0x3a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:26 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4ae0c-96ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:d5:84:90:47:ca:c8:98:3b:8a:c7:f2:72:
5d:2e:86:15:d4:68:61:ac:1c:8a:0a:30:10:c7:5e:
55:8c:a5:1b:6c:ff:e6:39:1b:b4:42:63:84:b8:0d:
6d:6d:7a:9e:fe:f3:c3:13:bf:7a:41:a5:b9:bb:3e:
9c:a2:8a:1e:70:87:6c:6b:2f:a9:a6:86:b5:30:e8:
ef:3e:94:a2:01:81:13:87:19:8b:78:8e:e3:f3:8f:
4e:ce:ff:11:2e:b0:82:f1:05:f8:4e:30:de:6f:ea:
0d:5d:f5:31:4a:2d:8e:9d:58:08:b2:04:85:01:ee:
ce:5c:ef:17:92:e7:61:ac:2b:d3:b2:0f:5d:21:9b:
62:a2:62:4b:24:9c:43:ee:64:28:c2:77:85:f2:d5:
3a:b7:2b:58:56:d8:31:f6:f3:6f:bc:54:e1:4b:83:
97:12:d9:3b:8c:e4:f9:98:64:be:d9:75:a8:c0:58:
77:b1:07:82:43:40:9f:16:04:fc:f5:a2:b4:7a:43:
e6:71:30:a3:35:b0:64:c8:cf:c8:06:ea:14:e7:ea:
b2:f8:7b:e4:91:e0:fc:b0:06:65:62:a7:bb:83:3f:
d5:8e:d7:a0:e1:41:c0:09:59:c8:a9:b7:40:6f:4d:
0c:3c:03:c5:d5:65:df:98:ca:44:6e:2e:80:df:8a:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0E:F2:A2:76:59:A6:00:E3:A3:11:4F:22:3D:E3:76:A3:39:D2:10
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.220.0/22
203.190.240.0/21
IPv6:
2402:a000::/32
Signature Algorithm: sha256WithRSAEncryption
92:e5:88:c8:1d:7c:ea:e3:67:37:e6:da:03:40:8b:e2:f4:aa:
80:2a:a4:dc:09:37:84:78:6e:97:4c:53:4b:eb:ed:e8:e4:ba:
f1:9f:e2:6e:48:22:6b:c4:d2:7b:77:0b:90:bc:66:48:68:66:
aa:ee:c1:e7:40:0a:91:5f:7d:e4:6d:9e:2e:50:23:3e:d4:31:
bc:fb:71:a9:95:b1:80:4d:26:bc:fa:28:0a:05:81:4f:13:63:
d0:42:97:a1:ff:a5:f4:ed:e0:78:e6:c2:12:2f:e9:2a:ab:90:
34:72:e0:74:f2:4a:9e:84:ba:78:96:cf:23:72:02:32:84:9f:
66:93:ca:71:c3:1a:e0:d8:4a:75:0f:b3:bf:b4:f2:3f:c2:8f:
2f:a3:f9:a6:9e:70:db:87:58:5b:46:52:78:3a:28:b6:b6:8a:
8f:5c:95:d1:33:d1:7d:de:3e:8f:df:3a:c2:57:c8:e7:4b:8d:
53:99:f1:39:3b:e7:dd:da:e8:91:62:b1:00:77:e2:0e:8a:66:
d9:21:3a:67:b8:7b:fa:7b:21:c1:8a:ab:cc:31:ce:2c:22:50:
b4:7d:8c:af:4d:92:f3:4a:2a:2d:5f:49:40:3c:8e:46:38:33:
fa:f8:87:6d:4b:53:68:8e:97:44:41:0e:b9:a1:46:67:be:42:
cc:f2:e3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:37 2026 by rpki-client