
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa
File: 885DA760AA8811E799348329C4F9AE02.roa (raw, json)
Hash identifier: OgMqHQ2yVMx+7d3BSt5zC2aY7l1q21WR4K+bA1B1tR4=
Subject key identifier: 5B:E0:B3:B2:45:44:C7:B1:6A:4F:57:EA:57:50:ED:1B:2E:AC:E3:FD
Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial: 1A52
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:15:27 +0000
ROA not before: Mon 26 May 2025 17:06:11 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 135330
IP address blocks: 103.214.144.0/24 maxlen: 24
103.214.145.0/24 maxlen: 24
103.214.146.0/24 maxlen: 24
103.214.147.0/24 maxlen: 24
2404:c680::/32 maxlen: 32
2404:c680::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6738 (0x1a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Validity
Not Before: May 26 17:06:11 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a403ae-6076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:93:bc:86:41:26:c3:61:d2:92:37:87:65:
08:a3:ae:8f:78:71:75:86:24:6e:0d:42:62:d9:60:
6d:85:b4:e4:5b:a0:da:15:90:97:55:a8:d4:2f:e3:
6b:2b:df:fb:61:1e:54:23:d2:78:bc:a5:1e:44:f0:
06:f6:31:2a:70:b0:57:ba:fc:6b:95:45:fd:cc:7b:
71:ea:d4:7a:6a:63:ae:fb:61:00:27:05:d2:42:67:
58:bc:84:6f:d3:c7:93:ae:eb:e1:37:f6:1d:d5:f5:
54:a4:dc:7a:3d:59:b8:b9:55:fd:32:fa:3d:22:22:
8d:58:c5:3e:6d:7b:97:fd:d0:aa:b4:0f:83:f1:c1:
2a:60:d1:a1:43:82:7a:ad:ae:0c:ae:83:c5:40:90:
bf:c3:67:0f:df:e0:76:25:d0:64:d1:75:9f:71:42:
f4:57:85:38:e3:32:e8:ae:47:4b:81:2d:6a:f7:4c:
59:29:83:7f:1f:a5:2b:b5:01:4c:54:4c:e4:f5:e1:
15:14:ec:17:71:58:be:03:16:d8:78:aa:54:67:d6:
b6:20:2d:bc:53:c5:70:ba:0c:6f:f5:be:a3:90:4d:
0f:68:33:a0:ea:71:e6:a9:f0:49:cf:2a:1e:a2:bf:
a9:8d:fd:0c:4b:1c:08:9b:cc:f3:79:01:75:41:5e:
0f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E0:B3:B2:45:44:C7:B1:6A:4F:57:EA:57:50:ED:1B:2E:AC:E3:FD
X509v3 Authority Key Identifier:
keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.144.0/22
IPv6:
2404:c680::/32
Signature Algorithm: sha256WithRSAEncryption
6e:da:16:22:74:b8:4d:8c:7c:cc:c6:3d:0c:c0:99:4b:f9:03:
ce:93:b7:65:b2:0c:3e:15:e3:47:1b:74:42:eb:86:63:75:e3:
ff:0a:74:6e:75:3f:29:71:33:e5:bf:73:39:ba:4c:02:bb:12:
78:4e:79:e7:0f:5b:2c:f1:be:77:0f:75:84:b9:3f:ed:46:c1:
78:80:f7:61:6a:83:63:72:ba:ce:fe:1f:bc:78:fb:4c:63:41:
ad:44:fe:2f:f7:84:4a:96:55:4b:05:89:61:dc:0f:89:35:f8:
dd:e8:ab:96:da:db:8f:1b:48:fb:40:d9:b4:07:6e:09:39:bd:
a8:41:1b:4e:fd:9b:86:e4:a9:fd:20:47:2f:a3:53:d9:02:e9:
b1:9c:69:f7:57:57:7f:1c:15:df:6a:6f:dd:95:e4:25:f2:88:
ed:15:7c:8a:a1:bb:50:0a:01:03:45:dd:d7:ff:f8:ff:05:35:
91:56:e2:4e:1b:a3:af:f3:1d:2f:22:6d:f7:34:17:81:ac:55:
0c:c3:2f:14:fd:6e:d2:ad:c2:f9:87:f8:38:49:1e:c9:c8:26:
a2:0a:23:94:42:c2:5f:e0:62:9a:2b:f5:2c:9e:2c:14:e6:e0:
e1:6a:b5:b7:c8:8e:88:67:8e:7b:6f:a8:9d:92:ec:28:cb:d2:
8a:d4:01:0e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICGlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODkyNjUxMTAvBgNVBAUTKEMzQkFEOEYwQTVEQTA1OEU5RjkyNTAzN0QwNEFBNzFD
OTI4QkExNzMwHhcNMjUwNTI2MTcwNjExWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDNhZS02MDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoV6TvIZBJsNh0pI3h2UIo66PeHF1hiRuDUJi2WBthbTkW6DaFZCXVajUL+Nr
K9/7YR5UI9J4vKUeRPAG9jEqcLBXuvxrlUX9zHtx6tR6amOu+2EAJwXSQmdYvIRv
08eTruvhN/Yd1fVUpNx6PVm4uVX9Mvo9IiKNWMU+bXuX/dCqtA+D8cEqYNGhQ4J6
ra4MroPFQJC/w2cP3+B2JdBk0XWfcUL0V4U44zLorkdLgS1q90xZKYN/H6UrtQFM
VEzk9eEVFOwXcVi+AxbYeKpUZ9a2IC28U8Vwugxv9b6jkE0PaDOg6nHmqfBJzyoe
or+pjf0MSxwIm8zzeQF1QV4PtwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFFvgs7JF
RMexak9X6ldQ7RsurOP9MB8GA1UdIwQYMBaAFMO62PCl2gWOn5JQN9BKpxySi6Fz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTI2NS9EOEI0QjYxRTYw
MjIxMUU3Qjk2RkMyNjRDNEY5QUUwMi93N3JZOEtYYUJZNmZrbEEzMEVxbkhKS0xv
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3c3clk4S1hhQlk2ZmtsQTMwRXFuSEpLTG9YTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODkyNjUvRDhCNEI2MUU2MDIyMTFFN0I5NkZDMjY0QzRGOUFFMDIvODg1REE3NjBB
QTg4MTFFNzk5MzQ4MzI5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ9aQMA0EAgACMAcDBQAkBMaAMA0GCSqGSIb3DQEBCwUAA4IBAQBu
2hYidLhNjHzMxj0MwJlL+QPOk7dlsgw+FeNHG3RC64ZjdeP/CnRudT8pcTPlv3M5
ukwCuxJ4TnnnD1ss8b53D3WEuT/tRsF4gPdhaoNjcrrO/h+8ePtMY0GtRP4v94RK
llVLBYlh3A+JNfjd6KuW2tuPG0j7QNm0B24JOb2oQRtO/ZuG5Kn9IEcvo1PZAumx
nGn3V1d/HBXfam/dleQl8ojtFXyKobtQCgEDRd3X//j/BTWRVuJOG6Ov8x0vIm33
NBeBrFUMwy8U/W7SrcL5h/g4SR7JyCaiCiOUQsJf4GKaK/UsniwU5uDharW3yI6I
Z457b6idkuwoy9KK1AEO
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:17 2026 by rpki-client