
$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E9C8882E2B211E9B2944855C4F9AE02.roa
File: 6E9C8882E2B211E9B2944855C4F9AE02.roa (raw, json)
Hash identifier: hSHDKM9KQUXhHi7c/TM/bMOw3L9ZF0laC7/q7qjxH0U=
Subject key identifier: 0D:08:7E:C0:B6:17:04:BB:D9:A5:59:EB:5B:DC:34:DF:11:79:AA:91
Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Certificate serial: 0D9E
Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E9C8882E2B211E9B2944855C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:18:02 +0000
ROA not before: Thu 10 Apr 2025 18:27:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137967
IP address blocks: 103.113.148.0/23 maxlen: 23
103.113.148.0/24 maxlen: 24
103.113.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:11:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3486 (0xd9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C
Validity
Not Before: Apr 10 18:27:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42e7a-6fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:09:21:95:03:27:03:b3:66:f2:e5:ba:bc:
6c:00:ad:c4:82:00:5a:65:3e:d1:59:19:86:dc:e4:
2e:92:3d:73:48:5e:d8:54:fe:e4:13:5d:13:36:bf:
25:1a:4b:b8:90:0b:d3:e9:03:14:21:a3:b9:14:ac:
6c:4a:c9:9c:47:5c:bb:f0:13:2c:60:29:27:38:0b:
b0:df:4b:e1:fb:b8:31:e5:f6:b3:8d:66:4f:40:b8:
20:7b:c5:2b:62:4a:d9:58:c6:31:90:d8:d1:37:67:
79:f1:31:a4:c0:7e:78:d1:41:0f:99:dc:e1:11:a1:
34:d0:28:dd:1e:06:06:a3:d4:22:18:93:a4:c2:48:
f1:e8:6a:06:60:aa:93:9f:95:c3:de:66:fc:39:5f:
fa:ac:4c:77:7c:6b:76:02:cc:d8:10:43:24:7c:fd:
33:39:fd:77:83:7e:3d:76:48:f1:b8:6b:ee:a0:85:
66:95:20:be:f1:85:89:ca:73:db:af:aa:2c:e3:23:
fb:f5:4e:03:e6:b8:d6:52:15:de:86:a0:72:5f:a3:
12:f2:83:1e:41:ca:48:4f:42:e7:bf:11:35:0e:a6:
b0:cf:e2:1a:fc:b3:23:4c:18:2a:02:54:6d:cc:63:
44:11:3d:4e:c5:7f:b5:e2:51:85:7a:4b:f0:bd:ff:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:08:7E:C0:B6:17:04:BB:D9:A5:59:EB:5B:DC:34:DF:11:79:AA:91
X509v3 Authority Key Identifier:
keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/6E9C8882E2B211E9B2944855C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.148.0/23
Signature Algorithm: sha256WithRSAEncryption
07:1d:42:56:2f:78:a0:3e:bc:30:24:6c:12:d5:1b:3e:2e:fd:
b8:a6:1d:d6:15:a7:f2:2a:48:4d:5d:bd:bf:fe:57:2d:ed:c5:
32:27:cb:70:a9:b1:11:50:9a:8f:60:4d:9f:8a:4f:b8:8c:71:
1d:93:25:d6:38:a8:e0:3b:00:fe:54:6b:91:69:e4:db:7e:c3:
73:33:fe:28:15:50:0c:6d:b0:cb:09:f2:44:50:e7:28:f8:73:
7c:1a:38:62:6c:c1:a9:ef:de:af:0f:86:ac:fb:81:be:eb:4b:
c0:a4:7b:c2:80:89:ba:cb:57:42:8a:ff:be:77:92:9e:07:46:
f6:cc:a3:82:b5:6d:69:fb:f8:3c:ef:bd:74:4c:31:4f:f0:d2:
3e:bd:5a:b3:32:04:56:01:30:e7:93:eb:73:2e:f6:0a:73:fd:
aa:ee:fc:d4:66:84:e2:d6:ba:8c:61:18:2d:f3:c3:8a:38:3d:
d7:c5:c2:79:e5:11:a7:0b:ac:21:c4:30:84:b3:3b:28:9d:2b:
4c:0b:93:19:c6:20:2e:a8:cf:71:00:3f:99:5d:e9:92:16:ac:
80:99:b1:54:e7:99:d1:59:01:01:31:3e:9a:ad:02:6b:db:37:
7f:64:d9:47:fc:c5:7a:52:bc:d4:e6:61:f8:9e:5f:08:a7:5d:
71:58:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:43 2026 by rpki-client