
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/2475821008E611EDA969EC24C4F9AE02.roa
File: 2475821008E611EDA969EC24C4F9AE02.roa (raw, json)
Hash identifier: RVg2h7hOH2w99l5JLC3wkh/gist/wN6AmqKxVj6qbAU=
Subject key identifier: 2F:C5:08:AB:23:B0:FC:1C:14:3C:3C:0B:62:1F:61:E6:99:30:D6:70
Certificate issuer: /CN=A9192B60/serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
Certificate serial: 031E
Authority key identifier: 13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/2475821008E611EDA969EC24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:03:57 +0000
ROA not before: Sat 09 Aug 2025 02:08:50 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 140267
IP address blocks: 103.191.158.0/24 maxlen: 24
103.191.159.0/24 maxlen: 24
2001:df1:540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl
rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:20:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 798 (0x31e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192B60, serialNumber=13E1899C23FEB07FE13162EB103CC3C038D70824
Validity
Not Before: Aug 9 02:08:50 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a400fd-9df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:f1:10:e3:6b:b2:a2:30:8c:a3:f4:95:ce:
d1:bf:a5:ba:7e:36:28:33:31:7f:d9:5e:5f:27:e0:
92:d8:6e:38:0a:d2:98:09:21:53:5c:e6:6c:95:c2:
e6:02:f7:35:c4:66:06:1a:12:6e:90:a8:74:d5:4b:
5d:e4:fe:fd:f5:c3:14:40:4b:93:88:10:f7:11:d1:
81:0f:02:5f:94:a4:36:ec:4b:e9:0e:8f:c9:f3:13:
10:dd:2c:5e:09:fd:0f:3e:48:ed:c9:34:3c:ca:79:
3a:93:30:aa:d7:eb:d0:90:42:0f:94:ba:94:52:c3:
eb:13:ff:49:c3:4e:aa:61:f3:a4:69:e1:ab:3b:4f:
d3:ff:ea:c8:1f:1e:5a:83:43:0b:43:9b:56:14:1a:
c2:48:0b:5c:0c:45:de:18:fb:fb:d7:1b:d3:43:64:
53:60:86:63:7d:c2:40:38:ab:f2:f3:98:77:e9:b8:
ea:4d:d9:ca:a3:b6:c0:49:77:5a:16:5c:fb:49:c5:
1f:53:98:26:df:d4:76:15:9c:14:1f:34:06:91:3e:
f9:20:c7:b2:1a:a6:a8:a6:9d:89:19:f0:b8:bf:f2:
35:8d:8e:71:db:35:ed:37:59:b9:f7:ee:b3:5b:30:
0c:13:c2:a7:49:4b:dc:62:59:4b:d7:98:d9:65:7a:
99:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C5:08:AB:23:B0:FC:1C:14:3C:3C:0B:62:1F:61:E6:99:30:D6:70
X509v3 Authority Key Identifier:
keyid:13:E1:89:9C:23:FE:B0:7F:E1:31:62:EB:10:3C:C3:C0:38:D7:08:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E-GJnCP-sH_hMWLrEDzDwDjXCCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B60/B32F3E7208E311ED83640C21C4F9AE02/2475821008E611EDA969EC24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.191.158.0/23
IPv6:
2001:df1:540::/48
Signature Algorithm: sha256WithRSAEncryption
1b:24:cd:41:04:3f:cf:92:7e:1e:c6:c9:72:14:a7:6a:94:ac:
db:5b:81:79:73:fc:4f:2e:1d:2f:b8:98:fb:de:59:9f:ff:02:
1c:54:b6:e4:a4:1c:34:a7:d5:cb:e6:c3:4d:f3:58:47:51:fa:
62:0f:9f:45:0f:83:2a:fe:9e:18:b6:45:cf:15:62:a8:8f:4a:
1e:55:0c:09:37:0b:d4:a5:56:96:fe:ca:f3:fe:c1:69:aa:b3:
44:fe:a7:28:29:43:9c:17:15:d6:9b:0a:18:c7:07:8b:7a:af:
61:99:5f:51:ed:2b:62:90:09:99:c7:ca:e3:ef:6f:c8:77:b5:
13:f1:64:a6:f7:2d:a3:16:45:c3:e1:53:25:3b:f0:09:09:a1:
19:d1:f2:1b:cb:ce:21:60:8d:12:bc:52:7a:3a:18:56:56:2f:
85:b0:d6:68:f8:8e:2f:4f:0e:f9:c1:a7:0e:e6:04:33:d2:d8:
55:fc:85:26:35:e3:cd:3a:c0:45:a8:d5:65:93:ad:2a:44:0c:
3f:f5:2b:44:2c:10:c3:e5:0e:76:64:24:4c:71:c5:7a:39:5b:
86:fa:13:fa:ba:37:fc:24:d0:47:97:ad:7d:c1:61:87:62:06:
5f:11:0f:16:8c:00:c2:f1:fd:2f:8b:45:29:0b:ef:a1:6a:64:
fa:b5:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:20 2026 by rpki-client