
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/F392CF9E53A311EAB1641213C4F9AE02.roa
File: F392CF9E53A311EAB1641213C4F9AE02.roa (raw, json)
Hash identifier: 1k0SJPjACBfzIbH57TXQkwU+M3+Vmt1T4vlm8sPZ+NY=
Subject key identifier: 16:93:77:9A:D7:69:51:77:87:82:6D:FF:D1:C4:43:D0:49:99:9F:23
Certificate issuer: /CN=A9196F73/serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Certificate serial: 0BBF
Authority key identifier: 89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/F392CF9E53A311EAB1641213C4F9AE02.roa
Signing time: Sat 12 Sep 2026 19:39:08 +0000
ROA not before: Sat 12 Sep 2026 19:39:08 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 14618
IP address blocks: 103.39.86.0/23 maxlen: 23
103.39.112.0/24 maxlen: 24
103.211.172.0/24 maxlen: 24
202.8.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3007 (0xbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196F73, serialNumber=89A31D44E94F1CC27850BBAC16C02C20AAB39CE5
Validity
Not Before: Sep 12 19:39:08 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa5aa5c-91a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:cb:7d:1e:09:42:16:ee:2f:46:73:92:11:
d5:ae:51:1b:c6:95:44:2b:ea:ef:b3:0d:66:63:77:
af:04:15:7e:32:bc:78:3b:74:65:54:16:3d:cd:a4:
69:63:89:a4:13:2b:aa:d6:98:96:90:45:b1:52:b6:
ec:29:c7:00:d0:f9:e8:4d:e5:ab:c1:1d:48:cb:55:
9e:83:db:1d:14:85:cd:ad:d6:06:ac:b9:eb:03:fe:
2c:ff:d8:de:81:58:63:ad:9b:81:dc:3a:3f:36:2a:
86:91:7c:ce:69:19:50:99:22:48:b3:4c:a1:58:a2:
a1:18:bc:bb:03:ea:9e:c2:e5:db:86:21:a3:4a:8a:
76:66:47:6e:ca:11:c1:58:e4:31:af:ef:1a:4f:a3:
c5:06:95:51:c5:ad:3f:91:b2:25:a7:5b:e3:48:19:
04:88:a6:d9:55:38:6a:23:f4:be:61:a2:e0:a5:e2:
5e:4a:b7:30:dc:87:77:c9:5a:11:0a:c0:54:2d:09:
95:45:ea:2a:99:ff:6e:17:30:0a:9e:03:59:5f:86:
be:28:94:e9:bf:2e:bc:69:b3:1a:de:62:29:20:83:
46:14:8d:ec:79:36:71:d7:29:63:29:f1:ef:b1:7a:
6e:97:f7:54:e2:1a:c7:49:26:0a:43:53:ce:7c:01:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:93:77:9A:D7:69:51:77:87:82:6D:FF:D1:C4:43:D0:49:99:9F:23
X509v3 Authority Key Identifier:
keyid:89:A3:1D:44:E9:4F:1C:C2:78:50:BB:AC:16:C0:2C:20:AA:B3:9C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/iaMdROlPHMJ4ULusFsAsIKqznOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaMdROlPHMJ4ULusFsAsIKqznOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196F73/A29707F653A111EAAEEEBE0BC4F9AE02/F392CF9E53A311EAB1641213C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.39.86.0/23
103.39.112.0/24
103.211.172.0/24
202.8.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4b:b7:d1:67:42:a7:95:d0:49:86:1b:82:7f:07:96:7b:5d:
d2:78:b6:33:c4:f1:4e:2e:9c:27:bc:c1:7f:fc:b2:ce:05:b3:
97:07:83:9b:b7:cf:57:56:6d:0c:2d:a7:a3:6c:e9:09:81:61:
dc:c2:c6:48:9b:ba:66:74:6f:5d:f0:ee:b0:91:e6:de:1b:66:
b3:8f:f5:9c:0c:39:6d:24:ce:4f:8c:82:66:90:cb:81:a5:21:
98:16:a3:53:23:53:1c:05:76:98:6e:5e:13:6a:01:53:7e:20:
f1:9b:34:2b:4f:a1:6e:7e:93:40:fd:6a:45:e5:39:7c:2c:4c:
4a:ef:3c:7f:16:22:fb:3f:37:27:16:b6:8a:3c:38:82:78:dc:
0c:9a:5d:eb:eb:69:87:12:6a:7d:b2:d1:46:1b:01:70:07:dc:
04:0d:59:0d:a6:1f:dc:b3:70:19:31:db:80:57:08:29:7e:bc:
6a:d4:af:35:51:15:45:32:27:3c:dc:09:ba:aa:61:04:ad:03:
14:37:27:0b:1d:ca:89:eb:b0:8f:00:5e:b9:e6:e9:88:12:0e:
7a:a1:f5:61:04:f7:37:c5:ec:6a:53:0e:07:6d:22:a5:dd:41:
be:a2:e1:3a:d1:8b:67:2e:06:88:bb:2c:17:1f:2d:c2:46:5e:
bb:91:cd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:33:43 2026 by rpki-client