
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa
File: EF1B381EF93911ECBD1E663DC4F9AE02.roa (raw, json)
Hash identifier: zMxGyE5l+wN63Ue+f2QHW8frHPvryEu4lFcEqxA7DAk=
Subject key identifier: DC:FC:9B:82:0A:39:63:93:FB:4A:5B:DF:EA:AD:3B:CA:2A:61:12:8F
Certificate issuer: /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial: 0372
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa
Signing time: Fri 05 Jun 2026 01:31:04 +0000
ROA not before: Fri 05 Jun 2026 01:31:04 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 142017
IP address blocks: 103.187.104.0/24 maxlen: 24
2001:df0:cdc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 882 (0x372)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Validity
Not Before: Jun 5 01:31:04 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a2226d7-cd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f5:19:59:6d:da:0d:30:bd:60:c7:95:04:86:
dd:86:0c:81:6e:8e:e1:5d:54:21:4d:c7:a5:fd:f4:
b5:b7:da:44:f2:c3:58:42:01:15:76:c5:5c:4b:52:
89:d1:3b:1f:a8:74:cc:ff:36:67:21:71:04:ee:a0:
a9:9f:c0:03:6f:c8:0c:3f:3e:ec:5c:76:40:f1:44:
31:fc:1e:84:39:62:59:20:89:d2:dd:74:81:86:61:
09:6e:6f:37:69:d5:e1:d8:a4:91:c7:1f:f9:ae:63:
d0:0b:01:a4:6e:b3:88:6c:e0:d5:54:a3:43:0b:d6:
f1:bb:10:d0:e4:e1:53:61:7a:16:bc:ff:42:7f:d5:
c4:6a:9b:f8:7c:fa:71:c5:ad:07:0f:b3:40:30:db:
bf:2d:4f:80:41:d3:f2:82:a0:c7:5d:5c:9d:18:69:
23:53:2a:39:38:35:6c:07:78:b1:5c:85:1f:d0:ea:
ce:37:6f:69:bd:ca:00:5e:28:23:4a:b5:16:64:b8:
0a:74:24:f8:86:26:8c:d7:df:d5:90:8d:bf:e2:ad:
70:93:88:db:bc:cd:5f:4b:dd:9d:45:3c:ca:af:d1:
25:40:ab:c9:8f:49:cf:e1:30:56:f2:9c:06:52:82:
5c:4b:0f:93:9d:0c:34:a1:3c:49:6f:08:c9:1f:38:
98:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:9B:82:0A:39:63:93:FB:4A:5B:DF:EA:AD:3B:CA:2A:61:12:8F
X509v3 Authority Key Identifier:
keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.187.104.0/24
IPv6:
2001:df0:cdc0::/48
Signature Algorithm: sha256WithRSAEncryption
3a:da:2f:9b:61:f3:d2:5f:f4:32:b9:14:66:dc:07:30:cf:21:
ae:9c:79:5d:01:ae:d9:7e:1c:9d:c9:88:23:f6:80:55:81:52:
b8:41:83:a8:2d:cb:32:44:9f:3f:94:aa:3d:16:89:1c:b1:5f:
e9:c3:b8:6a:d7:06:b4:24:99:20:f3:86:31:4d:f6:35:fc:5e:
22:0f:b4:b5:ca:41:49:51:3a:99:48:a8:16:85:49:c6:5f:f5:
98:95:24:c2:dc:57:55:45:f6:7c:a5:e0:14:ec:0c:69:31:b7:
59:9b:81:04:77:61:3d:3b:a0:ff:32:24:71:66:90:9e:be:fd:
11:c2:9b:d2:09:01:6c:d5:fe:50:a7:13:6e:2a:7c:ae:6d:41:
7a:56:21:d7:96:5a:21:eb:58:ce:b0:c0:c1:ca:26:dd:6c:a5:
6b:45:c5:a2:64:0b:d4:72:8b:99:67:e6:f9:e1:45:8d:4d:c9:
c5:a3:8e:15:0a:cc:ff:ea:1c:41:a1:1f:49:01:5e:04:92:21:
b3:d7:37:6d:d9:f7:b2:c4:35:8c:b9:8d:f2:c9:32:f1:c0:11:
b1:dc:61:de:61:bc:ae:34:5f:dc:d5:41:78:5c:a9:5e:13:9d:
88:d9:d0:3a:9d:86:41:e2:6c:9f:ef:dd:f0:ae:6a:f5:d1:28:
8b:34:87:d4
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTlCODUxMTAvBgNVBAUTKDZBNEZDQjE4Q0REOEVGNDFEMjMzMjEzOUVFNjJFOEZE
MjczQjZGREYwHhcNMjYwNjA1MDEzMTA0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyMjZkNy1jZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8fUZWW3aDTC9YMeVBIbdhgyBbo7hXVQhTcel/fS1t9pE8sNYQgEVdsVcS1KJ
0TsfqHTM/zZnIXEE7qCpn8ADb8gMPz7sXHZA8UQx/B6EOWJZIInS3XSBhmEJbm83
adXh2KSRxx/5rmPQCwGkbrOIbODVVKNDC9bxuxDQ5OFTYXoWvP9Cf9XEapv4fPpx
xa0HD7NAMNu/LU+AQdPygqDHXVydGGkjUyo5ODVsB3ixXIUf0OrON29pvcoAXigj
SrUWZLgKdCT4hiaM19/VkI2/4q1wk4jbvM1fS92dRTzKr9ElQKvJj0nP4TBW8pwG
UoJcSw+TnQw0oTxJbwjJHziYhwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNz8m4IK
OWOT+0pb3+qtO8oqYRKPMB8GA1UdIwQYMBaAFGpPyxjN2O9B0jMhOe5i6P0nO2/f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUI4NS9DMjRDNzIwQ0Y5
MzUxMUVDOTMxRkRCODJDNEY5QUUwMi9ha19MR00zWTcwSFNNeUU1N21Mb19TYzdi
OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FrX0xHTTNZNzBIU015RTU3bUxvX1NjN2I5OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTlCODUvQzI0QzcyMENGOTM1MTFFQzkzMUZEQjgyQzRGOUFFMDIvRUYxQjM4MUVG
OTM5MTFFQ0JEMUU2NjNEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ7toMA8EAgACMAkDBwAgAQ3wzcAwDQYJKoZIhvcNAQELBQADggEB
ADraL5th89Jf9DK5FGbcBzDPIa6ceV0Brtl+HJ3JiCP2gFWBUrhBg6gtyzJEnz+U
qj0WiRyxX+nDuGrXBrQkmSDzhjFN9jX8XiIPtLXKQUlROplIqBaFScZf9ZiVJMLc
V1VF9nyl4BTsDGkxt1mbgQR3YT07oP8yJHFmkJ6+/RHCm9IJAWzV/lCnE24qfK5t
QXpWIdeWWiHrWM6wwMHKJt1spWtFxaJkC9Ryi5ln5vnhRY1NycWjjhUKzP/qHEGh
H0kBXgSSIbPXN23Z97LENYy5jfLJMvHAEbHcYd5hvK40X9zVQXhcqV4TnYjZ0Dqd
hkHibJ/v3fCuavXRKIs0h9Q=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:47 2026 by rpki-client