
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa
File: F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa (raw, json)
Hash identifier: U79nl9/POZ6IByWvfViVqozLdRYE4Y1uQ/2gDT3FoXI=
Subject key identifier: 49:EC:73:77:FF:0C:C7:8E:3E:8E:55:C1:AC:D0:60:8A:E9:1B:1D:94
Certificate issuer: /CN=A9110AAB/serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Certificate serial: 0908
Authority key identifier: 00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa
Signing time: Tue 20 Oct 2026 20:39:29 +0000
ROA not before: Tue 20 Oct 2026 20:39:29 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 9930
IP address blocks: 103.243.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110AAB, serialNumber=005FAAAD2AE30E775256AFBBBB28B6249172ABE3
Validity
Not Before: Oct 20 20:39:29 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ad7d181-1d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:28:3d:7a:c5:e8:44:52:41:68:da:b8:d6:b3:
3c:27:a4:ed:c9:e6:77:0c:35:ff:3b:3f:7a:fe:ae:
bb:2c:1c:de:4a:b3:09:e4:b7:13:65:e2:56:08:81:
b0:77:4f:27:95:ad:78:8b:0a:15:c6:6c:fa:2a:1e:
0d:01:a1:de:0e:76:c3:a5:46:4a:67:8f:cb:a2:75:
4a:1f:59:03:7d:e0:2e:17:5d:db:4d:31:0d:02:1e:
8a:fe:68:d9:b0:55:6d:f6:cd:76:6d:03:1d:d5:da:
dc:da:02:51:21:15:3b:70:5a:9c:97:25:80:1c:d8:
f0:15:45:a5:a7:95:ea:d4:57:64:e8:23:70:23:0f:
5c:f2:a1:55:3c:68:a6:7e:3b:0e:3d:ee:af:fe:ac:
c6:88:2c:45:19:e0:d3:96:29:07:e0:a9:42:6b:04:
3b:38:a8:b5:16:69:5a:2e:d5:53:77:c5:50:a9:8d:
42:ab:f8:22:50:0f:03:82:66:b7:50:f2:8f:5a:fb:
9e:a0:ae:af:4b:c2:13:ec:8c:4c:03:e9:42:6f:70:
0a:61:fa:2e:e9:cc:37:c0:fb:6b:d2:3c:f3:47:2d:
a0:4f:1d:e2:15:01:ec:b6:54:ed:18:76:35:65:a6:
c2:ff:0a:db:d0:1d:83:29:e2:1a:20:1e:20:d2:61:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EC:73:77:FF:0C:C7:8E:3E:8E:55:C1:AC:D0:60:8A:E9:1B:1D:94
X509v3 Authority Key Identifier:
keyid:00:5F:AA:AD:2A:E3:0E:77:52:56:AF:BB:BB:28:B6:24:91:72:AB:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/AF-qrSrjDndSVq-7uyi2JJFyq-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AF-qrSrjDndSVq-7uyi2JJFyq-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110AAB/05EE1794E38B11EA88126B5CC4F9AE02/F9C736E8E38B11EAA4DDEC5FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.243.156.0/22
Signature Algorithm: sha256WithRSAEncryption
80:55:ba:c3:09:21:3f:bc:b7:5c:e1:93:fc:41:ba:3b:3d:83:
9b:3c:6c:57:12:32:ec:73:aa:ca:59:a6:08:60:9b:83:4c:32:
6a:fb:00:3f:ab:95:ea:4f:39:f7:76:9d:0c:e6:2e:de:e6:59:
4c:28:8a:92:11:60:8d:3f:80:0e:72:89:60:97:cd:dd:af:b6:
28:37:b7:de:ce:bc:e8:92:c3:62:30:95:fa:e4:7e:3f:0d:89:
da:68:eb:4f:1e:d9:fb:49:e5:b5:a7:1c:01:a9:07:5a:ac:e4:
84:fb:85:6a:2d:45:55:78:f7:a1:53:ae:28:f5:b6:61:b4:cd:
98:a5:a5:91:32:46:f0:98:08:08:ef:e0:e8:64:3f:1e:24:a2:
97:4e:6c:88:cc:9d:5d:1f:82:89:f7:a3:b9:ec:aa:1b:1c:22:
bb:46:0b:34:50:b4:a0:d0:ca:a6:4d:e6:68:70:21:c7:61:b3:
3b:20:d6:98:a4:13:e3:0c:ab:cc:9c:5a:c2:0f:63:2a:5e:26:
e7:54:77:bf:96:4a:77:12:9c:78:a1:e0:8e:97:95:b4:1b:43:
4b:9d:40:6f:7e:dd:b2:35:a8:28:06:81:53:1e:86:ad:57:00:
e1:b9:7d:1b:42:f2:f9:b0:d2:c2:58:5d:87:d5:27:68:c8:fa:
94:1a:06:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:28:26 2026 by rpki-client