
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa
File: 2601A296AE1011EE92B7161BC4F9AE02.roa (raw, json)
Hash identifier: sz0uu74tyXsJB7FzJbh1m/imR9Nn6OSFdYrjJNTee4g=
Subject key identifier: AA:63:72:01:10:A6:99:DA:7B:60:F9:06:C0:03:EA:AB:35:75:38:5E
Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Certificate serial: 020D
Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa
Signing time: Sat 03 Oct 2026 03:52:55 +0000
ROA not before: Sat 03 Oct 2026 03:52:55 +0000
ROA not after: Mon 01 Feb 2027 00:00:00 +0000
asID: 150721
IP address blocks: 103.68.234.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C
Validity
Not Before: Oct 3 03:52:55 2026 GMT
Not After : Feb 1 00:00:00 2027 GMT
Subject: CN=6ac07c16-359f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:81:f5:c4:aa:17:c0:8a:d5:20:1b:56:f4:
ce:c7:01:b6:17:c8:75:91:cb:9f:50:15:b9:92:b7:
89:be:e7:92:1d:11:3c:d2:b4:85:9e:b7:1a:16:48:
a0:90:18:ca:df:df:3a:db:8a:9b:c1:6c:a2:09:8d:
de:4c:f4:61:1e:1a:0e:01:07:3f:30:62:ef:a2:a0:
e6:83:25:80:ac:f3:e0:71:b4:e4:8f:68:75:93:8a:
05:81:6a:6e:ad:68:33:9c:4a:d8:e3:b7:da:17:78:
db:81:65:29:f5:19:47:93:f1:40:17:c9:52:71:a5:
1d:cb:60:34:e3:0b:da:4e:28:4c:a8:95:34:bb:f8:
fa:73:e3:2a:7e:62:d5:d7:ae:2f:13:5c:4b:39:20:
e7:fd:3b:3f:81:0c:52:47:1f:a9:9b:44:2f:1e:a1:
b6:65:d0:3b:8f:4d:7b:80:09:1c:a3:0c:48:c9:f4:
73:d0:7d:03:1d:c0:c6:03:eb:3d:f8:9f:37:92:fc:
76:05:c9:00:bd:77:a4:24:57:72:1a:6e:1f:12:b2:
59:dd:e6:0f:e5:bc:bc:44:59:f1:46:3b:e9:81:81:
0c:0b:53:86:4e:76:31:8e:27:ae:a7:f7:93:d5:1b:
09:db:22:87:c0:41:96:4d:f9:c7:97:99:8b:39:9f:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:63:72:01:10:A6:99:DA:7B:60:F9:06:C0:03:EA:AB:35:75:38:5E
X509v3 Authority Key Identifier:
keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/2601A296AE1011EE92B7161BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.68.234.0/23
Signature Algorithm: sha256WithRSAEncryption
17:3c:43:21:7c:b7:e2:ca:e1:db:d5:7a:53:11:8a:ac:3e:81:
26:7b:18:51:f8:00:9f:75:0e:2f:35:3c:d9:c2:a8:ab:c7:20:
8f:5c:fa:72:41:e1:82:04:22:a6:98:f9:37:1e:b4:4d:31:67:
10:27:4e:86:4d:1e:bb:da:59:6b:83:df:b6:0e:9e:f9:63:bd:
20:f9:7b:8f:97:8f:45:10:5d:74:75:c9:6c:cf:4b:b8:a3:26:
6f:7b:0e:22:6e:71:41:33:fb:e3:06:59:bd:7a:85:cc:fa:42:
63:ef:12:80:ab:94:45:48:b0:9a:91:28:a8:2b:25:61:13:c9:
36:a8:70:39:56:56:32:f7:23:5c:2d:36:b1:9d:c2:02:7f:1d:
c6:48:81:a5:1a:23:7e:5a:d7:1d:f7:a9:04:f2:89:65:88:64:
f8:af:ce:28:d5:43:f3:06:73:4b:3b:86:e6:28:1f:4d:43:98:
95:94:32:25:d3:e3:5e:0c:6f:11:d5:39:9d:aa:88:ef:9f:68:
88:12:08:79:a4:bd:d1:be:29:19:69:29:ec:5e:82:1d:c0:74:
7b:dc:fd:48:55:77:3e:fd:ad:57:0d:d8:e3:da:71:a8:a1:09:
49:09:cd:ab:4d:a2:80:0d:9c:0d:c6:d5:9d:78:d2:77:36:a5:
90:d6:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:54:04 2026 by rpki-client