
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa
File: F9EE01A842E211F1B650BCD08E833773.roa (raw, json)
Hash identifier: k3W5LhVCwW7y1SCmE8HXWFyviI573wKItGciWn2x3E0=
Subject key identifier: BB:BC:3C:B9:C5:AB:81:73:B9:7B:2D:6C:07:8B:44:2A:B6:56:AF:89
Certificate issuer: /CN=A911933B/serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Certificate serial: 0224
Authority key identifier: 86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa
Signing time: Thu 01 Oct 2026 03:52:47 +0000
ROA not before: Thu 01 Oct 2026 03:52:47 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 137975
IP address blocks: 103.119.25.0/24 maxlen: 24
103.119.26.0/24 maxlen: 24
103.119.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911933B, serialNumber=86DA1900E6150CBD9CD815AC67DC53A5E6D3C027
Validity
Not Before: Oct 1 03:52:47 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6abdd90f-4e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:76:2a:f3:e1:f2:ab:c7:11:45:c3:16:a1:
e7:cf:6f:0f:ff:53:c7:ef:b2:44:46:2a:1b:56:2e:
1e:c2:ff:9d:d5:28:dd:8b:aa:81:c4:85:92:dd:08:
85:05:ac:57:28:27:29:7f:41:1f:37:e8:91:30:02:
89:44:e6:48:e7:49:e2:e7:c0:e2:0d:e1:35:d7:d5:
2f:bb:70:87:8a:32:59:2d:ec:b6:7b:07:7d:c3:7d:
00:43:d0:61:5f:f4:42:95:42:66:6a:8e:b8:1e:e3:
40:55:2e:bf:1a:2d:07:69:39:4e:3e:b1:4a:5c:cd:
f8:76:b7:ca:0d:6b:e3:18:c0:37:4b:ef:66:13:72:
eb:9c:74:99:af:82:17:83:d8:f8:48:e1:d8:e1:32:
79:5e:b3:d2:2f:ac:16:aa:7a:e7:5a:14:64:75:ac:
c9:01:9b:f8:a3:09:fe:31:09:01:4c:e3:2e:cd:c5:
4b:96:4e:59:b9:27:9b:84:2f:36:91:ff:0f:35:d2:
98:68:e1:10:f5:b6:0b:42:95:d7:19:83:7b:50:ad:
c9:88:dd:d3:71:39:e9:4b:ba:dd:27:a9:38:13:95:
23:b7:1e:b2:ee:af:59:b2:96:2a:03:21:70:fd:8c:
41:2f:ba:2c:6e:39:17:fe:ea:d3:bd:e6:a2:f7:18:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:3C:B9:C5:AB:81:73:B9:7B:2D:6C:07:8B:44:2A:B6:56:AF:89
X509v3 Authority Key Identifier:
keyid:86:DA:19:00:E6:15:0C:BD:9C:D8:15:AC:67:DC:53:A5:E6:D3:C0:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/htoZAOYVDL2c2BWsZ9xTpebTwCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/htoZAOYVDL2c2BWsZ9xTpebTwCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911933B/E98A113E926411EE9947DA5BC4F9AE02/F9EE01A842E211F1B650BCD08E833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.119.25.0-103.119.27.255
Signature Algorithm: sha256WithRSAEncryption
92:fe:7f:7f:0e:43:aa:bd:c4:2f:39:fe:c2:62:57:f9:68:35:
73:54:a3:03:fa:23:47:45:45:89:29:db:a3:4f:74:b1:84:75:
e7:48:61:c0:39:91:2e:fe:7f:aa:89:73:ff:0b:41:75:3c:b0:
f4:79:36:34:88:d3:4c:67:31:e3:80:0a:74:aa:46:97:8e:68:
d2:56:7c:f5:b4:e0:6c:b3:59:ba:72:30:21:91:27:7a:ab:15:
9c:e2:94:5d:37:81:d9:30:96:02:2b:e9:58:ca:19:09:ec:e1:
18:fc:64:c6:f6:5e:f7:a5:6f:f5:de:57:97:e0:e2:5a:38:a8:
ea:e1:2f:89:32:2d:f7:14:5a:20:4b:d5:0b:ae:48:dd:91:37:
10:10:b1:93:57:68:fb:f4:3f:aa:68:3e:c3:61:f2:64:00:21:
a2:d2:30:99:67:a6:b9:bd:db:46:81:45:79:11:04:e9:62:88:
d3:53:a2:e1:07:b3:8e:93:25:eb:52:86:a7:05:5a:7b:bc:27:
26:7b:0f:7a:01:6c:c6:a6:fe:62:a1:67:87:cf:60:e4:66:cb:
96:f8:92:2e:06:3d:a7:55:b7:ea:a4:bc:e5:87:1b:7e:e4:5b:
54:e2:16:07:b9:3c:96:21:71:c0:6c:d3:d7:68:7b:f7:82:7b:
b3:18:47:1a
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzM0IxMTAvBgNVBAUTKDg2REExOTAwRTYxNTBDQkQ5Q0Q4MTVBQzY3REM1M0E1
RTZEM0MwMjcwHhcNMjYxMDAxMDM1MjQ3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkZDkwZi00ZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjjx2KvPh8qvHEUXDFqHnz28P/1PH77JERiobVi4ewv+d1Sjdi6qBxIWS3QiF
BaxXKCcpf0EfN+iRMAKJROZI50ni58DiDeE119Uvu3CHijJZLey2ewd9w30AQ9Bh
X/RClUJmao64HuNAVS6/Gi0HaTlOPrFKXM34drfKDWvjGMA3S+9mE3LrnHSZr4IX
g9j4SOHY4TJ5XrPSL6wWqnrnWhRkdazJAZv4own+MQkBTOMuzcVLlk5ZuSebhC82
kf8PNdKYaOEQ9bYLQpXXGYN7UK3JiN3TcTnpS7rdJ6k4E5Ujtx6y7q9ZspYqAyFw
/YxBL7osbjkX/urTveai9xg2HwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFLu8PLnF
q4FzuXstbAeLRCq2Vq+JMB8GA1UdIwQYMBaAFIbaGQDmFQy9nNgVrGfcU6Xm08An
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTMzQi9FOThBMTEzRTky
NjQxMUVFOTk0N0RBNUJDNEY5QUUwMi9odG9aQU9ZVkRMMmMyQldzWjl4VHBlYlR3
Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h0b1pBT1lWREwyYzJCV3NaOXhUcGViVHdDYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTkzM0IvRTk4QTExM0U5MjY0MTFFRTk5NDdEQTVCQzRGOUFFMDIvRjlFRTAxQTg0
MkUyMTFGMUI2NTBCQ0QwOEU4MzM3NzMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABndxkDBAJndxgwDQYJKoZIhvcNAQELBQADggEBAJL+f38OQ6q9
xC85/sJiV/loNXNUowP6I0dFRYkp26NPdLGEdedIYcA5kS7+f6qJc/8LQXU8sPR5
NjSI00xnMeOACnSqRpeOaNJWfPW04GyzWbpyMCGRJ3qrFZzilF03gdkwlgIr6VjK
GQns4Rj8ZMb2Xvelb/XeV5fg4lo4qOrhL4kyLfcUWiBL1QuuSN2RNxAQsZNXaPv0
P6poPsNh8mQAIaLSMJlnprm920aBRXkRBOliiNNTouEHs46TJetShqcFWnu8JyZ7
D3oBbMam/mKhZ4fPYORmy5b4ki4GPadVt+qkvOWHG37kW1TiFge5PJYhccBs09do
e/eCe7MYRxo=
-----END CERTIFICATE-----
Generated at Tue Oct 6 09:25:02 2026 by rpki-client