
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/209BA8B682DF11EAABBC5018C4F9AE02.roa
File: 209BA8B682DF11EAABBC5018C4F9AE02.roa (raw, json)
Hash identifier: F4jan19ZO2wXRROpblsd7HlwIXIUGMlPcZO16eAzRtQ=
Subject key identifier: A6:C1:70:E2:F3:76:EC:07:32:B6:2E:D5:A0:F8:FF:C9:D0:07:8E:00
Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Certificate serial: 0AB1
Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/209BA8B682DF11EAABBC5018C4F9AE02.roa
Signing time: Fri 31 Jul 2026 20:39:32 +0000
ROA not before: Fri 31 Jul 2026 20:39:32 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 135433
IP address blocks: 45.250.240.0/22 maxlen: 22
45.250.240.0/24 maxlen: 24
45.250.241.0/24 maxlen: 24
45.250.242.0/24 maxlen: 24
45.250.243.0/24 maxlen: 24
103.219.156.0/22 maxlen: 22
103.219.156.0/24 maxlen: 24
103.219.157.0/24 maxlen: 24
103.219.158.0/24 maxlen: 24
103.219.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 19:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2737 (0xab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Validity
Not Before: Jul 31 20:39:32 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6d0804-1913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:a8:db:36:05:29:99:6d:87:f8:90:03:28:
af:c6:d8:80:65:18:31:7d:3c:86:5f:7a:74:46:88:
cd:c0:35:07:b2:08:0b:74:2e:8b:04:7d:e1:be:9b:
98:46:06:59:d4:44:0a:8a:53:cd:ac:74:9b:6c:e0:
8d:1a:16:2c:72:b5:e4:a0:cd:10:d5:6a:98:7e:0f:
f9:15:1d:bc:1b:43:44:2a:b3:16:3d:73:24:fe:07:
1e:df:dc:e5:42:e5:4e:12:2c:c5:a2:25:cb:36:c4:
3f:34:cb:43:f1:1d:0c:89:92:58:12:38:4c:90:fb:
62:a2:06:23:4b:13:93:4a:1a:74:d5:5a:4e:a2:0a:
f8:c1:cf:c4:94:c9:de:64:3f:f7:67:c7:4f:70:36:
8b:c7:a3:a9:5a:8b:3a:c0:12:ae:72:2f:35:ff:c3:
6f:4b:5c:bc:0b:ae:ae:dd:3c:1a:4c:d1:c4:67:96:
cd:67:43:65:a4:7d:41:27:e3:ae:56:79:3d:25:fe:
48:01:34:a1:d4:20:b8:17:6e:32:1a:83:81:87:85:
e4:7e:4b:d3:af:49:3a:18:50:f2:4c:0f:0e:a9:5e:
5b:0e:79:52:cc:66:d9:07:16:dc:b2:b0:51:ba:40:
e8:01:27:6f:df:0a:fe:06:99:09:76:cb:d2:62:a4:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:70:E2:F3:76:EC:07:32:B6:2E:D5:A0:F8:FF:C9:D0:07:8E:00
X509v3 Authority Key Identifier:
keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/209BA8B682DF11EAABBC5018C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.250.240.0/22
103.219.156.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c9:48:1d:7e:74:8e:de:63:a5:f5:c0:9e:fe:c9:88:84:49:
d9:a5:2d:17:3d:e9:9f:fc:c9:e4:5f:70:bc:38:86:76:84:e3:
6b:8e:84:73:9d:36:e6:ca:65:51:6e:3b:25:27:9d:7b:f9:5d:
15:a9:fe:0f:e2:62:bb:07:ad:a3:7f:5c:4e:f4:ff:05:bb:1c:
b5:b9:f4:ea:2e:30:c9:2c:9a:a4:9e:ab:24:44:d2:74:02:49:
4e:b1:ec:e0:dd:90:fb:cf:0c:3c:5d:e4:45:00:b3:73:06:09:
89:86:c9:c0:c1:83:0f:be:a0:45:c4:53:09:34:be:58:99:04:
f1:32:bb:0b:7b:ff:1b:88:f7:00:ab:81:8e:6f:36:b6:34:76:
cc:09:b3:f3:18:45:bd:cf:fd:89:76:23:26:a4:c0:cf:3f:5d:
2e:f8:69:79:d9:61:60:b9:97:9e:02:42:b8:03:1c:c1:c4:b9:
70:63:12:a4:d4:53:f8:59:a5:66:9e:62:3d:5c:2e:37:42:e0:
0f:79:cf:c4:4f:84:1b:3d:f7:0a:28:ae:c8:ec:e2:ae:73:fd:
e0:2b:3d:82:71:28:14:5d:e7:0d:c4:c7:e3:d3:bd:5a:52:10:
f5:35:30:67:eb:9b:90:8b:fb:99:8a:77:e4:7f:84:93:5d:a2:
65:7f:8d:b4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ5MjYxMTAvBgNVBAUTKEU2NzFCQ0IyQkU5NUE2Qzg4NTI3MTIxRDg4MTVFOEJD
RjE4QUExRTIwHhcNMjYwNzMxMjAzOTMyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkMDgwNC0xOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxEKo2zYFKZlth/iQAyivxtiAZRgxfTyGX3p0RojNwDUHsggLdC6LBH3hvpuY
RgZZ1EQKilPNrHSbbOCNGhYscrXkoM0Q1WqYfg/5FR28G0NEKrMWPXMk/gce39zl
QuVOEizFoiXLNsQ/NMtD8R0MiZJYEjhMkPtiogYjSxOTShp01VpOogr4wc/ElMne
ZD/3Z8dPcDaLx6OpWos6wBKuci81/8NvS1y8C66u3TwaTNHEZ5bNZ0NlpH1BJ+Ou
Vnk9Jf5IATSh1CC4F24yGoOBh4XkfkvTr0k6GFDyTA8OqV5bDnlSzGbZBxbcsrBR
ukDoASdv3wr+BpkJdsvSYqSxfQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKbBcOLz
duwHMrYu1aD4/8nQB44AMB8GA1UdIwQYMBaAFOZxvLK+labIhScSHYgV6LzxiqHi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDkyNi9CMzg1NzhDNDgy
RDkxMUVBQjlGQ0QyODVDNEY5QUUwMi81bkc4c3I2VnBzaUZKeElkaUJYb3ZQR0tv
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVuRzhzcjZWcHNpRkp4SWRpQlhvdlBHS29lSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjQ5MjYvQjM4NTc4QzQ4MkQ5MTFFQUI5RkNEMjg1QzRGOUFFMDIvMjA5QkE4QjY4
MkRGMTFFQUFCQkM1MDE4QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLfrwAwQCZ9ucMA0GCSqGSIb3DQEBCwUAA4IBAQAFyUgdfnSO3mOl
9cCe/smIhEnZpS0XPemf/MnkX3C8OIZ2hONrjoRznTbmymVRbjslJ517+V0Vqf4P
4mK7B62jf1xO9P8Fuxy1ufTqLjDJLJqknqskRNJ0AklOsezg3ZD7zww8XeRFALNz
BgmJhsnAwYMPvqBFxFMJNL5YmQTxMrsLe/8biPcAq4GObza2NHbMCbPzGEW9z/2J
diMmpMDPP10u+Gl52WFguZeeAkK4AxzBxLlwYxKk1FP4WaVmnmI9XC43QuAPec/E
T4QbPfcKKK7I7OKuc/3gKz2CcSgUXecNxMfj071aUhD1NTBn65uQi/uZinfkf4ST
XaJlf420
-----END CERTIFICATE-----
Generated at Tue Oct 6 00:58:06 2026 by rpki-client