
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/6D64CF867A7911F1BAE44E8A93A30FBC.roa
File: 6D64CF867A7911F1BAE44E8A93A30FBC.roa (raw, json)
Hash identifier: zFmiSlbbBCKEFvwjSsTrCiZSphB84QphTxQ1AkMFJbA=
Subject key identifier: 94:C1:CF:0E:3E:D3:EE:83:60:DE:2D:64:F9:55:78:9A:1C:77:3B:8E
Certificate issuer: /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial: 022B
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/6D64CF867A7911F1BAE44E8A93A30FBC.roa
Signing time: Wed 08 Jul 2026 03:02:17 +0000
ROA not before: Wed 08 Jul 2026 03:02:17 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 398704
IP address blocks: 103.158.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 03:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 555 (0x22b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Validity
Not Before: Jul 8 03:02:17 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a4dbdb9-a872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:f5:bf:92:8c:84:36:21:a8:2a:8c:77:93:
4c:ac:96:2d:8f:10:f7:ae:36:7f:ba:8b:d5:4e:ba:
e6:93:e4:35:2f:ac:3d:a1:f7:49:93:35:49:8a:df:
e5:2b:b3:1d:88:d8:99:00:cf:7e:8b:d7:79:a6:57:
b4:4e:11:26:44:bf:eb:f1:5c:f0:db:77:3d:e8:0c:
45:ae:b5:67:f9:b6:7c:5c:3b:2a:2c:d6:64:2e:75:
c9:cb:a2:5b:13:35:52:0d:76:3e:c8:ae:b8:8c:64:
5e:a7:ca:99:ab:50:52:c8:2e:22:73:a5:94:91:59:
5e:13:c8:5b:d7:be:7e:fa:42:68:f7:fc:99:4a:ff:
d7:7e:c9:df:23:39:2c:80:4a:ec:2f:ff:63:59:85:
47:70:f7:9c:02:b8:22:7e:b8:94:cf:44:82:b7:41:
92:c5:f6:1c:53:85:a5:34:ba:14:59:e7:8f:67:4f:
87:45:c7:cc:31:48:5a:67:e8:4f:32:5c:6e:cd:3a:
12:07:79:88:04:86:ae:7c:aa:b4:24:bc:e7:50:de:
ff:fb:69:3c:ad:16:1e:a9:12:9a:0c:a1:02:11:0c:
0f:7a:bb:f7:60:cd:cf:23:e6:e0:93:0b:8f:13:6d:
27:ad:4f:b1:0c:5b:4f:2c:71:7d:ea:c4:8d:bc:16:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C1:CF:0E:3E:D3:EE:83:60:DE:2D:64:F9:55:78:9A:1C:77:3B:8E
X509v3 Authority Key Identifier:
keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/6D64CF867A7911F1BAE44E8A93A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.158.82.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e7:5e:e9:d2:5e:67:d4:96:ce:a1:0d:5e:fd:4e:3e:74:d9:
c0:d5:ee:f7:c2:1d:db:c7:3c:a9:60:50:fd:07:9c:7a:fd:4d:
1a:6e:1e:78:68:5f:81:66:b2:c5:8d:59:d6:6b:0a:eb:97:30:
d9:70:94:8e:ae:65:9b:24:f8:0b:80:da:35:13:1a:aa:80:fe:
3e:f1:9d:fa:70:30:61:37:16:52:8d:db:07:1f:8f:57:fb:f6:
a3:9a:86:5f:2d:aa:4e:72:1e:27:bd:0d:99:69:c0:3f:d7:dd:
53:be:48:97:86:da:cc:52:fe:92:1d:ca:8a:59:b1:29:60:2e:
d3:c3:fc:e9:5f:7b:2e:5f:4a:7c:7e:08:da:3b:cb:74:15:f1:
18:bf:0f:0e:0f:16:a7:f0:ff:b7:14:76:25:1d:e5:23:ac:04:
b3:77:f8:1d:50:eb:bd:df:72:a0:aa:46:c5:b5:9a:55:f5:37:
b9:51:e6:ee:c8:b1:a3:15:fa:f0:92:de:0d:51:f5:b9:e0:9e:
57:1e:cc:0a:83:4e:d0:56:00:97:6a:fe:dc:fb:0f:c8:c1:d4:
72:f8:d1:ee:cb:06:70:a8:a8:f0:ec:d3:e1:35:8d:73:c1:51:
f9:e3:4d:f3:63:0a:eb:07:6b:4c:53:c3:af:9a:d3:d8:6d:39:
1b:9f:e0:d4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZDQjMxMTAvBgNVBAUTKEFCNDVEQkZDMzU1NzdGMjdDOTlGQ0Y0MEEzOUIzODZC
MzIzNTBBREEwHhcNMjYwNzA4MDMwMjE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRkYmRiOS1hODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlJv1v5KMhDYhqCqMd5NMrJYtjxD3rjZ/uovVTrrmk+Q1L6w9ofdJkzVJit/l
K7MdiNiZAM9+i9d5ple0ThEmRL/r8Vzw23c96AxFrrVn+bZ8XDsqLNZkLnXJy6Jb
EzVSDXY+yK64jGRep8qZq1BSyC4ic6WUkVleE8hb175++kJo9/yZSv/XfsnfIzks
gErsL/9jWYVHcPecArgifriUz0SCt0GSxfYcU4WlNLoUWeePZ0+HRcfMMUhaZ+hP
MlxuzToSB3mIBIaufKq0JLznUN7/+2k8rRYeqRKaDKECEQwPerv3YM3PI+bgkwuP
E20nrU+xDFtPLHF96sSNvBayOQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJTBzw4+
0+6DYN4tZPlVeJocdzuOMB8GA1UdIwQYMBaAFKtF2/w1V38nyZ/PQKObOGsyNQra
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkNCMy9BNUZEODRGMjU3
MUIxMUVFQjQxOEFCM0VDNEY5QUUwMi9xMFhiX0RWWGZ5ZkpuODlBbzVzNGF6STFD
dG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3EwWGJfRFZYZnlmSm44OUFvNXM0YXpJMUN0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzZDQjMvQTVGRDg0RjI1NzFCMTFFRUI0MThBQjNFQzRGOUFFMDIvNkQ2NENGODY3
QTc5MTFGMUJBRTQ0RThBOTNBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ55SMA0GCSqGSIb3DQEBCwUAA4IBAQBm517p0l5n1JbOoQ1e/U4+
dNnA1e73wh3bxzypYFD9B5x6/U0abh54aF+BZrLFjVnWawrrlzDZcJSOrmWbJPgL
gNo1ExqqgP4+8Z36cDBhNxZSjdsHH49X+/ajmoZfLapOch4nvQ2ZacA/191TvkiX
htrMUv6SHcqKWbEpYC7Tw/zpX3suX0p8fgjaO8t0FfEYvw8ODxan8P+3FHYlHeUj
rASzd/gdUOu933KgqkbFtZpV9Te5UebuyLGjFfrwkt4NUfW54J5XHswKg07QVgCX
av7c+w/IwdRy+NHuywZwqKjw7NPhNY1zwVH5403zYwrrB2tMU8OvmtPYbTkbn+DU
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:54:38 2026 by rpki-client