
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/20322C32233F11EB9E4D160EC4F9AE02.roa
File: 20322C32233F11EB9E4D160EC4F9AE02.roa (raw, json)
Hash identifier: EkJd0ltndV46ARB7IXXbQAAb0c1UEHu4qbKdQ4u1IMk=
Subject key identifier: 15:FF:62:18:10:69:AA:28:C7:B5:B8:EE:89:40:99:05:34:BB:59:59
Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Certificate serial: 0880
Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/20322C32233F11EB9E4D160EC4F9AE02.roa
Signing time: Sun 04 Oct 2026 21:40:43 +0000
ROA not before: Sun 04 Oct 2026 21:40:43 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 38880
IP address blocks: 103.198.40.0/24 maxlen: 24
103.198.41.0/24 maxlen: 24
202.129.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:56:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2176 (0x880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC
Validity
Not Before: Oct 4 21:40:43 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ac2c7db-ebad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bf:64:29:b2:fd:36:19:48:7b:1c:7c:4f:a9:
07:7e:c2:59:e1:06:1b:d2:35:f6:a6:b0:b3:00:9f:
46:b3:75:a1:68:7d:af:1b:4d:d2:46:88:b5:50:50:
49:69:7b:4d:44:6d:e4:8f:22:49:c9:72:b1:f7:f0:
a1:dc:60:05:15:11:56:77:79:f2:e9:0c:47:83:68:
9b:cd:eb:ff:61:fe:53:25:b0:7d:b4:c1:b6:ce:bf:
22:78:8f:28:4b:95:d9:07:ed:d6:71:0b:bf:87:1d:
ce:ba:c4:13:af:ab:e6:0f:01:bf:9f:17:b8:ee:43:
b6:67:8e:55:2e:42:96:57:a2:7f:8a:7a:56:bc:95:
c3:76:bf:83:d5:1d:22:66:e3:b3:13:7b:01:59:ea:
7e:ff:00:a4:9c:88:75:11:d9:4f:22:69:87:63:00:
91:2d:87:af:e5:fe:78:80:90:d0:65:c2:96:6f:7a:
e9:51:91:e1:13:7c:e7:6e:fb:71:e7:b8:7f:57:d9:
94:c2:af:87:cb:5b:da:8d:84:64:12:8c:cf:f7:c1:
20:58:d5:a2:df:b9:34:27:e3:dd:27:1f:84:af:b4:
3e:98:05:5c:30:95:6d:48:b7:17:7a:87:e7:fc:e7:
21:1a:c5:54:d1:54:79:48:05:3b:42:78:5e:d5:88:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FF:62:18:10:69:AA:28:C7:B5:B8:EE:89:40:99:05:34:BB:59:59
X509v3 Authority Key Identifier:
keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/20322C32233F11EB9E4D160EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.40.0/23
202.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
51:57:16:74:c4:72:91:d9:2e:1b:7f:2a:55:fb:ba:65:6f:54:
7d:5b:75:f4:72:52:b4:dc:27:24:23:4f:32:0a:36:dc:db:17:
3b:40:99:3d:14:20:0a:b9:40:f6:ac:35:bf:78:d8:24:5f:d8:
56:a2:4f:72:1e:8c:c5:45:49:86:85:aa:04:c3:b4:f1:35:f1:
9c:24:d2:cb:ec:0d:6d:4c:f8:d0:5c:9c:0b:a3:8a:4c:d1:07:
85:9e:8a:04:c6:21:05:29:7e:47:7d:ec:b0:4d:55:a4:69:80:
72:56:8f:b0:aa:cc:a8:08:9d:23:7e:ef:58:49:0a:70:71:1e:
09:9b:e0:10:be:da:fc:c7:f4:1c:88:42:0f:3c:40:78:7f:ca:
86:46:17:9a:a6:45:10:d8:46:83:15:f5:a1:9c:27:b3:6e:25:
0b:44:4f:c0:2d:33:46:6a:80:3f:20:39:71:a0:13:89:db:67:
89:f0:97:72:02:06:96:e5:69:8d:c1:bd:5f:d1:f9:c6:cc:a0:
a1:77:d8:ea:64:a6:c4:f8:f4:56:28:89:50:c9:5e:a5:d5:de:
04:16:ce:1d:36:28:36:f8:82:31:87:79:7f:88:6f:76:d6:bd:
15:39:b0:37:b3:1d:ab:d0:b5:87:31:2d:21:01:82:8d:35:66:
67:26:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:40:49 2026 by rpki-client