
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/9728C64EF10811EE8F128341C4F9AE02.roa
File: 9728C64EF10811EE8F128341C4F9AE02.roa (raw, json)
Hash identifier: sJz5VeahHTkIZibpFE1f8H8FrejnbU9Z50GoAA1HcF0=
Subject key identifier: 12:66:BF:B8:F4:05:47:56:A5:CC:53:FB:F2:9D:74:B4:3D:D7:B2:04
Certificate issuer: /CN=A9143F26/serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Certificate serial: 025C
Authority key identifier: D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/9728C64EF10811EE8F128341C4F9AE02.roa
Signing time: Thu 03 Sep 2026 02:52:42 +0000
ROA not before: Thu 03 Sep 2026 02:52:42 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 151636
IP address blocks: 103.244.92.0/24 maxlen: 24
103.244.93.0/24 maxlen: 24
2401:8620::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 02:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 604 (0x25c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143F26, serialNumber=D790C2C46932BE9D25822D99128EBBCF033D45C4
Validity
Not Before: Sep 3 02:52:42 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98e0fa-06a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:c6:d3:29:fb:18:72:65:cc:20:f8:5b:d2:
15:f0:45:0d:d8:d3:34:d5:d8:1a:84:49:6f:fa:02:
fd:cf:01:5d:9b:8c:22:76:d9:e9:23:78:c6:02:49:
11:15:c5:2d:56:d5:d2:64:4f:63:38:4b:f7:59:fc:
18:83:91:6e:5b:d1:c1:e9:84:9a:50:70:f1:39:c0:
c1:24:1c:04:51:9f:68:e2:0a:9c:b5:dd:41:de:bb:
27:eb:7e:89:46:ba:f9:cb:f2:0a:26:0d:c4:cf:b0:
49:9c:e7:5e:f0:c8:16:0d:b6:b7:ae:8f:1c:17:b3:
d9:d8:70:11:75:70:65:e9:f4:27:17:2d:a2:1b:b3:
7b:d5:9d:6b:c3:a8:6c:55:d8:12:06:fb:1b:34:1b:
60:fe:25:e9:85:2b:97:d4:db:fa:b6:bb:72:9d:f9:
61:7a:7a:ab:3b:00:38:20:d8:90:b8:55:24:52:c6:
e4:f8:ec:2d:f2:f2:68:44:7c:84:65:a8:f5:f9:78:
34:4b:5d:27:99:df:f2:4b:f1:4e:96:0a:58:81:29:
f3:8b:ca:d3:94:fc:df:ec:3a:8a:08:bd:0d:e9:47:
63:0c:ea:5c:f7:8c:34:65:45:49:69:a1:ef:2a:87:
c4:55:66:95:48:1e:6c:36:03:29:dc:be:19:34:ae:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:66:BF:B8:F4:05:47:56:A5:CC:53:FB:F2:9D:74:B4:3D:D7:B2:04
X509v3 Authority Key Identifier:
keyid:D7:90:C2:C4:69:32:BE:9D:25:82:2D:99:12:8E:BB:CF:03:3D:45:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/15DCxGkyvp0lgi2ZEo67zwM9RcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15DCxGkyvp0lgi2ZEo67zwM9RcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143F26/703A02542D5511EE89AA2009C4F9AE02/9728C64EF10811EE8F128341C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.244.92.0/23
IPv6:
2401:8620::/32
Signature Algorithm: sha256WithRSAEncryption
30:f0:46:11:c9:d6:c6:f7:9f:ab:6d:e8:70:9e:ca:09:df:3d:
8e:d3:1f:88:c3:af:45:eb:45:fb:d1:8f:5b:e9:a3:94:6c:0b:
47:e6:91:87:0f:42:57:3e:19:a3:f1:c7:a4:03:de:34:1e:f9:
01:91:38:14:51:73:64:22:c9:fb:08:27:c1:b0:bb:e5:84:53:
98:7a:20:32:f2:87:b3:88:46:5b:fe:b5:a7:4f:71:01:ec:67:
49:05:1f:24:73:54:ff:e6:74:f5:87:4a:7f:a3:82:20:f3:08:
b4:de:31:1b:e5:03:f8:b8:3d:50:27:7c:b4:cb:2e:63:ce:6b:
08:00:c3:db:49:59:c2:da:07:8d:73:e6:03:53:38:ce:09:a7:
49:36:cf:a8:ec:83:8f:2b:8c:50:82:e1:e2:12:db:ed:bf:9f:
21:9c:57:9f:bc:83:ce:e8:96:b7:93:a7:7d:be:58:41:59:b7:
ec:d3:6e:c7:ba:f8:ea:44:43:66:33:54:f8:b7:26:6f:d9:97:
f7:d0:6e:1e:67:a9:68:65:d1:3a:7a:01:f9:0b:70:e3:6c:09:
d9:3b:c1:14:2b:ca:f1:09:9d:e8:6b:f4:17:3c:cc:5a:f4:de:
ea:13:58:05:89:87:36:78:da:78:51:90:92:85:e7:6b:d2:61:
27:64:cf:f6
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGMjYxMTAvBgNVBAUTKEQ3OTBDMkM0NjkzMkJFOUQyNTgyMkQ5OTEyOEVCQkNG
MDMzRDQ1QzQwHhcNMjYwOTAzMDI1MjQyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk4ZTBmYS0wNmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxDXG0yn7GHJlzCD4W9IV8EUN2NM01dgahElv+gL9zwFdm4widtnpI3jGAkkR
FcUtVtXSZE9jOEv3WfwYg5FuW9HB6YSaUHDxOcDBJBwEUZ9o4gqctd1B3rsn636J
Rrr5y/IKJg3Ez7BJnOde8MgWDba3ro8cF7PZ2HARdXBl6fQnFy2iG7N71Z1rw6hs
VdgSBvsbNBtg/iXphSuX1Nv6trtynflhenqrOwA4INiQuFUkUsbk+Owt8vJoRHyE
Zaj1+Xg0S10nmd/yS/FOlgpYgSnzi8rTlPzf7DqKCL0N6UdjDOpc94w0ZUVJaaHv
KofEVWaVSB5sNgMp3L4ZNK4A5QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFBJmv7j0
BUdWpcxT+/KddLQ917IEMB8GA1UdIwQYMBaAFNeQwsRpMr6dJYItmRKOu88DPUXE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0YyNi83MDNBMDI1NDJE
NTUxMUVFODlBQTIwMDlDNEY5QUUwMi8xNURDeEdreXZwMGxnaTJaRW82N3p3TTlS
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1REN4R2t5dnAwbGdpMlpFbzY3endNOVJjUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNGMjYvNzAzQTAyNTQyRDU1MTFFRTg5QUEyMDA5QzRGOUFFMDIvOTcyOEM2NEVG
MTA4MTFFRThGMTI4MzQxQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ/RcMA0EAgACMAcDBQAkAYYgMA0GCSqGSIb3DQEBCwUAA4IBAQAw
8EYRydbG95+rbehwnsoJ3z2O0x+Iw69F60X70Y9b6aOUbAtH5pGHD0JXPhmj8cek
A940HvkBkTgUUXNkIsn7CCfBsLvlhFOYeiAy8oeziEZb/rWnT3EB7GdJBR8kc1T/
5nT1h0p/o4Ig8wi03jEb5QP4uD1QJ3y0yy5jzmsIAMPbSVnC2geNc+YDUzjOCadJ
Ns+o7IOPK4xQguHiEtvtv58hnFefvIPO6Ja3k6d9vlhBWbfs027HuvjqRENmM1T4
tyZv2Zf30G4eZ6loZdE6egH5C3DjbAnZO8EUK8rxCZ3oa/QXPMxa9N7qE1gFiYc2
eNp4UZCShedr0mEnZM/2
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:22:31 2026 by rpki-client