
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/85B13C3299CE11F087D1450FC4F9AE02.roa
File: 85B13C3299CE11F087D1450FC4F9AE02.roa (raw, json)
Hash identifier: 2SFW3f/qBcO3ABUl0skEtTQdx61C6QraqE2FsiGx+BA=
Subject key identifier: 79:06:0E:48:75:D8:C4:64:42:F9:34:91:58:EA:B3:9B:DA:30:3A:A8
Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Certificate serial: 06A8
Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/85B13C3299CE11F087D1450FC4F9AE02.roa
Signing time: Sun 04 Oct 2026 23:43:50 +0000
ROA not before: Sun 04 Oct 2026 23:43:50 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 45102
IP address blocks: 103.135.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1704 (0x6a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D
Validity
Not Before: Oct 4 23:43:50 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2e4b6-d6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:06:01:89:d3:0f:a9:d3:19:c1:ca:07:57:
84:71:62:6e:6b:56:e5:39:25:87:93:ce:e3:4b:1f:
05:4e:35:6f:b1:33:f4:fe:02:28:46:ab:ee:e4:41:
3a:cc:cc:35:b1:3a:eb:63:58:51:68:e3:14:f2:5a:
29:a8:8e:cc:a4:05:fe:70:ba:06:4d:ae:1f:34:20:
9b:a6:6b:88:e8:f1:da:8d:68:52:c9:26:78:b0:2c:
9c:b8:9a:bf:b3:2f:52:18:4e:ba:49:e2:cc:61:50:
7b:84:80:ed:e1:03:22:a3:8d:d3:cf:38:2f:6e:02:
4a:3e:15:70:85:ec:db:6b:c5:ad:2f:12:01:77:81:
81:13:77:73:60:83:60:96:88:6a:8d:86:65:83:2b:
82:0d:d7:18:b6:7c:51:a5:7e:64:88:a2:73:7c:6f:
4f:ce:6e:a3:f1:79:c1:6a:91:e2:a9:ba:e4:3d:ee:
94:97:2e:6c:ec:35:90:77:ce:ab:19:58:ae:9a:f6:
10:45:ba:35:00:62:e3:13:43:0a:f7:4b:56:1b:8a:
63:fb:26:45:98:cc:16:53:d5:ab:66:c0:cc:1c:7c:
3d:4d:4a:b5:cf:72:ba:bf:e8:56:39:e1:76:bf:f2:
29:80:3b:3a:8a:75:74:21:30:7d:f9:60:dd:88:01:
cf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:06:0E:48:75:D8:C4:64:42:F9:34:91:58:EA:B3:9B:DA:30:3A:A8
X509v3 Authority Key Identifier:
keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/85B13C3299CE11F087D1450FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.135.210.0/23
Signature Algorithm: sha256WithRSAEncryption
60:fe:09:c4:e9:5e:47:ed:f3:db:e8:61:f8:ec:01:8f:88:53:
1c:48:96:b4:62:2a:34:39:80:1d:59:8f:69:4d:6f:e4:ae:1e:
1d:ae:4c:b9:22:a0:3e:47:6d:96:32:a2:34:23:23:c2:de:5b:
06:a3:6a:22:46:7d:67:bf:fa:b5:2b:37:90:b2:47:70:a6:2f:
3f:22:1a:88:cc:f2:7b:fe:af:8b:9e:ef:14:04:f5:02:f7:73:
65:d7:21:34:e2:8d:8f:56:2d:8b:65:bf:c1:40:99:56:c8:51:
a4:04:90:1c:e0:18:5b:0a:e5:68:a5:fa:02:56:26:a2:1f:31:
3e:10:85:f0:83:30:62:a7:ee:22:e0:03:77:4d:24:96:ac:f8:
b5:43:6e:4e:7a:5c:b4:7e:30:6c:8d:1d:52:76:2e:89:f3:da:
5b:5b:a0:00:00:2c:a9:86:f8:cd:9f:e4:c4:05:f1:c5:2a:ef:
70:b5:b7:88:dd:fe:d0:c9:d0:87:a9:fa:51:ca:a0:a5:30:46:
ab:68:fe:32:3a:f1:bf:89:be:6d:f4:0b:24:fa:65:aa:f2:78:
1b:b4:4c:23:80:98:c7:88:6f:f8:b0:59:51:cc:c6:0c:7b:fe:
71:c6:93:97:bd:bd:c5:12:29:94:73:41:d5:53:cd:0d:8c:ce:
87:ef:18:ab
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0
MjQ5NjI5MUQwHhcNMjYxMDA0MjM0MzUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMyZTRiNi1kNmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4cGAYnTD6nTGcHKB1eEcWJua1blOSWHk87jSx8FTjVvsTP0/gIoRqvu5EE6
zMw1sTrrY1hRaOMU8lopqI7MpAX+cLoGTa4fNCCbpmuI6PHajWhSySZ4sCycuJq/
sy9SGE66SeLMYVB7hIDt4QMio43TzzgvbgJKPhVwhezba8WtLxIBd4GBE3dzYINg
lohqjYZlgyuCDdcYtnxRpX5kiKJzfG9Pzm6j8XnBapHiqbrkPe6Uly5s7DWQd86r
GViumvYQRbo1AGLjE0MK90tWG4pj+yZFmMwWU9WrZsDMHHw9TUq1z3K6v+hWOeF2
v/IpgDs6inV0ITB9+WDdiAHPCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHkGDkh1
2MRkQvk0kVjqs5vaMDqoMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC
RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDVEMjUvNjdGMkIwRDgwQkQyMTFFQ0JBQTQ4MDZBQzRGOUFFMDIvODVCMTNDMzI5
OUNFMTFGMDg3RDE0NTBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ4fSMA0GCSqGSIb3DQEBCwUAA4IBAQBg/gnE6V5H7fPb6GH47AGP
iFMcSJa0Yio0OYAdWY9pTW/krh4drky5IqA+R22WMqI0IyPC3lsGo2oiRn1nv/q1
KzeQskdwpi8/IhqIzPJ7/q+Lnu8UBPUC93Nl1yE04o2PVi2LZb/BQJlWyFGkBJAc
4BhbCuVopfoCViaiHzE+EIXwgzBip+4i4AN3TSSWrPi1Q25Oely0fjBsjR1Sdi6J
89pbW6AAACyphvjNn+TEBfHFKu9wtbeI3f7QydCHqfpRyqClMEaraP4yOvG/ib5t
9Ask+mWq8ngbtEwjgJjHiG/4sFlRzMYMe/5xxpOXvb3FEimUc0HVU80NjM6H7xir
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:47 2026 by rpki-client