
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/39B14A585D9511F1AC779E1696833773.roa
File: 39B14A585D9511F1AC779E1696833773.roa (raw, json)
Hash identifier: 6WWduhNeSH9NClmdKiDddKwHknqhcEMN/C79nCnlWKw=
Subject key identifier: 92:FF:64:2E:38:01:FE:49:0B:BD:B3:A4:02:7D:BF:4F:EB:0C:50:BD
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 0642
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/39B14A585D9511F1AC779E1696833773.roa
Signing time: Mon 01 Jun 2026 08:38:12 +0000
ROA not before: Mon 01 Jun 2026 08:38:12 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 154383
IP address blocks: 43.226.231.0/24 maxlen: 24
103.46.142.0/24 maxlen: 24
103.46.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 23:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA, serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Validity
Not Before: Jun 1 08:38:12 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a1d44f4-8696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:83:1f:1f:fa:92:a4:da:5d:bf:b4:b2:0a:
fc:00:5d:73:05:fe:bb:33:3e:b8:f9:ec:fd:5c:c0:
2a:0f:fe:50:98:fe:9a:a3:47:a0:06:91:31:fa:1e:
5c:01:ab:4b:8a:25:c3:00:d1:e1:51:63:de:de:72:
3d:27:9d:8e:8c:d0:f2:43:41:6c:1c:fc:69:4a:ca:
87:97:06:9e:05:f5:38:1e:57:5b:e4:db:0e:9a:8e:
78:c1:5f:d2:32:e2:77:a6:99:e8:7c:c5:2d:2e:24:
bc:3a:5d:40:8e:71:ba:62:3e:e1:e3:1d:f2:98:49:
20:5b:4a:99:9f:cf:55:ed:04:45:02:7f:f4:b4:a4:
ca:1d:1a:cd:45:ef:1c:b2:c1:66:d0:55:56:33:1b:
f6:39:92:62:98:95:d5:b5:e1:31:de:08:ea:e0:67:
73:aa:78:ac:c1:79:f5:b2:ed:90:11:36:4a:b9:c7:
f1:21:8d:7f:d2:b6:93:4b:97:79:a9:ba:2a:3e:9d:
fc:59:0b:47:c4:16:4d:ec:0f:0b:2f:d1:71:21:8e:
ce:e7:ac:66:e6:50:c0:2b:06:c1:b8:34:09:64:92:
6b:66:2c:08:4b:47:f3:fa:ea:da:40:42:a8:84:94:
ae:ca:a9:57:70:6c:1d:8c:ff:14:8f:63:a4:33:86:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FF:64:2E:38:01:FE:49:0B:BD:B3:A4:02:7D:BF:4F:EB:0C:50:BD
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/39B14A585D9511F1AC779E1696833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.226.231.0/24
103.46.142.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:ac:7f:44:33:f5:cb:84:e9:95:09:c7:59:6d:46:b8:2c:65:
9e:ca:c9:56:ac:5e:7c:25:aa:d7:a9:86:6b:f9:d0:e5:56:1a:
9c:56:a3:3a:e2:47:4b:f3:ca:10:e6:70:a3:5f:60:c3:fa:a8:
2b:14:3d:33:90:f5:76:ca:e9:47:e0:a0:35:50:ff:39:de:6c:
4b:9f:86:d0:3c:5b:26:ac:04:db:6d:72:2a:96:93:6b:22:52:
8c:4f:42:22:ce:71:90:59:0f:c4:76:22:69:82:51:49:f3:05:
45:bf:82:a1:62:f2:35:8f:95:35:88:4d:c2:ea:a6:ac:49:79:
8e:09:db:4a:fd:a5:e8:02:08:e2:d2:b6:01:22:64:d2:cc:00:
4b:c6:ec:8c:3a:10:32:fd:ea:bd:05:0c:56:12:17:61:55:63:
25:6d:7b:d9:64:1f:8b:bb:8b:74:27:24:36:a2:96:f7:68:ae:
03:61:18:97:9e:b2:b6:db:28:9c:88:31:8a:bb:01:e3:ad:6d:
b9:d5:ff:3a:bf:44:d4:ca:9d:0f:b6:56:fc:8a:c1:9a:cc:dd:
bc:8c:e8:51:ad:85:73:59:9c:19:dc:96:ef:92:81:b2:05:d4:
6b:63:9c:17:d6:18:8c:70:77:b4:05:0f:24:dd:05:62:20:c6:
22:f4:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:57:56 2026 by rpki-client