
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa
File: 1CA70F32E44C11F0B985B081746F56BC.roa (raw, json)
Hash identifier: t2vN3T2WzQplnqZZmwAtANzUpWv2jETBmOyeVEzMKQY=
Subject key identifier: AE:9A:F4:97:58:C0:24:89:C6:1A:5E:44:30:02:91:21:C3:57:DD:31
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3DA4
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa
Signing time: Thu 06 Aug 2026 15:11:24 +0000
ROA not before: Thu 06 Aug 2026 15:11:24 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 14618
IP address blocks: 103.104.86.0/24 maxlen: 24
103.253.240.0/22 maxlen: 22
144.48.40.0/22 maxlen: 24
211.44.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15780 (0x3da4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 6 15:11:24 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a74a41b-2443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:b9:e3:70:d1:2a:cf:fa:36:29:41:be:0a:
04:19:cf:f4:4b:50:18:d6:98:d7:1e:72:17:8c:6d:
85:7b:a2:b1:2c:d5:3c:44:39:de:59:cd:bd:94:76:
58:c9:8b:92:e3:62:62:0a:0d:80:4b:86:0f:54:e3:
44:f1:ea:fd:36:c6:e4:55:48:de:8c:c6:5e:ac:18:
ac:68:3f:64:96:e4:66:8d:8d:cf:46:2f:64:ee:17:
8e:e6:0d:be:31:a1:fe:f7:6f:8f:30:ea:4e:44:f6:
2f:33:2f:fe:47:ec:38:28:cb:cb:fb:e4:57:57:36:
32:a2:89:f8:ad:0c:a7:34:f7:ef:fb:3c:2e:30:23:
40:c5:f6:a5:e6:d9:69:d3:17:3f:8c:2d:bc:c2:de:
0d:47:1b:38:ed:59:72:f9:d0:b1:d9:55:8a:c2:db:
83:bf:42:5b:76:b1:bb:a4:b2:54:62:5f:07:69:c3:
b0:5c:2a:a5:83:b7:a5:1c:07:5f:7a:02:8e:ca:f2:
40:26:22:23:24:0f:6a:22:43:36:82:56:dd:c9:12:
01:d0:49:88:13:62:67:fc:44:9e:65:67:1f:73:6b:
b4:9a:4e:ea:62:c6:80:bd:8e:c2:53:2b:5f:2c:38:
94:54:3e:96:59:48:3f:49:3f:f1:b8:77:37:c6:6a:
f6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9A:F4:97:58:C0:24:89:C6:1A:5E:44:30:02:91:21:C3:57:DD:31
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/1CA70F32E44C11F0B985B081746F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.104.86.0/24
103.253.240.0/22
144.48.40.0/22
211.44.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:45:3e:55:8b:a1:16:a6:b2:00:9e:46:74:14:2d:d0:d8:e0:
1c:68:01:f0:b1:dd:35:ca:f0:7d:01:4f:4e:bf:66:6b:b8:6d:
7d:e9:ca:11:7d:b5:ca:c3:17:d8:7b:aa:56:5a:60:1a:be:ee:
f2:d8:5b:92:a3:cb:c6:01:a2:3f:6d:44:5a:26:aa:a6:ac:d5:
12:3d:da:3d:3e:44:2e:f1:c4:75:78:66:83:ea:50:c2:51:16:
95:8e:69:bb:36:f1:23:40:20:33:a4:60:cb:36:10:dc:2b:74:
b0:9f:f1:e7:65:79:4c:71:5d:b9:be:b5:1e:04:07:0b:b8:35:
f1:8a:e6:fb:03:33:f1:b1:c5:b9:2f:6a:14:e1:b9:64:81:1a:
73:58:80:f6:dc:bf:3e:27:b3:48:e0:28:67:dc:5e:5f:09:36:
59:aa:fa:ba:a0:f5:c2:6c:43:98:18:58:f0:8c:35:eb:46:d0:
90:06:12:78:21:7c:fb:f3:6f:08:08:91:ea:ae:b7:20:09:8c:
2e:30:a8:91:3e:42:e3:2c:ee:c3:f8:7f:83:d9:8f:71:5c:13:
b7:e2:7e:f5:30:1d:5b:ae:0c:a9:32:eb:53:68:4d:34:39:69:
df:5c:4a:d0:87:4c:d5:fe:c9:8b:e8:36:b7:f7:e1:f1:4d:dd:
73:59:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:52 2026 by rpki-client