
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8DA5399A684D11F1BBB25DD59747A888.roa
File: 8DA5399A684D11F1BBB25DD59747A888.roa (raw, json)
Hash identifier: fqy3Dq+GKkDEjfiQr2KwV8QDb/jh32A1/6kArmbXw5s=
Subject key identifier: D5:47:6D:4C:AB:C7:AC:8A:80:E9:E3:28:56:71:B1:CE:65:62:46:A6
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3DB1
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8DA5399A684D11F1BBB25DD59747A888.roa
Signing time: Thu 06 Aug 2026 15:11:48 +0000
ROA not before: Thu 06 Aug 2026 15:11:48 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 18340
IP address blocks: 103.124.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15793 (0x3db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 6 15:11:48 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a74a434-6820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:d7:d0:ae:61:cb:91:50:8e:7d:eb:98:86:
03:b8:5d:98:c2:b2:35:c1:5b:89:c6:d4:47:6e:64:
c6:80:f4:72:41:9c:5a:03:36:74:59:18:1d:b0:23:
9b:04:81:1d:7f:c4:e0:43:9f:d7:ca:16:83:3a:c5:
1f:bf:9a:a7:cf:c4:a2:68:97:dc:d2:28:b0:7b:db:
3e:6d:d8:34:92:f3:e3:2a:ee:14:18:88:9f:c1:f3:
a1:b2:98:3c:cc:89:a2:80:87:65:88:91:51:62:a1:
dd:16:45:ba:b0:1a:9a:fc:76:14:02:ae:bf:6c:e5:
f0:67:8f:8d:18:8d:9e:35:7e:d2:16:0e:87:a7:1c:
32:c6:83:85:e1:63:95:7a:51:91:45:ff:c6:26:95:
cc:2e:42:2b:b1:3c:09:ff:d5:f2:a7:62:4a:57:72:
cf:5e:5f:9e:e6:82:94:96:8c:f0:1e:d2:6c:db:14:
0a:c4:75:63:76:71:ac:42:f1:b6:22:0d:a6:9d:4b:
55:a3:e0:b2:97:13:85:9a:48:e0:b1:a4:19:cb:8d:
3c:b8:43:aa:3e:df:60:c3:70:2d:66:2f:de:97:d2:
1c:59:f8:90:f6:05:77:86:78:43:3c:1c:90:94:0d:
04:95:ff:9d:2e:20:40:01:76:3e:60:7d:71:f5:b0:
f6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:47:6D:4C:AB:C7:AC:8A:80:E9:E3:28:56:71:B1:CE:65:62:46:A6
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8DA5399A684D11F1BBB25DD59747A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.124.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:53:06:5f:d2:7a:98:9b:3e:99:f0:3c:1a:92:0a:67:aa:9b:
f2:c8:09:c0:d6:ab:de:ca:f6:85:67:37:80:49:cc:e6:53:38:
94:00:48:fd:ce:82:4c:43:71:55:6a:13:84:62:3c:1a:81:62:
a2:d5:8c:fe:7f:58:0e:63:68:87:11:57:8c:d7:58:07:ed:19:
fc:cb:fd:8d:6f:4f:76:41:c1:4d:cd:85:30:2b:ae:d6:7f:42:
91:a5:60:40:65:3d:bc:77:8d:ff:db:12:3c:2b:e1:aa:f4:8c:
36:2a:c3:dd:cf:11:c5:59:18:5f:d5:25:24:c0:30:66:5b:24:
01:58:1a:05:ba:fb:f1:74:8a:8e:09:52:41:04:0c:15:26:96:
1b:b1:8c:d4:08:80:9d:78:c1:cd:3b:8a:c8:5d:44:67:aa:dd:
1c:6e:e8:20:6e:b0:af:01:19:eb:5a:28:63:cd:7c:0b:04:c6:
e1:ac:6a:3a:a1:d5:a2:05:68:d2:7c:40:da:c3:a0:e9:5d:20:
05:27:b5:61:69:cb:4c:df:f7:a0:20:52:19:b5:82:3e:e8:ec:
90:bf:fe:3f:01:59:e9:9f:b7:dc:43:9b:27:85:37:0d:c5:9c:
12:92:c4:fc:1f:fe:7d:34:9c:52:52:75:a7:a4:9d:15:90:12:
63:77:53:71
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICPbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjYwODA2MTUxMTQ4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTc0YTQzNC02ODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkHX0K5hy5FQjn3rmIYDuF2YwrI1wVuJxtRHbmTGgPRyQZxaAzZ0WRgdsCOb
BIEdf8TgQ5/XyhaDOsUfv5qnz8SiaJfc0iiwe9s+bdg0kvPjKu4UGIifwfOhspg8
zImigIdliJFRYqHdFkW6sBqa/HYUAq6/bOXwZ4+NGI2eNX7SFg6HpxwyxoOF4WOV
elGRRf/GJpXMLkIrsTwJ/9Xyp2JKV3LPXl+e5oKUlozwHtJs2xQKxHVjdnGsQvG2
Ig2mnUtVo+CylxOFmkjgsaQZy408uEOqPt9gw3AtZi/el9IcWfiQ9gV3hnhDPByQ
lA0Elf+dLiBAAXY+YH1x9bD21QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNVHbUyr
x6yKgOnjKFZxsc5lYkamMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvOERBNTM5OUE2
ODREMTFGMUJCQjI1REQ1OTc0N0E4ODgucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ3xkMA0GCSqGSIb3DQEBCwUAA4IBAQBOUwZf0nqYmz6Z8Dwakgpn
qpvyyAnA1qveyvaFZzeASczmUziUAEj9zoJMQ3FVahOEYjwagWKi1Yz+f1gOY2iH
EVeM11gH7Rn8y/2Nb092QcFNzYUwK67Wf0KRpWBAZT28d43/2xI8K+Gq9Iw2KsPd
zxHFWRhf1SUkwDBmWyQBWBoFuvvxdIqOCVJBBAwVJpYbsYzUCICdeMHNO4rIXURn
qt0cbuggbrCvARnrWihjzXwLBMbhrGo6odWiBWjSfEDaw6DpXSAFJ7VhactM3/eg
IFIZtYI+6OyQv/4/AVnpn7fcQ5snhTcNxZwSksT8H/59NJxSUnWnpJ0VkBJjd1Nx
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:14 2026 by rpki-client