
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa
File: 43854B4044D411EB85615640C4F9AE02.roa (raw, json)
Hash identifier: qeh6HwToZUvKiPtIcQ5m53AulGUgnpsw5bQQUf1/wEw=
Subject key identifier: 05:29:B2:F2:FA:20:56:26:B7:CF:CA:7F:28:B8:B7:E2:2B:AE:8E:DD
Certificate issuer: /CN=A9168197/serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Certificate serial: 07E2
Authority key identifier: C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa
Signing time: Thu 30 Jul 2026 22:42:03 +0000
ROA not before: Thu 30 Jul 2026 22:42:03 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 131448
IP address blocks: 103.69.136.0/22 maxlen: 22
103.69.136.0/24 maxlen: 24
103.69.137.0/24 maxlen: 24
103.69.138.0/24 maxlen: 24
103.69.139.0/24 maxlen: 24
116.66.180.0/22 maxlen: 22
116.66.180.0/24 maxlen: 24
116.66.181.0/24 maxlen: 24
116.66.182.0/24 maxlen: 24
116.66.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2018 (0x7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168197, serialNumber=C3B648EB2E23872A918D0577130F35853F6F639E
Validity
Not Before: Jul 30 22:42:03 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6bd33b-d992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:36:d9:a2:7a:1e:06:f2:c8:dd:05:1a:30:
9b:4f:fb:6c:09:89:75:29:c1:e0:6c:2a:2d:e1:68:
df:5b:c1:3c:a4:b5:87:eb:30:9e:53:43:b2:e0:23:
88:e6:77:ee:45:9a:bc:6b:b4:89:02:14:8b:c5:29:
3c:e5:09:d9:a6:34:4d:9a:30:43:72:72:90:75:38:
9a:1c:83:a5:b2:1f:14:35:dc:5d:4f:0c:33:0e:02:
6b:10:29:e8:bd:db:33:1d:90:20:13:9f:d5:fa:bd:
cd:b6:86:3f:7c:2b:2e:25:fb:28:bd:1b:05:02:8d:
25:d0:f5:1b:f3:e6:fa:a0:d9:a7:eb:d7:31:fb:0d:
96:e5:b2:a5:48:61:58:c6:34:d9:ac:c8:06:b0:d6:
7e:68:84:49:82:bf:89:88:10:3e:9a:f0:16:c1:4b:
37:14:03:15:da:5a:4b:6b:0e:9d:87:26:14:1a:73:
57:59:18:26:b3:36:61:8f:e2:e7:da:ff:85:72:83:
09:96:e2:02:26:a9:ca:d6:3f:5b:e7:4b:f4:2f:c0:
26:84:2f:08:3a:4b:f9:bc:c2:9c:b7:db:95:c5:67:
5f:4c:0d:89:e1:b7:53:5d:af:96:1d:fc:88:fc:2a:
89:7a:43:6b:d0:fd:06:6e:1e:2d:e7:86:ea:1b:77:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:29:B2:F2:FA:20:56:26:B7:CF:CA:7F:28:B8:B7:E2:2B:AE:8E:DD
X509v3 Authority Key Identifier:
keyid:C3:B6:48:EB:2E:23:87:2A:91:8D:05:77:13:0F:35:85:3F:6F:63:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/w7ZI6y4jhyqRjQV3Ew81hT9vY54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7ZI6y4jhyqRjQV3Ew81hT9vY54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168197/A4DDA52444D211EBB1379C3EC4F9AE02/43854B4044D411EB85615640C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.136.0/22
116.66.180.0/22
Signature Algorithm: sha256WithRSAEncryption
97:33:77:e2:ec:22:b3:7d:08:be:97:9c:5e:3d:51:c3:08:2c:
a6:91:58:c8:1d:aa:18:41:b4:1f:33:16:f9:0c:43:b1:a8:3e:
33:bd:4f:80:f9:d9:a8:d6:e1:f5:e2:4b:7a:62:57:16:50:e8:
a4:36:7d:70:b8:31:b1:20:16:19:af:4d:e8:c1:f2:94:aa:3a:
2b:56:87:16:7b:b7:61:81:d4:26:b5:56:5d:38:b7:54:1b:4f:
b1:38:c7:73:c0:45:7f:4f:18:a3:4a:2e:d0:9d:d0:2f:2b:ce:
4e:21:be:49:15:9a:99:9e:68:62:65:18:7c:65:b7:c5:09:fe:
56:85:9f:1c:01:b3:5c:25:b4:18:38:38:bf:08:ac:a6:cf:f4:
93:1d:99:dd:7e:a3:32:86:c8:19:6e:dc:d0:8d:c4:95:ca:bd:
15:55:61:b8:da:cd:1c:c2:38:dc:66:2c:88:95:9d:7d:a6:5a:
fd:4a:e9:d7:9f:83:31:2d:dd:a4:0e:10:6c:fe:57:25:c7:38:
a5:86:7e:37:32:8d:bb:c8:48:98:0e:ce:cc:02:e1:b7:4d:36:
db:bd:c6:d2:4e:39:ce:12:ec:f6:f9:3f:9b:6f:cf:32:d3:93:
e4:42:80:e6:9d:1d:97:eb:42:27:f6:0c:76:3e:aa:2e:2c:e1:
57:2f:7c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:14:53 2026 by rpki-client