
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa
File: 6C1DC926C3E111E9A0172583C4F9AE02.roa (raw, json)
Hash identifier: 6SHyjQmk2UQ9OjE043q684542svK+61l0uj5f8dUL5g=
Subject key identifier: 26:8B:2C:A5:FA:9F:70:2E:E9:76:43:08:7A:B9:13:49:68:35:B8:9E
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3B9B
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:23:55 +0000
ROA not before: Thu 20 Aug 2026 16:23:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 24211
IP address blocks: 103.49.220.0/22 maxlen: 22
103.49.220.0/23 maxlen: 23
103.49.222.0/23 maxlen: 23
203.190.240.0/21 maxlen: 21
203.190.244.0/23 maxlen: 23
203.190.246.0/23 maxlen: 23
2402:a000::/32 maxlen: 32
2402:a000::/48 maxlen: 48
2402:a000:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15259 (0x3b9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:23:55 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a872a1b-5ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:4b:cc:66:5d:09:3c:48:ba:3d:9f:bd:33:
e6:a1:5a:e1:43:91:ab:fe:ee:11:78:12:28:30:5e:
56:16:4f:d6:b5:d3:f3:fc:26:ae:45:59:6f:d5:b4:
82:12:3c:2d:5d:1b:ef:f0:f1:37:31:5d:56:c2:10:
52:73:32:8c:2a:5c:eb:05:3c:cb:47:69:bc:9f:68:
cb:91:29:e4:ac:ff:dc:24:2b:ff:90:d1:33:4d:00:
ac:a3:c0:91:4d:bf:24:84:99:21:56:62:c7:7f:9d:
52:b1:89:4c:31:13:56:94:28:0c:55:b8:a5:60:15:
49:8e:37:f1:52:1a:4e:c8:8e:32:d2:d2:ce:ea:39:
83:8c:82:f9:98:c7:fa:5c:6d:95:ab:df:b3:43:d5:
fb:44:99:d5:88:48:ae:62:d3:88:a4:68:f4:a4:8f:
36:2b:68:1d:12:33:ef:25:31:b0:e5:1a:9b:ed:6f:
b9:36:75:31:d2:c8:a7:c0:1f:4c:07:a2:0d:00:8c:
c5:19:68:a4:04:f4:31:15:4f:a1:d8:77:00:e6:e4:
5f:85:e9:d2:ab:90:19:f4:19:03:dc:b0:3b:37:b5:
3f:cb:1e:c6:6b:75:ce:3f:b9:cb:c3:0c:60:6f:54:
64:0d:9a:7c:47:96:ca:5b:95:4e:19:7c:b1:aa:21:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:2C:A5:FA:9F:70:2E:E9:76:43:08:7A:B9:13:49:68:35:B8:9E
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C1DC926C3E111E9A0172583C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.220.0/22
203.190.240.0/21
IPv6:
2402:a000::/32
Signature Algorithm: sha256WithRSAEncryption
a1:1e:48:7e:d6:7b:8b:60:df:3e:f3:57:ee:f0:04:06:ad:41:
f3:6a:21:52:5b:34:2c:a1:7d:66:e2:4b:47:10:1a:f3:b6:fd:
26:1e:fb:63:74:85:c0:05:d3:93:35:36:49:36:78:90:c8:45:
c5:56:ce:c0:74:c3:d8:ab:ac:42:85:95:0d:a3:04:42:b2:03:
d1:59:1d:aa:9d:83:05:19:ff:ad:0a:da:86:ac:45:e3:f5:a1:
53:bd:e1:a8:e6:72:7e:d2:0e:e4:22:6e:f2:57:89:59:e6:09:
9c:7e:a9:f6:57:81:a1:48:2a:05:98:7a:8a:de:05:12:4f:bc:
b5:50:a4:a0:8b:3d:f7:56:44:d6:43:33:96:41:ad:71:b1:d1:
c9:ca:e7:38:1f:3c:d6:3b:86:83:c8:0b:98:47:c6:7d:1d:76:
97:5e:64:21:1d:54:50:ce:21:9f:af:c5:54:d1:71:7d:65:bc:
47:17:95:f6:57:d1:4c:9d:08:1a:8b:78:ff:50:57:59:c9:0a:
84:c7:7d:e1:eb:f7:b6:01:91:3e:29:6a:74:a2:17:df:6a:01:
32:a8:82:69:1d:b7:a5:95:90:8d:5d:91:c6:6d:5d:9e:91:44:
4c:15:57:63:aa:5f:70:d4:9c:93:bb:c4:75:79:85:9d:e0:89:
67:c5:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:10 2026 by rpki-client