
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/96A289D42B3711F0BDDC4B6CC4F9AE02.roa
File: 96A289D42B3711F0BDDC4B6CC4F9AE02.roa (raw, json)
Hash identifier: H2sQGsLKrUIkDH/k8CD8qzkqmUYLdrFMAAlFnqU4exY=
Subject key identifier: AF:48:8B:61:5F:E8:43:39:3D:71:92:A7:50:B6:8B:AB:9E:5F:C6:63
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3B91
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/96A289D42B3711F0BDDC4B6CC4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:23:35 +0000
ROA not before: Thu 20 Aug 2026 16:23:35 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 141607
IP address blocks: 103.220.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15249 (0x3b91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:23:35 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a872a07-5e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:09:6d:a9:f0:91:cb:d3:48:ed:6c:4e:d3:
11:08:50:91:b2:a2:2a:01:4d:5f:9d:02:94:e4:31:
85:ef:bf:8c:8a:fc:15:55:b1:1e:86:d9:be:90:a4:
50:ba:17:f3:bc:57:12:ff:42:3f:d4:36:29:b9:58:
33:c7:06:a1:87:fb:d3:66:48:de:e4:85:39:bc:91:
22:f0:14:69:f2:13:d4:d2:9f:8a:54:fe:a8:be:71:
08:7a:19:0d:86:22:62:cc:5c:a6:12:8f:9e:e8:6d:
c0:77:9e:f8:0c:1a:5a:5b:8f:ea:cf:27:54:6d:2a:
01:7d:71:10:71:c2:29:17:19:a9:68:c6:96:e2:fe:
35:e7:0d:21:05:1d:24:a9:0c:6c:13:b3:08:b0:79:
40:9f:7e:20:27:6f:77:78:f3:bc:bf:b5:c5:f3:b5:
ab:83:84:fa:10:2e:5d:82:e6:d3:11:4d:ef:09:f4:
d8:55:03:1f:5b:0c:81:57:fa:16:0a:f1:fa:a3:7e:
4f:ec:16:ce:08:e0:b3:cd:ad:21:b8:e7:50:19:af:
d6:0f:01:47:6f:cd:e6:13:69:05:5b:1f:c3:53:2d:
9f:b6:61:0a:91:ee:be:b5:a7:c3:b5:1e:49:fd:7e:
df:c2:76:dc:ba:98:2a:1d:68:20:c9:0e:aa:21:05:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:48:8B:61:5F:E8:43:39:3D:71:92:A7:50:B6:8B:AB:9E:5F:C6:63
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/96A289D42B3711F0BDDC4B6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.220.22.0/23
Signature Algorithm: sha256WithRSAEncryption
76:29:53:c7:e6:f6:82:e3:4d:17:a7:68:e9:38:6b:fa:f4:1b:
49:b9:82:41:0a:fd:0c:e6:6a:8f:3d:67:d7:ed:8e:0c:ad:4d:
82:e7:5c:5a:1b:db:54:2a:a7:2a:e6:0e:fb:cb:aa:7f:da:d7:
e0:c2:96:37:8b:da:38:ab:71:a5:ef:5d:17:50:a4:f4:4e:f6:
29:a3:aa:13:6f:fb:a2:2a:0f:68:77:6e:90:3b:ee:68:1d:38:
d6:a9:78:36:34:3c:2b:8d:e0:ab:8e:a8:8e:99:7e:56:54:14:
d0:9f:45:8e:7e:27:55:f6:37:28:20:ab:ee:d5:bf:1b:c9:ef:
23:b5:f2:d8:ad:5f:f5:ba:88:73:8e:6e:c2:56:cc:d6:1d:0f:
6f:45:f9:ab:b1:b3:5b:fc:0a:91:03:fb:04:5d:a8:92:a4:d8:
bf:19:60:2d:a3:67:f0:28:40:84:84:c2:28:aa:4e:eb:7f:9f:
76:11:a3:ea:94:04:cc:22:38:fc:a2:03:9b:1a:41:67:2a:72:
00:1e:84:49:c8:17:33:fc:fe:4d:3e:7d:1b:88:24:30:24:93:
6a:3c:d8:96:91:1a:8c:44:0e:2f:82:e3:4b:3c:b7:f6:43:ed:
77:88:1e:42:d4:54:07:c2:89:7d:94:22:25:6d:dc:7e:6b:c6:
e1:80:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:12 2026 by rpki-client