
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
File: A197DDE6BF2011E99B065B7DC4F9AE02.roa (raw, json)
Hash identifier: cWv+fQJsovacPPZwQQK6zMOaPrVJpl+pf5y2+aVM5hA=
Subject key identifier: F0:E0:94:DE:6F:DA:C7:0A:15:20:93:F5:36:04:43:B5:97:DF:A5:36
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3BB0
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:24:38 +0000
ROA not before: Thu 20 Aug 2026 16:24:38 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55695
IP address blocks: 103.25.54.0/24 maxlen: 24
103.25.55.0/24 maxlen: 24
202.0.92.0/23 maxlen: 24
2405:2d40::/32 maxlen: 32
2405:2d40::/48 maxlen: 48
2405:2d40:1::/48 maxlen: 48
2405:2d40:2::/48 maxlen: 48
2405:2d40:11::/48 maxlen: 48
2405:2d40:12::/48 maxlen: 48
2405:2d40:13::/48 maxlen: 48
2405:2d40:14::/48 maxlen: 48
2405:2d40:15::/48 maxlen: 48
2405:2d40:16::/48 maxlen: 48
2405:2d40:17::/48 maxlen: 48
2405:2d40:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15280 (0x3bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:24:38 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a872a46-161a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:ae:11:bc:82:29:63:6a:7f:60:79:07:9b:
28:66:34:a7:d2:1e:b8:1d:79:2b:e1:cc:c1:0b:fe:
d5:05:85:aa:5f:77:8f:7e:49:7b:28:f5:20:75:a1:
8a:2c:16:90:b8:ec:8d:8c:a3:a8:bf:41:9a:73:3e:
c1:a2:83:46:0a:98:fd:af:63:74:eb:51:56:b7:8b:
60:cf:d4:9b:0d:60:8f:7d:69:37:7f:d3:b3:7c:d9:
1b:52:0d:04:f7:2a:d6:c9:46:2b:9c:45:4a:c8:94:
7b:65:81:06:44:32:ce:a5:09:f4:80:8d:a3:3b:7e:
04:42:53:f4:85:b3:be:89:18:b5:fa:8c:f3:6d:dc:
e1:af:4d:62:0e:83:4f:35:a5:b5:5e:8c:dd:b4:ab:
84:de:79:4b:87:4b:82:ea:36:30:f1:1b:6e:c9:50:
79:81:9f:97:cc:e9:16:c9:d8:95:28:ac:01:a4:8c:
bb:3d:9b:15:77:19:bc:1b:a7:6e:78:c6:d9:71:57:
ae:26:69:58:ca:42:4a:52:53:f9:92:60:3c:33:a6:
4a:d8:ed:57:bd:b2:26:b6:d2:30:e3:cc:a7:e1:6e:
d6:77:a5:56:57:c1:43:11:f6:52:52:27:d6:7d:fb:
4f:32:ad:6e:61:de:26:a3:7f:09:e5:08:d1:18:4e:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E0:94:DE:6F:DA:C7:0A:15:20:93:F5:36:04:43:B5:97:DF:A5:36
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.25.54.0/23
202.0.92.0/23
IPv6:
2405:2d40::/32
Signature Algorithm: sha256WithRSAEncryption
11:f4:56:10:9a:76:e8:16:ab:31:cc:53:7e:ca:c7:5a:5e:15:
f0:10:18:f1:a2:d0:b9:d3:83:f3:a4:d2:94:69:8f:74:f7:c6:
d9:3d:2a:34:a1:0a:ba:34:03:58:cd:b7:12:d3:03:c7:09:5e:
b4:db:31:98:6e:23:1d:ad:d7:40:2f:2e:81:93:25:10:04:ce:
51:1c:10:eb:09:20:9e:21:e3:4c:77:3a:0c:79:71:34:1e:fc:
2c:25:c7:fd:8a:37:95:4e:8f:73:3c:d3:66:7f:46:69:54:fc:
2e:58:c1:bb:01:1e:e7:8c:cd:e2:55:cd:77:81:3c:20:83:81:
00:43:9c:83:19:6b:da:ab:d7:f9:8d:11:69:82:b7:80:5e:c6:
ea:f8:26:8f:1c:c8:1b:1c:49:dd:9e:47:f7:33:7f:ce:e4:f5:
20:70:f0:5b:91:da:31:bb:c7:67:6d:59:ef:e0:f5:bd:64:c5:
51:d1:0b:00:46:45:aa:ab:b3:6e:e8:86:3e:e9:d8:ca:e1:ff:
55:49:d8:6e:12:6b:84:c0:71:8b:de:e1:7f:a8:b7:2c:0a:79:
18:ae:76:a8:1e:9a:fe:d6:a0:cc:58:e6:08:87:0c:78:90:f8:
ce:8f:96:b0:bc:46:fd:e3:b8:b7:34:96:a4:55:6a:7d:ad:33:
cc:10:9f:aa
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICO7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwODIwMTYyNDM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3MmE0Ni0xNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5lKuEbyCKWNqf2B5B5soZjSn0h64HXkr4czBC/7VBYWqX3ePfkl7KPUgdaGK
LBaQuOyNjKOov0Gacz7BooNGCpj9r2N061FWt4tgz9SbDWCPfWk3f9OzfNkbUg0E
9yrWyUYrnEVKyJR7ZYEGRDLOpQn0gI2jO34EQlP0hbO+iRi1+ozzbdzhr01iDoNP
NaW1XozdtKuE3nlLh0uC6jYw8RtuyVB5gZ+XzOkWydiVKKwBpIy7PZsVdxm8G6du
eMbZcVeuJmlYykJKUlP5kmA8M6ZK2O1XvbImttIw48yn4W7Wd6VWV8FDEfZSUifW
fftPMq1uYd4mo38J5QjRGE7qrwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFPDglN5v
2scKFSCT9TYEQ7WX36U2MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTE5N0RERTZC
RjIwMTFFOTlCMDY1QjdEQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQBZxk2AwQBygBcMA0EAgACMAcDBQAkBS1AMA0GCSqGSIb3DQEBCwUA
A4IBAQAR9FYQmnboFqsxzFN+ysdaXhXwEBjxotC504PzpNKUaY9098bZPSo0oQq6
NANYzbcS0wPHCV602zGYbiMdrddALy6BkyUQBM5RHBDrCSCeIeNMdzoMeXE0Hvws
Jcf9ijeVTo9zPNNmf0ZpVPwuWMG7AR7njM3iVc13gTwgg4EAQ5yDGWvaq9f5jRFp
greAXsbq+CaPHMgbHEndnkf3M3/O5PUgcPBbkdoxu8dnbVnv4PW9ZMVR0QsARkWq
q7Nu6IY+6djK4f9VSdhuEmuEwHGL3uF/qLcsCnkYrnaoHpr+1qDMWOYIhwx4kPjO
j5awvEb947i3NJakVWp9rTPMEJ+q
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:24 2026 by rpki-client