
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa
File: A311BCDEE07D11F0A337A81D3B6F56BC.roa (raw, json)
Hash identifier: naA/IzWRseOQ6bnnGBPjUm122s9c8YjmWuItE3PPFFs=
Subject key identifier: C5:21:3C:EB:A1:ED:54:40:88:5B:98:13:D6:1D:F9:E4:49:10:CE:43
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3B8A
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa
Signing time: Thu 20 Aug 2026 16:23:21 +0000
ROA not before: Thu 20 Aug 2026 16:23:21 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137289
IP address blocks: 103.146.244.0/24 maxlen: 24
103.146.245.0/24 maxlen: 24
103.146.246.0/24 maxlen: 24
103.146.247.0/24 maxlen: 24
103.147.2.0/24 maxlen: 24
103.147.3.0/24 maxlen: 24
103.147.4.0/24 maxlen: 24
103.147.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15242 (0x3b8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:23:21 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a8729f9-8c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0b:7a:c2:be:34:e4:78:ec:7a:ca:57:96:53:
ce:73:e2:ea:ef:bc:3e:f6:d4:79:35:ca:5c:83:51:
3d:25:56:ad:77:c0:a1:36:8b:50:9a:fd:c7:b1:22:
77:40:7f:bd:c9:24:1d:32:a3:bb:d0:22:97:92:19:
1f:94:c3:a3:94:36:01:74:29:87:e0:5b:b4:f7:1e:
37:59:48:67:58:1a:a8:96:dc:84:c7:66:99:6c:61:
61:f5:73:08:1a:a0:16:1c:3c:fc:3c:8c:4f:de:07:
7a:7b:f6:54:72:5a:c7:21:5a:e6:ae:4a:9d:8d:6d:
56:dc:e0:9e:67:7c:7f:d1:4f:0f:2d:28:63:ae:ae:
41:f6:d5:2f:65:fa:16:f5:45:79:4a:4a:df:c4:ec:
0e:db:d7:1b:12:03:df:57:2b:a7:2e:f1:63:9e:4c:
5e:45:07:a8:2e:84:a8:3e:d9:44:17:3a:7d:ad:e2:
dd:cd:44:ae:bf:23:e0:db:20:3c:f9:cc:2f:b8:4d:
ac:0c:3f:a6:87:70:50:c8:86:d8:fa:b9:12:19:a5:
4d:bd:96:df:e6:ec:80:92:51:da:0d:52:a3:1a:9b:
39:80:5c:16:1e:ce:58:c1:1a:62:a8:60:f0:9e:29:
81:9b:06:34:53:21:43:6c:1b:31:54:94:83:c4:91:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:21:3C:EB:A1:ED:54:40:88:5B:98:13:D6:1D:F9:E4:49:10:CE:43
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A311BCDEE07D11F0A337A81D3B6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.244.0/22
103.147.2.0-103.147.5.255
Signature Algorithm: sha256WithRSAEncryption
66:8c:a0:1a:c6:1f:9d:71:12:98:80:06:bc:0c:e4:3e:ac:06:
08:04:28:d6:11:c4:ca:5e:ec:22:6d:5c:e5:b7:bd:63:31:a3:
83:78:11:5c:3b:a1:cf:71:e4:c9:c6:f2:06:e2:bd:48:ce:22:
34:e1:ca:db:88:09:5e:b2:ac:d2:13:57:be:b0:31:3a:27:62:
56:9b:13:20:89:36:54:5a:08:b2:8c:d6:4c:90:22:04:d7:97:
b5:3d:b5:96:2b:3c:f5:0a:0a:ef:c0:27:fb:67:65:f6:eb:f0:
72:99:9b:86:09:1e:29:ae:5e:93:7e:2e:12:3c:78:9a:5b:6a:
72:68:9b:50:44:45:3f:a9:8d:e6:2a:2e:46:b2:59:a3:ef:63:
ce:d0:c9:f0:17:c9:62:e4:4f:f4:a1:b9:30:82:0f:5f:04:0e:
0d:16:2d:1e:c5:32:52:45:d4:7a:d6:d9:99:5d:69:12:92:cc:
38:dc:e7:b1:ef:a3:bd:9d:14:b7:d9:7a:9f:53:65:01:f7:0b:
d8:3b:d8:06:1e:63:38:9d:75:70:b4:8c:e4:c4:15:da:58:28:
fd:35:d8:76:7e:68:c9:11:2f:4c:64:b2:0b:4c:18:dd:c5:86:
17:05:17:5e:49:a7:b6:97:ee:4c:a6:f7:a8:a0:3e:b7:bc:05:
c9:36:88:73
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICO4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwODIwMTYyMzIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3MjlmOS04YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7wt6wr405HjsespXllPOc+Lq77w+9tR5Ncpcg1E9JVatd8ChNotQmv3HsSJ3
QH+9ySQdMqO70CKXkhkflMOjlDYBdCmH4Fu09x43WUhnWBqoltyEx2aZbGFh9XMI
GqAWHDz8PIxP3gd6e/ZUclrHIVrmrkqdjW1W3OCeZ3x/0U8PLShjrq5B9tUvZfoW
9UV5SkrfxOwO29cbEgPfVyunLvFjnkxeRQeoLoSoPtlEFzp9reLdzUSuvyPg2yA8
+cwvuE2sDD+mh3BQyIbY+rkSGaVNvZbf5uyAklHaDVKjGps5gFwWHs5YwRpiqGDw
nimBmwY0UyFDbBsxVJSDxJFydQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFMUhPOuh
7VRAiFuYE9Yd+eRJEM5DMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQTMxMUJDREVF
MDdEMTFGMEEzMzdBODFEM0I2RjU2QkMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQCZ5L0MAwDBAFnkwIDBAFnkwQwDQYJKoZIhvcNAQELBQADggEBAGaM
oBrGH51xEpiABrwM5D6sBggEKNYRxMpe7CJtXOW3vWMxo4N4EVw7oc9x5MnG8gbi
vUjOIjThytuICV6yrNITV76wMTonYlabEyCJNlRaCLKM1kyQIgTXl7U9tZYrPPUK
Cu/AJ/tnZfbr8HKZm4YJHimuXpN+LhI8eJpbanJom1BERT+pjeYqLkayWaPvY87Q
yfAXyWLkT/ShuTCCD18EDg0WLR7FMlJF1HrW2ZldaRKSzDjc57Hvo72dFLfZep9T
ZQH3C9g72AYeYziddXC0jOTEFdpYKP012HZ+aMkRL0xksgtMGN3FhhcFF15Jp7aX
7kym96igPre8Bck2iHM=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:40 2026 by rpki-client