
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F1EA04881B6011F1A00A80522A3D8C67.roa
File: F1EA04881B6011F1A00A80522A3D8C67.roa (raw, json)
Hash identifier: 4WXv0z1XAUg7A8GkvXVfiPr9wTdKWaCl7HB1wP7jBCw=
Subject key identifier: 63:6E:C2:05:A3:93:7E:CA:71:41:5A:11:1F:57:9A:9C:4A:B2:9F:87
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3A88
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F1EA04881B6011F1A00A80522A3D8C67.roa
Signing time: Mon 09 Mar 2026 02:37:41 +0000
ROA not before: Mon 09 Mar 2026 02:37:41 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 24206
IP address blocks: 110.44.168.0/22 maxlen: 22
110.44.168.0/23 maxlen: 23
110.44.168.0/24 maxlen: 24
110.44.169.0/24 maxlen: 24
110.44.170.0/23 maxlen: 23
110.44.170.0/24 maxlen: 24
110.44.171.0/24 maxlen: 24
110.44.173.0/24 maxlen: 24
110.44.174.0/24 maxlen: 24
203.84.136.0/21 maxlen: 21
203.84.136.0/22 maxlen: 22
203.84.136.0/23 maxlen: 23
203.84.136.0/24 maxlen: 24
203.84.137.0/24 maxlen: 24
203.84.138.0/23 maxlen: 23
203.84.138.0/24 maxlen: 24
203.84.139.0/24 maxlen: 24
203.84.140.0/22 maxlen: 22
203.84.140.0/23 maxlen: 23
203.84.141.0/24 maxlen: 24
203.84.142.0/23 maxlen: 23
203.84.142.0/24 maxlen: 24
203.84.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 15:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14984 (0x3a88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Mar 9 02:37:41 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69ae3275-f8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:ed:d6:ad:4e:e2:a8:55:28:d7:dc:c8:b6:
b5:47:a8:eb:40:77:23:0c:8e:ee:91:34:38:94:71:
18:87:56:8c:67:0d:65:09:bd:90:33:a0:0b:9c:d0:
7c:76:8a:88:01:5b:39:7d:69:17:7e:4d:32:4e:1d:
85:ea:55:5f:9d:6c:74:83:69:bc:8b:90:74:98:f4:
e6:e4:2c:22:3d:98:2c:c4:ad:21:1b:cb:55:50:4a:
05:fb:96:84:08:d7:ac:14:65:14:2c:ca:60:17:cb:
90:09:58:90:05:6d:42:ac:b9:68:78:93:ba:a1:f6:
e9:4c:ab:83:1c:52:ca:f0:98:c7:f0:4d:e1:9a:0a:
bc:04:28:37:ec:43:78:ef:99:ef:a7:5c:36:3b:30:
71:f0:8d:b1:15:65:47:f6:58:e6:56:d1:bd:21:d0:
c8:d0:2c:b5:c8:03:0c:54:2e:af:33:e2:a1:c5:b1:
5d:1d:a6:e0:31:46:21:0f:84:89:4a:e7:02:d3:04:
67:8e:4e:b9:e6:95:7f:9f:1e:86:cb:1f:95:93:76:
b9:d8:47:21:2e:e9:25:83:41:2d:7b:79:bd:58:2d:
a6:38:c7:71:83:27:1b:4b:2b:81:5c:44:9d:f4:5b:
28:2d:4d:c6:a9:85:c2:9a:7c:dc:87:00:c8:42:95:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6E:C2:05:A3:93:7E:CA:71:41:5A:11:1F:57:9A:9C:4A:B2:9F:87
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/F1EA04881B6011F1A00A80522A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
110.44.168.0/22
110.44.173.0-110.44.174.255
203.84.136.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:ea:a4:cb:92:f8:ba:a8:2a:46:95:10:49:21:19:31:d2:c7:
4d:33:bd:a7:ad:3d:f6:93:f8:8d:54:18:2e:f3:eb:9f:15:90:
66:c7:8b:d6:c0:c2:d7:86:b5:2c:71:47:3e:a3:a0:26:9e:ea:
ad:f4:42:84:a4:e8:c0:aa:4b:21:b1:6c:5e:e5:5f:bc:74:19:
1f:eb:69:bf:89:63:ea:87:bf:f7:9f:79:05:39:e3:fa:82:12:
88:be:f7:c5:cd:84:96:03:86:16:b9:c4:02:44:4b:d0:63:19:
32:d0:9a:7c:cb:67:2f:f1:ac:21:f7:77:b6:3d:2e:e7:0a:8a:
e0:13:0a:43:35:58:99:c2:21:dd:5d:a7:ab:16:a3:b7:50:82:
d0:fd:82:fc:d9:f3:75:b9:41:2c:48:0f:b0:0d:3a:cf:38:6e:
99:48:ea:e2:e6:a6:dd:20:6f:a1:27:bb:42:72:b4:4c:77:ff:
06:f2:52:d3:df:19:08:0c:e9:e3:08:d9:d1:e7:c6:e8:fd:8a:
ad:ec:27:c1:bf:1a:d5:f5:3f:c3:28:c0:9b:03:f4:fe:98:8f:
79:1e:ef:af:55:9b:b6:2b:ce:94:9d:8d:00:65:6b:70:d2:2a:
2c:df:8f:95:35:b6:a4:78:9b:35:a5:60:7a:1c:74:3f:81:55:
49:03:2c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 06:43:04 2026 by rpki-client