
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/82A9E362DEC111EB9010BE6AC4F9AE02.roa
File: 82A9E362DEC111EB9010BE6AC4F9AE02.roa (raw, json)
Hash identifier: CMPczLui+l93sBtgTu8rd32rZ3/z96G+Pg0qcS/LMRg=
Subject key identifier: 09:CE:1B:F7:7D:4C:E3:08:17:75:2D:F6:25:15:BC:95:5A:FD:1F:05
Certificate issuer: /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
Certificate serial: 066B
Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/82A9E362DEC111EB9010BE6AC4F9AE02.roa
Signing time: Wed 02 Sep 2026 22:44:34 +0000
ROA not before: Wed 02 Sep 2026 22:44:33 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 133206
IP address blocks: 103.169.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl
rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 22:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1643 (0x66b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
Validity
Not Before: Sep 2 22:44:33 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a98a6d1-d808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:1f:9a:9c:0c:43:c6:71:62:ff:df:04:75:
66:f8:23:d9:f9:ee:22:e8:8f:87:d9:cd:bb:40:e6:
22:20:9a:8e:63:87:91:cb:36:e7:7d:a1:5f:a4:66:
21:5c:59:79:77:ab:d9:77:a3:ff:fc:b0:fc:22:aa:
8b:94:2b:63:d9:7a:81:64:bf:3a:2b:24:e0:7d:c6:
03:cd:f4:45:62:dd:49:5b:20:e3:ce:fc:64:81:57:
d2:96:68:bc:b8:b0:91:a1:ca:40:3a:a5:54:13:95:
35:7e:58:14:1c:2f:61:48:58:7b:3a:04:ad:91:f6:
5e:1d:78:f8:ce:d6:c9:b6:60:53:97:f6:32:2f:29:
97:7c:40:7c:85:0f:11:2a:da:43:6d:61:81:ca:a6:
79:27:4d:49:de:d0:c1:71:dd:37:fb:c7:2f:3e:a0:
eb:19:4e:25:55:4a:af:35:fd:80:52:62:8a:85:be:
77:95:88:b7:e0:65:d7:ee:6e:76:81:a1:4d:04:ed:
b9:b8:c1:11:6b:71:00:66:df:91:ce:c4:8a:80:e5:
1d:67:50:3f:05:91:35:17:6b:2f:9b:ea:0f:cd:df:
7b:f9:b2:6e:51:1e:bc:4b:14:8f:19:aa:d8:0a:4a:
83:08:e5:8a:bf:c5:e7:7a:49:17:3a:6d:e9:d3:87:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CE:1B:F7:7D:4C:E3:08:17:75:2D:F6:25:15:BC:95:5A:FD:1F:05
X509v3 Authority Key Identifier:
keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/82A9E362DEC111EB9010BE6AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.169.140.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:49:7b:a0:d3:44:c6:a3:9e:3f:e4:90:d7:60:87:9b:c6:d1:
9a:aa:5a:46:1f:78:56:ef:28:d8:b0:72:bb:e7:37:bc:28:6f:
7e:fe:48:c4:20:46:7c:29:31:d3:2b:f8:27:e2:c1:08:c5:67:
bd:69:35:60:c9:fa:9d:fc:af:e2:29:d9:33:d2:84:bb:1e:ab:
af:bb:d5:35:d7:30:5f:05:23:5b:b3:65:21:23:73:a8:00:a8:
41:42:dc:09:ea:e7:83:7d:ee:eb:77:e4:06:23:ca:99:32:09:
86:2f:b6:1c:e2:6e:c4:81:c0:67:45:92:36:f2:38:69:3d:7f:
72:90:f8:a4:01:9c:5c:3b:f2:30:cd:66:39:27:b5:9c:d1:e6:
0d:04:e0:c3:3c:41:59:db:0d:ba:a5:76:88:d1:4a:5b:a1:e4:
c0:bc:b7:1e:8e:e9:cc:18:2e:92:43:8c:7c:4b:b4:2a:74:46:
cd:3b:81:68:7f:e9:ab:f8:8c:58:9f:1d:2c:66:0c:66:b8:8d:
c6:48:9c:6b:f0:96:d8:8f:ca:fb:9b:00:a5:4a:39:a4:c3:e5:
7a:0c:b3:7d:9e:44:65:54:27:d1:ff:60:de:b6:93:ea:ff:a6:
cb:7a:a8:ab:4e:13:fd:fe:84:50:0c:9f:8b:f6:a3:09:d8:dc:
f0:cf:e2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:52:53 2026 by rpki-client