
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa
File: 885DA760AA8811E799348329C4F9AE02.roa (raw, json)
Hash identifier: LAi2UCH58zjiYPj7gMzUeS74kp81Vp9NAUy7vLyySVo=
Subject key identifier: 28:BC:99:3D:08:FF:FA:B8:7D:9D:3A:7F:75:99:49:B1:FB:A2:C3:E8
Certificate issuer: /CN=A9189265/serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Certificate serial: 1A80
Authority key identifier: C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa
Signing time: Fri 22 May 2026 16:19:31 +0000
ROA not before: Fri 22 May 2026 16:19:31 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135330
IP address blocks: 103.214.144.0/24 maxlen: 24
103.214.145.0/24 maxlen: 24
103.214.146.0/24 maxlen: 24
103.214.147.0/24 maxlen: 24
2404:c680::/32 maxlen: 32
2404:c680::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6784 (0x1a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189265, serialNumber=C3BAD8F0A5DA058E9F925037D04AA71C928BA173
Validity
Not Before: May 22 16:19:31 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a108213-3e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:4f:f0:08:40:a9:27:a0:9b:0b:b5:7b:ee:
09:1b:89:22:80:e6:1d:fc:58:ed:71:e2:e1:63:e0:
aa:bf:f9:5d:5b:4a:6f:86:dc:0d:65:49:cd:1f:c6:
40:a0:4d:d0:f0:7e:17:f7:ad:42:b8:60:96:12:6d:
9e:72:98:5a:ae:fd:39:d4:ab:f0:fd:19:46:5c:85:
2b:07:23:19:55:75:49:0e:82:31:f9:c9:5d:32:83:
cb:59:b8:ad:60:ee:9b:39:63:df:b9:e9:1e:89:6e:
92:36:76:23:49:21:bc:ad:08:03:a9:c6:ec:db:52:
e4:36:f1:7e:d8:60:bf:62:12:dd:dc:72:d6:01:41:
af:27:75:69:53:80:55:df:35:2f:0d:c3:8c:9d:83:
0e:1f:ba:42:e2:07:a1:6b:96:dd:82:55:2a:f2:89:
8c:84:96:74:30:64:fb:a8:df:6b:80:e2:88:86:db:
ee:b5:9f:38:71:3f:0d:90:ad:f5:76:40:6f:1a:c0:
d6:f6:05:ab:f0:f1:4b:23:8f:49:5c:a4:96:68:7e:
1d:2b:a6:c7:56:98:5a:00:39:77:6d:d9:f3:70:11:
2c:c7:3e:65:36:10:21:f9:2d:8a:a9:67:96:85:c1:
69:a7:5d:e9:2a:eb:18:66:84:6c:78:8d:c7:cf:8c:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BC:99:3D:08:FF:FA:B8:7D:9D:3A:7F:75:99:49:B1:FB:A2:C3:E8
X509v3 Authority Key Identifier:
keyid:C3:BA:D8:F0:A5:DA:05:8E:9F:92:50:37:D0:4A:A7:1C:92:8B:A1:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/w7rY8KXaBY6fklA30EqnHJKLoXM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7rY8KXaBY6fklA30EqnHJKLoXM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189265/D8B4B61E602211E7B96FC264C4F9AE02/885DA760AA8811E799348329C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.144.0/22
IPv6:
2404:c680::/32
Signature Algorithm: sha256WithRSAEncryption
44:2b:2f:ec:40:38:a1:fb:e6:bc:d8:ce:8e:b9:ab:69:d1:74:
dc:2a:0e:2f:a1:da:79:40:9d:8b:75:5f:9e:8f:14:fd:79:41:
55:69:ba:b3:bb:e7:1d:bc:17:f4:6a:fd:41:3b:9b:c8:1c:c7:
12:bc:88:52:ef:8f:6a:81:f1:34:5a:23:cf:36:5f:03:13:d2:
6e:82:ed:01:77:40:fd:2e:a3:e9:1a:70:07:f9:fb:a6:f3:82:
72:d6:94:3d:9e:ae:61:d1:7d:4b:b3:a8:06:20:51:96:d7:66:
79:83:b7:cd:58:f5:47:1e:85:2a:ba:18:a9:12:68:b4:99:75:
e2:d4:00:91:94:30:14:7b:62:26:fd:af:1d:79:a4:35:19:13:
00:c5:13:c2:e0:c1:b5:77:b5:7e:b8:60:45:43:d3:3a:1c:23:
ac:ab:cf:a0:84:63:72:87:90:a3:61:40:c2:14:be:c2:e7:d4:
28:09:71:70:74:70:ac:30:14:99:1d:86:e4:ed:8e:95:12:0e:
90:a5:2b:f8:48:82:f2:9d:1b:2f:75:d5:ae:c1:4b:6a:d4:8b:
8a:fb:93:70:c5:b9:b0:fd:81:b8:3a:77:d0:23:d8:77:6d:cb:
84:cc:2b:21:69:04:63:5e:f8:f2:23:78:2c:9f:36:00:5f:bc:
92:52:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:07:11 2026 by rpki-client