
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/98AF39F22E4211F1901494E893833773.roa
File: 98AF39F22E4211F1901494E893833773.roa (raw, json)
Hash identifier: P8wptNIupCQw4+edhARjRq5yF0V3iibh8gRUxBJqX1U=
Subject key identifier: 76:36:D0:8E:FA:99:15:31:1B:8A:49:0D:E7:49:FC:7E:88:6E:44:FE
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 35F8
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/98AF39F22E4211F1901494E893833773.roa
Signing time: Fri 02 Oct 2026 15:41:28 +0000
ROA not before: Fri 02 Oct 2026 15:41:28 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 23532
IP address blocks: 101.0.16.0/24 maxlen: 24
103.46.205.0/24 maxlen: 24
103.46.206.0/24 maxlen: 24
103.46.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 15:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13816 (0x35f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: Oct 2 15:41:28 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6abfd0a8-25bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:7e:d1:fb:31:fe:f2:bf:bf:a2:60:c0:e0:
2d:e6:e7:87:2c:95:5d:7b:b6:3e:a2:63:da:1c:99:
44:e9:05:08:66:1e:d1:9c:8c:92:98:a9:a4:bb:70:
b8:fd:8c:ca:0b:83:e6:c9:26:a2:6f:27:81:9c:b5:
9f:bd:78:e5:e2:16:25:55:2d:be:8c:ec:85:6e:cd:
b2:87:1e:ab:8a:f3:8a:29:1c:94:a4:92:56:66:f7:
55:4a:f7:a9:57:60:80:d3:4a:57:40:c9:db:b2:f2:
d7:2e:f7:6e:97:3c:36:48:65:70:be:e7:0a:34:f3:
02:ce:b4:4b:a7:50:2d:15:cc:d8:28:58:6e:f8:08:
53:86:0d:d8:f3:3a:35:2e:f3:41:9b:98:70:e2:a3:
67:c3:d0:58:46:13:3f:a5:8e:4e:aa:84:3d:50:c1:
28:fd:d7:a6:a9:f8:df:76:15:78:3a:a3:50:6a:9f:
76:99:a5:b0:b7:00:d3:c5:aa:c3:18:81:97:ee:d6:
ff:31:c6:ab:02:e2:8e:aa:50:bf:14:f4:10:d4:a5:
95:39:3f:02:45:a5:53:11:97:5b:7f:83:4d:12:5b:
f0:d1:14:ea:d4:bc:83:bf:5e:fc:8e:bb:43:7f:64:
77:b0:0d:60:75:73:34:19:b2:64:03:69:e4:84:dd:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:D0:8E:FA:99:15:31:1B:8A:49:0D:E7:49:FC:7E:88:6E:44:FE
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/98AF39F22E4211F1901494E893833773.roa
sbgp-ipAddrBlock: critical
IPv4:
101.0.16.0/24
103.46.205.0-103.46.207.255
Signature Algorithm: sha256WithRSAEncryption
65:5c:a9:3c:ae:37:ad:da:0d:90:6d:06:31:2f:19:3f:9b:2f:
d5:53:35:ef:b9:56:7e:f6:de:12:4b:b3:b5:37:a4:cc:59:14:
4d:04:a8:a4:e9:ef:6c:99:a6:43:4b:4e:7f:7a:50:5c:c9:ea:
e6:a3:e2:62:d5:a5:04:48:b7:98:3b:48:b6:78:6e:12:95:00:
1d:79:58:e2:b2:e5:86:e6:65:4a:4c:93:08:5b:13:79:7a:26:
d6:47:09:a3:33:cb:cf:7b:c6:16:7f:27:98:c9:fa:33:cd:b7:
99:5d:4a:db:09:8f:61:38:22:d2:3e:10:ec:cb:c0:0b:6b:c8:
60:41:49:af:ff:f6:03:d3:d4:ac:01:85:d7:8e:54:3f:08:24:
d7:f2:60:81:bc:5e:40:67:89:63:d0:5d:41:f8:76:b2:42:1b:
a8:c8:16:45:16:78:3e:ac:84:a3:a1:f2:98:b9:5b:9d:3e:c5:
20:5d:c0:f2:e1:63:6d:72:5c:80:a1:98:16:99:e0:91:c7:24:
f7:8a:4b:53:84:26:6d:b6:16:db:2c:0a:e1:69:b6:92:73:81:
57:7a:ff:b2:b5:74:1f:91:33:ca:ec:be:70:c5:be:82:65:6e:
d6:7e:64:13:bc:65:ea:ad:23:46:77:5b:96:01:2e:91:93:25:
2e:f3:93:46
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICNfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB
NUE4NTQ1MjEwHhcNMjYxMDAyMTU0MTI4WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmZDBhOC0yNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bx+0fsx/vK/v6JgwOAt5ueHLJVde7Y+omPaHJlE6QUIZh7RnIySmKmku3C4
/YzKC4PmySaibyeBnLWfvXjl4hYlVS2+jOyFbs2yhx6rivOKKRyUpJJWZvdVSvep
V2CA00pXQMnbsvLXLvdulzw2SGVwvucKNPMCzrRLp1AtFczYKFhu+AhThg3Y8zo1
LvNBm5hw4qNnw9BYRhM/pY5OqoQ9UMEo/demqfjfdhV4OqNQap92maWwtwDTxarD
GIGX7tb/McarAuKOqlC/FPQQ1KWVOT8CRaVTEZdbf4NNElvw0RTq1LyDv178jrtD
f2R3sA1gdXM0GbJkA2nkhN2gMQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFHY20I76
mRUxG4pJDedJ/H6IbkT+MB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE
QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvOThBRjM5RjIy
RTQyMTFGMTkwMTQ5NEU4OTM4MzM3NzMucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQAZQAQMAwDBABnLs0DBARnLsAwDQYJKoZIhvcNAQELBQADggEBAGVc
qTyuN63aDZBtBjEvGT+bL9VTNe+5Vn723hJLs7U3pMxZFE0EqKTp72yZpkNLTn96
UFzJ6uaj4mLVpQRIt5g7SLZ4bhKVAB15WOKy5YbmZUpMkwhbE3l6JtZHCaMzy897
xhZ/J5jJ+jPNt5ldStsJj2E4ItI+EOzLwAtryGBBSa//9gPT1KwBhdeOVD8IJNfy
YIG8XkBniWPQXUH4drJCG6jIFkUWeD6shKOh8pi5W50+xSBdwPLhY21yXIChmBaZ
4JHHJPeKS1OEJm22FtssCuFptpJzgVd6/7K1dB+RM8rsvnDFvoJlbtZ+ZBO8Zeqt
I0Z3W5YBLpGTJS7zk0Y=
-----END CERTIFICATE-----
Generated at Sat Oct 10 13:17:37 2026 by rpki-client