
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/9B26CED6A5CD11F19849D7873311F970.roa
File: 9B26CED6A5CD11F19849D7873311F970.roa (raw, json)
Hash identifier: uOeXNTY+ygflSEqIrkiBDcYliPel/CdnXhfU/RgbeP4=
Subject key identifier: 90:DE:31:CA:C1:CD:F2:17:0A:E1:EA:A8:E2:A2:D7:BD:C8:30:C5:51
Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Certificate serial: 35DD
Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/9B26CED6A5CD11F19849D7873311F970.roa
Signing time: Tue 01 Sep 2026 06:23:12 +0000
ROA not before: Tue 01 Sep 2026 06:23:11 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 4637
IP address blocks: 101.0.16.0/24 maxlen: 24
101.0.17.0/24 maxlen: 24
101.0.18.0/24 maxlen: 24
101.0.19.0/24 maxlen: 24
103.46.205.0/24 maxlen: 24
103.46.206.0/24 maxlen: 24
103.46.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13789 (0x35dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521
Validity
Not Before: Sep 1 06:23:11 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a966f4f-6d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:7c:f1:ea:29:f7:09:9a:95:08:5a:84:2c:
88:9a:fd:a6:bf:13:12:0f:c8:ec:21:4b:23:01:59:
6a:e4:e3:a7:0d:9e:05:b7:f5:76:6a:d3:70:20:41:
d9:52:f8:18:be:a4:56:31:72:4a:e9:92:48:57:8e:
5e:c5:70:14:20:cf:3b:97:cd:d5:9a:86:55:7d:6d:
6b:c0:3d:9e:95:84:77:f3:9f:1f:70:35:f0:ae:ca:
b3:28:f6:96:c6:5a:2f:80:55:81:62:2c:29:9b:1f:
b4:c1:ae:ef:34:8e:b7:f1:82:3c:c6:12:a9:d8:7c:
87:31:ae:75:f7:d1:1e:24:7c:67:b0:2f:3d:68:25:
26:40:40:0e:51:0b:58:d0:3d:ce:68:57:52:41:df:
82:4b:0f:aa:15:ee:11:f7:be:e3:31:f0:32:8f:33:
26:52:9c:1f:ad:96:3a:e0:7d:2c:58:56:e5:e1:3d:
d7:6f:64:ea:3d:86:29:ba:70:ab:7a:c3:e8:cb:d7:
c8:68:d5:61:f6:30:76:df:d5:0c:ba:22:74:c2:54:
5a:7d:1e:a8:3d:8c:27:67:4b:d0:e1:40:c2:92:0f:
dd:8d:56:8a:9c:0b:62:77:3d:75:b7:ac:03:9f:72:
d9:ae:bd:c5:fb:3e:02:ca:d4:35:a6:61:9b:16:c2:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DE:31:CA:C1:CD:F2:17:0A:E1:EA:A8:E2:A2:D7:BD:C8:30:C5:51
X509v3 Authority Key Identifier:
keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/9B26CED6A5CD11F19849D7873311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
101.0.16.0/22
103.46.205.0-103.46.207.255
Signature Algorithm: sha256WithRSAEncryption
71:1c:7e:d9:01:92:72:ee:54:30:ad:63:3e:de:a8:42:4d:8f:
b0:58:f6:9e:6d:a3:c3:41:1d:84:89:3d:11:b4:a6:55:d2:93:
64:e1:c9:41:2f:87:21:7a:be:29:fd:6b:f3:b4:14:8f:8e:22:
b0:29:17:73:86:0e:8a:76:33:a1:c4:06:7e:d2:2a:77:87:68:
c8:99:e8:82:c1:e6:99:84:04:55:79:05:6d:f3:40:a0:e5:dd:
69:8d:ab:a0:4f:79:1f:09:ee:0f:33:ce:c8:67:3c:cb:4b:c3:
84:29:bf:e4:45:d6:90:21:88:23:39:77:45:ef:c5:49:1e:75:
cd:d2:c0:21:f8:3d:e2:d0:f2:2e:4f:53:33:8d:5a:38:2a:6f:
ca:15:37:0c:15:b2:e2:93:bd:8a:5a:f4:a1:f1:08:ad:10:e8:
97:42:7d:a1:b7:64:7a:c6:c7:b0:29:a1:a0:1e:21:e7:0d:3f:
7a:4a:1e:f5:52:88:0b:5a:0a:51:9e:a9:bb:57:ee:8f:28:a4:
d8:4a:dc:13:a1:9c:4e:4b:3f:10:d6:d4:47:8f:a0:9d:83:6a:
a1:5b:77:85:a4:64:c7:ea:bc:ce:0b:7b:f3:14:9c:85:64:2a:
28:03:a6:02:c2:17:97:3b:ee:7f:d9:25:1e:30:de:ff:2a:08:
a1:1b:34:59
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICNd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB
NUE4NTQ1MjEwHhcNMjYwOTAxMDYyMzExWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk2NmY0Zi02ZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3l88eop9wmalQhahCyImv2mvxMSD8jsIUsjAVlq5OOnDZ4Ft/V2atNwIEHZ
UvgYvqRWMXJK6ZJIV45exXAUIM87l83VmoZVfW1rwD2elYR3858fcDXwrsqzKPaW
xlovgFWBYiwpmx+0wa7vNI638YI8xhKp2HyHMa5199EeJHxnsC89aCUmQEAOUQtY
0D3OaFdSQd+CSw+qFe4R977jMfAyjzMmUpwfrZY64H0sWFbl4T3Xb2TqPYYpunCr
esPoy9fIaNVh9jB239UMuiJ0wlRafR6oPYwnZ0vQ4UDCkg/djVaKnAtidz11t6wD
n3LZrr3F+z4CytQ1pmGbFsL4KwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFJDeMcrB
zfIXCuHqqOKi173IMMVRMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE
QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTRFMDMvM0Y0OEYyMjQxREE2MTFFMjlBMDc1RDlEMDhCMDJDRDIvOUIyNkNFRDZB
NUNEMTFGMTk4NDlENzg3MzMxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQCZQAQMAwDBABnLs0DBARnLsAwDQYJKoZIhvcNAQELBQADggEBAHEc
ftkBknLuVDCtYz7eqEJNj7BY9p5to8NBHYSJPRG0plXSk2ThyUEvhyF6vin9a/O0
FI+OIrApF3OGDop2M6HEBn7SKneHaMiZ6ILB5pmEBFV5BW3zQKDl3WmNq6BPeR8J
7g8zzshnPMtLw4Qpv+RF1pAhiCM5d0XvxUkedc3SwCH4PeLQ8i5PUzONWjgqb8oV
NwwVsuKTvYpa9KHxCK0Q6JdCfaG3ZHrGx7ApoaAeIecNP3pKHvVSiAtaClGeqbtX
7o8opNhK3BOhnE5LPxDW1EePoJ2DaqFbd4WkZMfqvM4Le/MUnIVkKigDpgLCF5c7
7n/ZJR4w3v8qCKEbNFk=
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:40 2026 by rpki-client