
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/9A28A416AF5B11EE9B50AD27C4F9AE02.roa
File: 9A28A416AF5B11EE9B50AD27C4F9AE02.roa (raw, json)
Hash identifier: kAypXY5Aefu9BqNsBel/rbpMAx3QNy82Uz1wAGoc9uc=
Subject key identifier: 19:EE:A0:40:F0:64:39:F2:97:1F:22:F5:A4:D4:C3:C8:21:CF:07:8C
Certificate issuer: /CN=A9196296/serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990
Certificate serial: 01E6
Authority key identifier: 5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/9A28A416AF5B11EE9B50AD27C4F9AE02.roa
Signing time: Sat 01 Aug 2026 05:53:14 +0000
ROA not before: Sat 01 Aug 2026 05:53:14 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 137891
IP address blocks: 103.116.190.0/23 maxlen: 23
103.116.190.0/24 maxlen: 24
103.116.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl
rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 03:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196296, serialNumber=5FDBD5DF532D2C56206F7B112E7BBB3057A39990
Validity
Not Before: Aug 1 05:53:14 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6d89ca-a1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:db:65:a6:fd:26:2d:e9:54:33:2c:a0:cc:94:
f8:02:28:dc:86:8c:ab:84:4c:2a:54:61:44:37:14:
10:09:f1:5b:4e:bd:d4:6f:0a:a2:4c:35:d8:2f:99:
66:9a:df:d1:53:1c:ef:8a:3f:c3:36:ec:00:61:a1:
fe:1a:fb:51:8d:bd:7e:cb:58:bb:d3:67:05:ba:52:
37:c3:70:d5:21:fa:16:42:48:91:01:56:7d:05:9a:
63:8e:df:ea:55:f3:0c:f9:12:ba:8e:b9:73:ce:50:
e9:eb:19:e7:8f:f5:40:26:1a:75:7c:c1:4d:5a:6e:
38:e1:f0:0b:fa:0d:2e:23:1e:d5:c3:be:2e:af:6d:
7b:07:ce:85:47:20:6a:26:de:34:a1:37:89:7f:a6:
c9:1a:56:77:1f:b4:65:a0:03:e1:33:f0:2a:c9:11:
1d:43:eb:d5:e7:d1:7d:d2:02:1a:1d:80:e1:df:53:
9f:0b:42:63:54:59:cf:c2:b3:7c:fd:2a:ad:58:84:
de:c5:b6:20:68:a8:90:38:e8:42:d6:2b:ff:d4:07:
f2:9d:19:fe:47:99:f9:21:fa:d0:44:7d:93:75:bb:
a3:d2:4a:ca:21:10:33:62:c7:4a:2c:8e:ff:3c:1f:
b8:6d:e4:18:8f:24:ec:cb:b6:5b:88:66:38:8a:20:
f8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EE:A0:40:F0:64:39:F2:97:1F:22:F5:A4:D4:C3:C8:21:CF:07:8C
X509v3 Authority Key Identifier:
keyid:5F:DB:D5:DF:53:2D:2C:56:20:6F:7B:11:2E:7B:BB:30:57:A3:99:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/X9vV31MtLFYgb3sRLnu7MFejmZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X9vV31MtLFYgb3sRLnu7MFejmZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196296/42A0B71AAF5B11EEB60D0527C4F9AE02/9A28A416AF5B11EE9B50AD27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.190.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:f1:c3:17:0a:16:13:f8:c9:cf:9f:86:49:0b:ec:76:ab:39:
9e:59:1d:65:31:ab:0d:7a:9e:3f:2d:34:16:96:4a:b9:4e:8f:
9b:2b:e6:da:26:63:4b:f9:5c:f0:3a:94:24:2d:41:ee:51:c3:
92:33:54:5d:de:df:ae:5d:ca:7d:47:c0:85:6a:c7:4d:07:66:
6e:04:d0:ff:06:7e:a0:70:02:95:db:92:80:d1:ef:43:a9:c1:
94:6f:50:e4:90:76:de:33:10:24:9d:92:3a:d7:4a:c5:57:72:
58:57:97:b2:49:49:23:d8:bf:23:6f:1e:e0:88:87:44:49:92:
ee:b2:90:14:d6:7d:5d:7d:83:3d:5c:51:7e:2b:e5:32:3d:a5:
01:71:67:3c:91:5b:5b:1a:32:bb:b0:f3:42:df:f6:a6:ee:90:
a3:d4:92:c3:1b:f7:cc:b9:9f:9b:5f:1f:69:c8:9e:4a:1e:da:
d5:af:d7:d1:c6:40:72:bb:ca:04:ad:1a:c2:a4:a3:80:ad:21:
eb:cd:7a:2f:fb:29:34:7d:55:a5:7d:0e:69:a7:03:66:eb:d5:
10:da:02:8e:45:a1:71:99:1c:d4:4f:7c:bc:b6:db:c3:9e:e6:
2f:5c:0b:6b:6f:c7:c5:0a:63:f4:c6:f4:50:71:e0:83:53:df:
da:17:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:39:10 2026 by rpki-client