
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/ECEABB7CB0BA11F19005EE656611F970.roa
File: ECEABB7CB0BA11F19005EE656611F970.roa (raw, json)
Hash identifier: nYtTx86y8i/3+MIxsW3FIE2hyx0lwhToi48Tf/0i8Vc=
Subject key identifier: E8:8A:D6:7A:D0:73:DA:74:3D:0E:C8:62:95:66:BD:ED:20:7A:0C:75
Certificate issuer: /CN=A91CE9D6/serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Certificate serial: 0B0D
Authority key identifier: 13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/ECEABB7CB0BA11F19005EE656611F970.roa
Signing time: Tue 15 Sep 2026 04:07:11 +0000
ROA not before: Tue 15 Sep 2026 04:07:11 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 135642
IP address blocks: 103.140.143.0/24 maxlen: 24
2001:df0:c480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2829 (0xb0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE9D6, serialNumber=136741BD9E870F06ECE5CB355B8C7571CC96BA74
Validity
Not Before: Sep 15 04:07:11 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa8c46f-7a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:d5:70:6a:2c:b4:f3:60:b4:e6:73:7b:0f:
28:9c:9e:d0:41:10:e8:d8:ec:27:fe:5a:2d:4e:fe:
fd:89:ff:b5:26:5e:51:05:63:cf:b8:f2:0e:79:fa:
62:4a:7d:1e:a2:11:f6:99:c1:5c:23:00:8c:00:07:
96:c5:73:85:b5:c0:41:2a:16:fa:c5:e3:05:80:a8:
3d:93:71:df:68:68:f3:30:fe:98:7e:88:59:c9:90:
d6:82:b6:a6:1d:42:f9:7a:fa:49:b5:e8:59:42:ef:
6f:62:25:65:fe:5c:47:66:d6:eb:4f:79:5d:cd:94:
ea:28:10:d5:cb:c5:2b:94:76:65:44:68:66:c2:9e:
90:7c:9d:38:90:03:1b:d3:a0:dd:51:08:64:50:c1:
0f:cd:4e:18:55:42:0a:89:b1:ea:15:ed:99:e0:a2:
4f:3e:17:b7:6e:f0:5b:b1:0f:0a:f9:2b:bd:f7:36:
47:c1:99:9b:5f:aa:61:ab:25:50:5d:dd:ee:d8:32:
bf:52:d2:46:51:17:7b:ce:fd:4d:06:1e:bf:4e:59:
fe:1b:c6:68:32:73:12:aa:56:91:99:87:2d:de:ae:
d4:24:ae:17:8c:6b:92:06:a2:9e:1c:a7:bc:7e:8e:
98:bb:c8:15:60:34:1a:38:07:f0:82:73:9d:e0:72:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8A:D6:7A:D0:73:DA:74:3D:0E:C8:62:95:66:BD:ED:20:7A:0C:75
X509v3 Authority Key Identifier:
keyid:13:67:41:BD:9E:87:0F:06:EC:E5:CB:35:5B:8C:75:71:CC:96:BA:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2dBvZ6HDwbs5cs1W4x1ccyWunQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE9D6/9E66F5127A5511EABFBE947AC4F9AE02/ECEABB7CB0BA11F19005EE656611F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.143.0/24
IPv6:
2001:df0:c480::/48
Signature Algorithm: sha256WithRSAEncryption
6a:34:17:c4:1b:76:f1:0d:2a:73:dd:17:83:60:39:7a:da:9c:
a0:99:54:79:2d:de:70:f6:0f:8b:f1:d1:4c:e3:29:8f:ed:9f:
b4:d2:61:b3:48:ca:d3:b8:c8:a8:34:8d:0c:90:7d:de:0a:27:
7c:92:2f:f6:12:e4:47:9a:5c:75:22:6a:07:0e:7e:86:14:0b:
b6:66:53:79:75:ea:bb:74:3f:fd:e9:39:16:f2:48:52:e7:8d:
4b:4b:3e:98:b3:69:0e:e3:2e:fc:46:b3:8c:dc:cc:ae:16:df:
46:6f:e0:2e:43:21:41:4c:21:ae:f0:38:7a:89:9b:59:b4:c3:
d7:68:56:33:04:bf:75:c6:13:1a:25:02:8d:30:d0:82:92:6a:
53:17:99:03:67:69:25:24:fe:3b:57:8c:cf:7f:b9:5a:c7:0a:
ad:cc:40:e5:22:c4:a7:c8:5a:4b:ba:cb:5f:87:e8:42:82:f4:
e7:f8:55:88:b3:dd:cb:bd:13:5c:78:6d:93:c5:e7:e1:4e:b6:
1b:0b:aa:72:db:90:ae:4d:f5:d4:bb:bb:5d:f5:5d:a3:db:e9:
f6:69:ca:27:05:5e:f2:a3:d9:fc:c0:f8:7d:8a:f4:1c:62:30:
c2:3e:af:ff:0c:fa:93:d9:70:1a:d9:aa:00:9d:f9:1c:bd:1f:
fb:45:f0:79
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U5RDYxMTAvBgNVBAUTKDEzNjc0MUJEOUU4NzBGMDZFQ0U1Q0IzNTVCOEM3NTcx
Q0M5NkJBNzQwHhcNMjYwOTE1MDQwNzExWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE4YzQ2Zi03YTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuGDVcGostPNgtOZzew8onJ7QQRDo2Own/lotTv79if+1Jl5RBWPPuPIOefpi
Sn0eohH2mcFcIwCMAAeWxXOFtcBBKhb6xeMFgKg9k3HfaGjzMP6YfohZyZDWgram
HUL5evpJtehZQu9vYiVl/lxHZtbrT3ldzZTqKBDVy8UrlHZlRGhmwp6QfJ04kAMb
06DdUQhkUMEPzU4YVUIKibHqFe2Z4KJPPhe3bvBbsQ8K+Su99zZHwZmbX6phqyVQ
Xd3u2DK/UtJGURd7zv1NBh6/Tln+G8ZoMnMSqlaRmYct3q7UJK4XjGuSBqKeHKe8
fo6Yu8gVYDQaOAfwgnOd4HIQywIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOiK1nrQ
c9p0PQ7IYpVmve0gegx1MB8GA1UdIwQYMBaAFBNnQb2ehw8G7OXLNVuMdXHMlrp0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTlENi85RTY2RjUxMjdB
NTUxMUVBQkZCRTk0N0FDNEY5QUUwMi9FMmRCdlo2SER3YnM1Y3MxVzR4MWNjeVd1
blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0UyZEJ2WjZIRHdiczVjczFXNHgxY2N5V3VuUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0U5RDYvOUU2NkY1MTI3QTU1MTFFQUJGQkU5NDdBQzRGOUFFMDIvRUNFQUJCN0NC
MEJBMTFGMTkwMDVFRTY1NjYxMUY5NzAucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ4yPMA8EAgACMAkDBwAgAQ3wxIAwDQYJKoZIhvcNAQELBQADggEB
AGo0F8QbdvENKnPdF4NgOXranKCZVHkt3nD2D4vx0UzjKY/tn7TSYbNIytO4yKg0
jQyQfd4KJ3ySL/YS5EeaXHUiagcOfoYUC7ZmU3l16rt0P/3pORbySFLnjUtLPpiz
aQ7jLvxGs4zczK4W30Zv4C5DIUFMIa7wOHqJm1m0w9doVjMEv3XGExolAo0w0IKS
alMXmQNnaSUk/jtXjM9/uVrHCq3MQOUixKfIWku6y1+H6EKC9Of4VYiz3cu9E1x4
bZPF5+FOthsLqnLbkK5N9dS7u131XaPb6fZpyicFXvKj2fzA+H2K9BxiMMI+r/8M
+pPZcBrZqgCd+Ry9H/tF8Hk=
-----END CERTIFICATE-----
Generated at Sat Sep 19 22:18:59 2026 by rpki-client