
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa
File: 3DF2A2EC3AB311EC977A5D60C4F9AE02.roa (raw, json)
Hash identifier: y4QF6Zzf/preGT5Q9leQWLrm++JWhs0vBjGPZhanPmQ=
Subject key identifier: 49:8A:44:F8:3C:D0:9A:57:43:78:38:90:90:78:AF:40:CC:75:01:DC
Certificate issuer: /CN=A9112407/serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Certificate serial: 06E1
Authority key identifier: CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:14:14 +0000
ROA not before: Fri 17 Oct 2025 00:03:19 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 9723
IP address blocks: 103.72.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl
rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 21:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112407, serialNumber=CF21526D926CB832374C8E9BD5CE1D5BBCD66084
Validity
Not Before: Oct 17 00:03:19 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a449b6-0925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:95:9a:f3:d9:e8:ea:f0:89:2c:5c:d2:c0:
1b:ba:4a:4e:dd:0a:72:9a:21:a3:0e:74:c7:78:7c:
e9:61:9f:c7:de:f4:db:a1:dc:5a:43:69:59:db:fd:
2c:e6:26:b6:b8:e1:c7:93:5c:72:cd:61:db:f7:4f:
a7:d0:a8:64:00:c2:1a:98:5a:3f:35:a5:4d:4a:af:
48:c5:5f:f6:e3:e3:6f:c0:ec:f9:f5:ca:32:f2:53:
75:8b:56:92:03:f0:88:3f:18:ca:ef:af:30:23:e9:
c9:41:2b:d0:9a:94:8a:79:4d:e1:89:c4:b6:11:ad:
73:c7:10:c4:0a:3b:7c:2d:d8:3d:70:02:ae:a6:59:
c3:3a:d0:50:b3:73:00:f6:e3:9f:66:94:00:05:d7:
96:a0:52:27:fd:63:8e:59:fa:f1:cb:06:58:ab:09:
b6:55:b5:04:ce:c4:4e:8c:be:e4:de:39:37:4d:28:
42:0c:cf:95:a3:56:38:c7:6a:90:dd:a0:f6:bf:2a:
7b:25:48:84:db:68:fc:3c:4a:86:c4:8b:42:ab:34:
5e:f0:b4:aa:b7:1b:35:f7:3f:b9:0d:b2:19:c5:aa:
4f:0e:ed:c7:00:55:29:43:f8:89:eb:f2:4e:47:ee:
d5:9d:be:23:82:1d:50:f5:ed:e2:33:0e:d7:a2:6e:
a8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8A:44:F8:3C:D0:9A:57:43:78:38:90:90:78:AF:40:CC:75:01:DC
X509v3 Authority Key Identifier:
keyid:CF:21:52:6D:92:6C:B8:32:37:4C:8E:9B:D5:CE:1D:5B:BC:D6:60:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zyFSbZJsuDI3TI6b1c4dW7zWYIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112407/900DFF5E905911EB8F1EEE10C4F9AE02/3DF2A2EC3AB311EC977A5D60C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.202.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:b3:36:b1:c6:4b:ed:17:a0:2d:8e:a6:8e:5d:76:27:35:77:
74:54:c3:26:dc:6a:57:70:84:10:63:ff:dd:c6:96:41:a2:b0:
05:fe:a7:44:c0:b6:02:c7:fa:d3:27:6b:26:77:c9:e4:b8:b5:
17:72:a4:b1:28:a9:e5:9c:b8:98:ab:ca:c4:1e:36:63:c1:07:
20:44:3c:87:02:27:36:e7:92:08:f3:6d:d1:81:10:60:e0:a2:
ab:62:aa:99:42:64:90:4c:7c:4a:8c:57:27:70:74:36:85:d1:
89:63:f0:f1:13:8b:23:bb:b0:c7:5c:9b:8b:c0:2c:5e:63:16:
57:41:31:59:c6:a5:f5:15:67:e1:59:3f:60:dc:3a:0b:1a:af:
c9:26:f3:16:9e:3f:0b:79:55:40:64:59:0b:96:ce:7d:3f:81:
86:02:04:21:6e:69:1e:a1:65:fb:98:0d:5c:57:bc:35:7b:37:
eb:1b:80:68:19:5d:ef:b6:b1:4b:0f:fa:c2:47:f4:90:03:29:
ca:97:75:96:b5:99:67:6e:8f:e4:2a:3a:11:46:7d:39:3a:91:
33:78:9d:b0:3e:ff:c8:85:21:0a:15:22:9a:bc:58:40:7e:2e:
f0:a9:79:d5:7d:38:dd:92:2b:f7:07:7c:73:6c:d7:92:19:f5:
af:28:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:17:52 2026 by rpki-client