
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/2F5670EAABF411F0A51AED16C4F9AE02.roa
File: 2F5670EAABF411F0A51AED16C4F9AE02.roa (raw, json)
Hash identifier: G7nOpaEeJJxWIo3Us0CUcma/QDCYjsfPhli5/OvVTII=
Subject key identifier: 1B:4E:60:2A:E5:1F:AD:92:23:A1:BB:9C:0F:30:33:6E:88:B6:4A:5E
Certificate issuer: /CN=A9112B24/serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516
Certificate serial: 012A
Authority key identifier: CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/2F5670EAABF411F0A51AED16C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:16:04 +0000
ROA not before: Sat 18 Oct 2025 07:29:30 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.69.120.0/22 maxlen: 24
203.88.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl
rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:34:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298 (0x12a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112B24, serialNumber=CA64B17311952093CD4D60DAAF17B6ACA0F7A516
Validity
Not Before: Oct 18 07:29:30 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a5a9b4-5bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:1b:c6:98:13:f0:52:87:1a:8f:bc:4b:95:
01:f9:43:c1:84:af:89:cf:cf:16:d1:77:d0:24:99:
d3:5d:69:61:b3:3a:03:4a:22:d3:1c:e2:92:4b:21:
7a:fb:a2:c7:43:05:93:e7:c6:f2:05:b6:c2:84:d6:
aa:49:34:3c:c7:21:1a:26:14:96:2d:16:6a:30:02:
61:c1:39:9e:ec:0d:38:08:a1:f0:0f:e7:ea:14:5c:
1b:36:8a:6f:6f:d3:43:c1:7c:33:61:d2:e6:3e:f6:
05:ee:b7:a4:c4:fa:78:eb:ec:79:de:4f:b7:f5:29:
6d:58:ad:9d:92:74:1e:84:c7:fb:53:64:f8:5c:73:
f0:08:ad:72:82:a0:4e:4e:69:b4:b3:17:c5:a6:4d:
f7:25:87:ad:e0:30:c0:91:ed:41:35:bd:44:5f:d2:
88:e6:b3:45:70:cc:c1:1d:04:77:32:da:76:1a:84:
9f:93:66:ff:c5:c0:b2:2a:ff:64:63:89:03:74:1e:
83:82:06:33:94:cd:41:1e:e0:d2:99:8f:13:ee:be:
20:2f:da:b6:61:af:8d:8f:77:54:00:3b:e9:79:6b:
44:99:34:6a:a7:a6:85:0d:7d:02:00:06:4e:1e:ef:
0e:04:bb:c6:f8:b5:21:13:41:b7:60:27:fd:52:f8:
64:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4E:60:2A:E5:1F:AD:92:23:A1:BB:9C:0F:30:33:6E:88:B6:4A:5E
X509v3 Authority Key Identifier:
keyid:CA:64:B1:73:11:95:20:93:CD:4D:60:DA:AF:17:B6:AC:A0:F7:A5:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/ymSxcxGVIJPNTWDarxe2rKD3pRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymSxcxGVIJPNTWDarxe2rKD3pRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B24/8A16FF725BA011EF9F2F2361C4F9AE02/2F5670EAABF411F0A51AED16C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.120.0/22
203.88.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:17:96:58:93:be:92:0b:af:8e:da:e8:94:80:92:0d:98:6b:
b5:34:27:98:ff:17:70:1f:2f:d0:dd:0a:ac:41:c9:8c:7b:37:
f0:f4:b1:f1:27:89:89:c8:a1:a9:4b:66:05:ea:c9:c2:d6:32:
ce:8f:a6:3d:2c:19:f7:7d:eb:2d:a9:5a:17:77:d6:d3:a7:5c:
f1:22:30:33:90:e5:0b:95:ab:7e:31:23:2f:f4:2b:05:f8:a8:
2e:d9:e3:32:19:1f:51:18:de:a1:05:2b:42:3d:bc:fd:4d:84:
01:9b:31:2a:3d:dc:d6:63:f8:ab:4d:17:70:56:cb:a7:e3:b0:
c4:25:26:85:df:27:11:68:ea:71:df:8d:e0:6e:c6:a0:24:08:
5d:2e:4f:19:54:2e:41:53:bd:89:4c:7f:8c:a1:88:5a:eb:57:
ad:67:72:88:4a:be:0c:a9:54:c8:1d:c1:61:e6:c3:4b:e3:c2:
df:d9:42:20:ad:bc:db:ed:09:ad:c5:ae:98:75:30:7c:75:f3:
8b:23:c9:1b:ed:c6:d7:a4:c8:06:8a:a7:5d:ce:e9:9e:b6:52:
d2:86:04:ee:d1:a0:5e:15:32:5b:d2:eb:ff:8e:aa:cf:d6:45:
22:64:21:92:00:78:55:bf:c1:63:e0:07:9e:18:66:1c:a3:d3:
3c:f4:8e:fa
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJCMjQxMTAvBgNVBAUTKENBNjRCMTczMTE5NTIwOTNDRDRENjBEQUFGMTdCNkFD
QTBGN0E1MTYwHhcNMjUxMDE4MDcyOTMwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTliNC01YmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmE8bxpgT8FKHGo+8S5UB+UPBhK+Jz88W0XfQJJnTXWlhszoDSiLTHOKSSyF6
+6LHQwWT58byBbbChNaqSTQ8xyEaJhSWLRZqMAJhwTme7A04CKHwD+fqFFwbNopv
b9NDwXwzYdLmPvYF7rekxPp46+x53k+39SltWK2dknQehMf7U2T4XHPwCK1ygqBO
Tmm0sxfFpk33JYet4DDAke1BNb1EX9KI5rNFcMzBHQR3Mtp2GoSfk2b/xcCyKv9k
Y4kDdB6DggYzlM1BHuDSmY8T7r4gL9q2Ya+Nj3dUADvpeWtEmTRqp6aFDX0CAAZO
Hu8OBLvG+LUhE0G3YCf9UvhkGQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBtOYCrl
H62SI6G7nA8wM26ItkpeMB8GA1UdIwQYMBaAFMpksXMRlSCTzU1g2q8Xtqyg96UW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkIyNC84QTE2RkY3MjVC
QTAxMUVGOUYyRjIzNjFDNEY5QUUwMi95bVN4Y3hHVklKUE5UV0RhcnhlMnJLRDNw
UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ltU3hjeEdWSUpQTlRXRGFyeGUycktEM3BSWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTJCMjQvOEExNkZGNzI1QkEwMTFFRjlGMkYyMzYxQzRGOUFFMDIvMkY1NjcwRUFB
QkY0MTFGMEE1MUFFRDE2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ0V4AwQCy1hsMA0GCSqGSIb3DQEBCwUAA4IBAQA/F5ZYk76SC6+O
2uiUgJINmGu1NCeY/xdwHy/Q3QqsQcmMezfw9LHxJ4mJyKGpS2YF6snC1jLOj6Y9
LBn3festqVoXd9bTp1zxIjAzkOULlat+MSMv9CsF+Kgu2eMyGR9RGN6hBStCPbz9
TYQBmzEqPdzWY/irTRdwVsun47DEJSaF3ycRaOpx343gbsagJAhdLk8ZVC5BU72J
TH+MoYha61etZ3KISr4MqVTIHcFh5sNL48Lf2UIgrbzb7Qmtxa6YdTB8dfOLI8kb
7cbXpMgGiqddzumetlLShgTu0aBeFTJb0uv/jqrP1kUiZCGSAHhVv8Fj4AeeGGYc
o9M89I76
-----END CERTIFICATE-----
Generated at Sat Mar 21 22:28:26 2026 by rpki-client