
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/976A9C302BAF11F0B6DD613FC4F9AE02.roa
File: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (raw, json)
Hash identifier: Gdu+/km9OM7ctxIRapvlJ9L445WBOrHYSmYqVRl94Tk=
Subject key identifier: 5A:6E:F6:7E:2E:D1:DF:AF:34:77:47:BC:0E:49:65:DA:FD:1E:41:98
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 028C
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/976A9C302BAF11F0B6DD613FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:17:15 +0000
ROA not before: Thu 08 Jan 2026 01:14:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 214143
IP address blocks: 103.71.93.0/24 maxlen: 24
103.71.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 01:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 652 (0x28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Jan 8 01:14:27 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4749b-4a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:80:e5:c0:82:35:45:ab:e8:f0:eb:de:3c:
07:74:e2:e6:6a:1f:fa:05:21:5f:d9:70:48:c9:c3:
4b:a6:74:90:0d:74:74:0b:b1:ec:52:28:2d:aa:92:
9a:43:89:63:14:c8:81:c1:52:68:50:5d:0d:99:ae:
d7:45:cb:f3:45:53:31:17:a2:dc:80:7e:0e:0b:55:
b9:ae:af:78:99:87:df:dd:d2:8a:a0:5b:05:65:38:
e4:24:71:bf:06:ac:36:58:d6:a4:dc:ff:e9:70:2f:
a5:be:89:dc:15:a3:30:7e:b2:2f:53:b7:ac:52:85:
48:18:3a:2a:d0:f0:53:0f:7e:98:a8:9c:6b:c6:5b:
cb:d1:53:9d:cd:02:e8:35:99:4b:1f:d8:a4:96:d6:
21:0d:a7:b0:2a:78:ea:7a:6e:be:24:e7:0e:d4:49:
a4:bb:4d:b2:52:64:1e:1f:a4:fd:ad:fd:55:22:0a:
a2:50:3b:fd:92:72:88:c8:36:30:e1:b2:58:0d:c8:
08:ad:87:04:1c:8e:6f:1a:f6:ad:65:ec:7a:24:ff:
91:38:50:a2:fa:09:0b:06:65:44:18:2d:38:05:28:
38:fc:6e:cf:00:22:ae:4b:6c:d3:f3:85:98:4a:b1:
ef:cd:75:18:c1:87:eb:f0:61:b3:d1:88:3b:12:6e:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:F6:7E:2E:D1:DF:AF:34:77:47:BC:0E:49:65:DA:FD:1E:41:98
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/976A9C302BAF11F0B6DD613FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.71.93.0-103.71.94.255
Signature Algorithm: sha256WithRSAEncryption
a5:cd:55:9f:65:bb:9a:55:c0:d0:81:bb:91:1d:14:fd:d5:e5:
2a:c1:9b:f4:7b:ab:63:1a:1b:d5:95:d1:5d:ec:0d:70:8b:c7:
12:fe:f7:d4:53:ae:1c:5b:4d:c9:47:da:ee:7c:bd:95:4b:8d:
9e:76:55:bd:2f:bf:af:07:f0:40:87:f6:c7:4e:a3:e5:7b:f7:
94:d0:fc:2e:42:2e:5b:ea:0f:81:3a:ce:ca:05:65:b7:13:3b:
c9:b6:57:52:94:b9:8a:b1:f0:47:cc:f1:26:90:bd:c5:f0:9a:
e6:12:0f:52:05:2f:72:bd:fa:ed:9a:c1:b3:6a:73:b4:c3:14:
62:56:83:b6:c3:88:20:d0:06:7e:11:f7:60:ee:04:5a:bb:a6:
3c:c8:a9:71:e2:20:f9:7a:e4:32:60:9d:8c:a9:d5:16:55:52:
3a:8b:89:d8:77:8e:1f:ee:d2:11:61:64:a3:dc:ab:3c:2a:31:
0d:78:f4:66:03:e2:99:8a:1f:b7:f8:a2:07:de:01:78:3a:44:
07:6e:43:f9:71:a9:0d:cc:c6:24:a4:cc:a1:a8:f5:03:20:d7:
e5:81:c6:c6:1d:0c:80:98:82:e4:92:7c:68:1d:bf:20:52:6b:
aa:34:8f:8e:e5:90:2b:d8:d7:dc:e8:5c:4b:f0:42:56:bb:8f:
58:a3:a3:60
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1
MUI5Nzc3RkEwHhcNMjYwMTA4MDExNDI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzQ5Yi00YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0K6A5cCCNUWr6PDr3jwHdOLmah/6BSFf2XBIycNLpnSQDXR0C7HsUigtqpKa
Q4ljFMiBwVJoUF0Nma7XRcvzRVMxF6LcgH4OC1W5rq94mYff3dKKoFsFZTjkJHG/
Bqw2WNak3P/pcC+lvoncFaMwfrIvU7esUoVIGDoq0PBTD36YqJxrxlvL0VOdzQLo
NZlLH9ikltYhDaewKnjqem6+JOcO1Emku02yUmQeH6T9rf1VIgqiUDv9knKIyDYw
4bJYDcgIrYcEHI5vGvatZex6JP+ROFCi+gkLBmVEGC04BSg4/G7PACKuS2zT84WY
SrHvzXUYwYfr8GGz0Yg7Em5ApwIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFFpu9n4u
0d+vNHdHvA5JZdr9HkGYMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF
MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTZEREIvRTFDRENERDJCRTFCMTFFREE2MUFDRDg0QzRGOUFFMDIvOTc2QTlDMzAy
QkFGMTFGMEI2REQ2MTNGQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU
BAIAATAOMAwDBABnR10DBABnR14wDQYJKoZIhvcNAQELBQADggEBAKXNVZ9lu5pV
wNCBu5EdFP3V5SrBm/R7q2MaG9WV0V3sDXCLxxL+99RTrhxbTclH2u58vZVLjZ52
Vb0vv68H8ECH9sdOo+V795TQ/C5CLlvqD4E6zsoFZbcTO8m2V1KUuYqx8EfM8SaQ
vcXwmuYSD1IFL3K9+u2awbNqc7TDFGJWg7bDiCDQBn4R92DuBFq7pjzIqXHiIPl6
5DJgnYyp1RZVUjqLidh3jh/u0hFhZKPcqzwqMQ149GYD4pmKH7f4ogfeAXg6RAdu
Q/lxqQ3MxiSkzKGo9QMg1+WBxsYdDICYguSSfGgdvyBSa6o0j47lkCvY19zoXEvw
Qla7j1ijo2A=
-----END CERTIFICATE-----
Generated at Fri Mar 6 02:46:22 2026 by rpki-client