
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/AD46C158EDA911EA977E1C36C4F9AE02.roa
File: AD46C158EDA911EA977E1C36C4F9AE02.roa (raw, json)
Hash identifier: pFivcl6/2LaS0iSbDcUyygHwyMDGedaAY+O1WaW+9u8=
Subject key identifier: E7:48:05:73:68:F5:A5:E7:F0:29:44:09:4D:F0:4F:FB:68:31:37:05
Certificate issuer: /CN=A9120119/serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Certificate serial: 08D5
Authority key identifier: 9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/AD46C158EDA911EA977E1C36C4F9AE02.roa
Signing time: Fri 31 Jul 2026 17:34:26 +0000
ROA not before: Fri 31 Jul 2026 17:34:26 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135553
IP address blocks: 103.65.188.0/22 maxlen: 24
202.3.75.0/24 maxlen: 24
203.20.63.0/24 maxlen: 24
203.28.143.0/24 maxlen: 24
203.34.154.0/24 maxlen: 24
2405:d680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261 (0x8d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120119, serialNumber=9A44030403D50B71B998463B3AE56843B92595E1
Validity
Not Before: Jul 31 17:34:26 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6cdca2-29fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:d0:17:19:32:b3:1c:e8:16:37:70:f6:0e:
e6:ab:11:c6:c4:09:bd:bb:e0:f6:18:c6:78:0a:6a:
b0:e4:5e:50:70:39:67:52:8a:e7:7b:fb:6c:2f:99:
3a:cb:fe:d5:e1:34:a3:bd:78:21:b6:63:da:e5:34:
4d:25:2c:fc:57:04:d5:f6:6c:8d:12:ec:b3:d0:61:
0c:ea:c7:8d:3a:40:e8:47:e0:89:28:65:0a:a8:a6:
ea:46:b7:0e:48:6d:ef:3d:18:68:47:eb:53:76:dd:
3b:19:13:36:32:66:1c:1e:3f:f8:52:eb:ef:7f:38:
c0:bf:77:e8:a0:8d:b0:7d:15:21:53:b1:35:f0:5e:
3f:e7:2b:72:0d:cb:14:1c:cc:1b:70:65:e6:a7:b0:
0d:d2:4a:74:63:c7:1e:6c:f0:ec:c2:31:32:b0:ee:
09:18:fb:26:98:e7:b5:9e:91:1d:11:f9:38:58:33:
12:a2:3e:17:ee:d5:a1:c7:a8:70:33:68:87:20:1c:
46:df:0e:80:60:a9:b6:21:b7:46:25:39:27:49:23:
1d:81:b3:3c:55:49:fc:a2:e4:e1:3e:c5:4e:55:f2:
8a:c9:9b:03:c8:f9:f5:5c:29:fa:eb:e5:1c:47:98:
1e:45:38:a8:d0:24:ef:8d:8a:12:25:ee:8e:7c:2d:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:48:05:73:68:F5:A5:E7:F0:29:44:09:4D:F0:4F:FB:68:31:37:05
X509v3 Authority Key Identifier:
keyid:9A:44:03:04:03:D5:0B:71:B9:98:46:3B:3A:E5:68:43:B9:25:95:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/mkQDBAPVC3G5mEY7OuVoQ7klleE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mkQDBAPVC3G5mEY7OuVoQ7klleE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/AD46C158EDA911EA977E1C36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.65.188.0/22
202.3.75.0/24
203.20.63.0/24
203.28.143.0/24
203.34.154.0/24
IPv6:
2405:d680::/32
Signature Algorithm: sha256WithRSAEncryption
c1:99:10:61:e5:d1:85:a4:c3:7f:ef:8b:bf:12:b7:01:ac:f6:
f9:79:4a:dd:7a:f3:03:cd:fe:b8:f8:db:18:ae:d2:97:e6:63:
5b:8c:46:2a:6f:46:d7:6a:54:8f:59:7c:ef:af:2a:6a:cb:3d:
a5:11:b8:d5:c3:46:c5:a3:b5:b5:1d:66:ad:e6:8c:c1:1a:6d:
34:72:7c:6e:fb:6f:04:13:a7:49:9a:98:2c:2b:50:4a:c1:d6:
98:0c:c8:97:a4:91:d5:34:49:fa:64:ec:a4:7c:89:e6:08:0e:
6c:2c:81:21:80:fd:42:90:7b:a4:8b:ea:65:da:8f:32:3d:87:
0a:35:4b:82:29:05:af:c1:22:5b:c0:1c:d8:e6:ef:22:d7:dc:
52:1f:4f:11:df:2c:d0:62:ea:a3:b6:2e:4f:c1:83:28:89:4a:
30:e4:85:55:6e:c6:a6:55:f3:75:6a:bb:6f:eb:c3:78:72:41:
31:2f:99:17:c7:a5:2e:0c:3d:5d:cd:67:4e:dc:fe:7c:40:47:
f0:80:34:c1:dc:bd:89:ba:d8:ae:05:ce:ff:3c:33:29:a3:c1:
ca:fa:98:d0:94:54:8c:70:d3:b6:15:64:cf:9a:0a:e5:0f:48:
b4:68:7c:3c:76:df:3f:84:9b:80:1f:b0:94:46:01:73:0a:dd:
cc:a8:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:29:16 2026 by rpki-client