
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
File: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (raw, json)
Hash identifier: RbE+f7qfAHX4BzABpAaum6gSbLxyMymRSWSxEfeXg6A=
Subject key identifier: 5D:C9:62:A3:F6:B9:B9:C2:B0:C8:78:E1:48:F9:AA:EA:66:25:26:0F
Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Certificate serial: 042C
Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
Signing time: Fri 03 Apr 2026 00:33:40 +0000
ROA not before: Fri 03 Apr 2026 00:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136964
IP address blocks: 103.183.142.0/24 maxlen: 24
103.183.143.0/24 maxlen: 24
2001:df0:8840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 23:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Validity
Not Before: Apr 3 00:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cf0ae4-21ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:70:0b:89:1b:f5:03:3f:46:3c:f2:de:1e:
28:1d:a6:35:6b:43:00:35:fc:48:9c:e7:30:61:0c:
f9:49:27:d7:a6:75:87:aa:b7:94:15:9a:bd:83:6e:
00:11:c9:20:8d:f9:e7:b3:0f:b7:31:a5:87:15:3e:
be:7f:c4:f3:f4:00:1c:5a:13:a2:79:1a:df:c8:95:
14:02:fc:a3:12:a1:7d:03:f9:ab:73:5e:72:fa:c7:
9d:db:6c:28:69:8b:f2:43:b2:b1:c2:db:1e:f9:6c:
12:a0:19:f2:a8:9a:57:9a:aa:f6:07:a6:71:0a:72:
1f:fd:3f:11:a8:5d:3b:b6:73:5f:67:38:45:0d:43:
cb:39:c6:85:f2:4b:6a:51:9b:6c:2f:34:7c:c4:34:
59:75:f7:99:ca:33:c1:25:ad:37:ad:5f:de:8a:e7:
0c:da:7c:5c:30:1e:ad:3b:61:8c:33:59:b1:ac:b4:
fa:b2:7e:f3:19:ed:5d:60:b3:08:18:f7:f9:8f:80:
e1:3a:c6:dc:42:79:6a:14:e9:8d:e0:ba:ed:9b:36:
4c:08:51:61:56:0d:f9:95:a5:70:e8:b5:8e:2e:ed:
e0:be:8f:5a:1a:df:48:b7:6e:38:e5:31:d1:e4:ab:
3a:cf:9d:01:3a:7e:a1:ef:23:ee:87:55:7a:a5:b9:
aa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C9:62:A3:F6:B9:B9:C2:B0:C8:78:E1:48:F9:AA:EA:66:25:26:0F
X509v3 Authority Key Identifier:
keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.142.0/23
IPv6:
2001:df0:8840::/48
Signature Algorithm: sha256WithRSAEncryption
7a:82:8d:3a:90:2e:4c:67:e3:06:3d:39:97:85:ac:96:61:37:
5c:a3:bd:c4:24:96:74:89:d1:51:97:16:c2:04:a1:9b:9b:cb:
e7:c5:23:c5:7f:b6:16:6e:b0:c3:3a:6c:73:5c:9b:d2:c7:7d:
7d:ac:a4:41:45:46:2c:33:38:e0:8b:ea:07:1c:82:54:2e:56:
6b:2e:0e:14:d7:48:83:84:3b:bf:80:a5:76:3d:0e:e5:43:e2:
52:0b:57:d9:94:2f:08:ed:cf:24:6c:3a:91:cc:a7:b6:9c:a2:
f6:4f:6e:61:56:7c:be:2b:b9:eb:ef:4c:ff:84:58:ab:7b:5c:
23:30:be:97:51:03:2e:e4:3d:6e:7a:7e:ab:14:3b:21:a0:54:
81:e8:f4:e2:ad:8f:20:43:fb:e3:bb:5b:48:c0:7c:d9:87:31:
5d:ca:8a:8f:a1:e6:4d:73:6e:2f:6b:19:84:0e:62:0a:34:3a:
79:7d:d4:4f:08:dc:5c:59:b8:18:3c:fc:5c:6f:a1:9e:08:fd:
89:c5:09:c4:f3:7c:46:30:68:b4:0a:72:17:0d:7c:8b:48:e2:
ab:9b:de:10:00:4c:af:d5:56:b9:43:6d:22:c2:03:e1:07:76:
e1:74:e6:ca:a4:a0:03:55:ef:14:ed:dd:2f:22:23:1b:da:22:
32:83:70:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:13:46 2026 by rpki-client