
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa
File: 2FD106D2B92711E99D48BA23C4F9AE02.roa (raw, json)
Hash identifier: Kp314Z/IGVTSIepcMGXMRI/Il28yCatLCD2MLmcgYVM=
Subject key identifier: 80:C9:5B:BA:67:3D:EA:90:1C:61:8F:AE:74:29:61:32:B1:BB:3F:85
Certificate issuer: /CN=A912A9B1/serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Certificate serial: 0EAE
Authority key identifier: 25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa
Signing time: Thu 06 Aug 2026 18:35:08 +0000
ROA not before: Thu 06 Aug 2026 18:35:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 133936
IP address blocks: 103.140.138.0/24 maxlen: 24
103.140.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3758 (0xeae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A9B1, serialNumber=2523ACE16FEFDE6239E268C4E046B6C8C5F61965
Validity
Not Before: Aug 6 18:35:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a74d3dc-1b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:af:9d:d3:00:2f:f7:50:c9:f1:c6:79:34:53:
34:df:ed:19:a3:01:40:d3:61:f1:f1:75:92:22:9f:
83:76:27:e5:3c:e7:10:f8:d9:27:1c:27:c7:0c:a8:
0f:06:e3:6d:3c:0f:1b:d9:3c:34:ed:9e:15:f8:2d:
32:5b:2d:82:9e:7d:f8:ae:fc:09:d8:65:6f:7f:be:
38:b9:2c:98:9f:c0:09:dd:f0:a0:32:d5:90:14:24:
24:d3:32:d0:10:f4:ae:14:ba:22:60:60:a2:58:b2:
be:95:12:e7:0d:75:3a:78:29:86:0a:e5:5e:da:30:
56:36:2a:00:00:26:98:11:9d:69:38:e2:f5:58:af:
49:4c:8a:90:7e:48:c1:4f:b6:16:d4:37:f0:85:dd:
33:ec:b5:c6:b3:9c:d6:e8:82:5a:26:c9:9a:cb:7d:
3d:d7:a9:c8:5e:04:51:47:fb:db:be:f4:01:2c:7e:
f6:17:da:59:82:7f:0b:bf:28:5f:d8:55:a3:36:57:
1e:3b:a5:a5:45:4a:12:e9:4f:84:a6:25:43:bb:0a:
11:59:cb:67:70:59:a3:bb:59:ef:f6:8b:8a:51:3b:
71:76:78:c7:ea:dc:57:16:8e:ed:06:2c:d0:ac:a4:
29:dc:71:e2:87:a0:f7:f2:87:7e:c5:a9:c7:39:72:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C9:5B:BA:67:3D:EA:90:1C:61:8F:AE:74:29:61:32:B1:BB:3F:85
X509v3 Authority Key Identifier:
keyid:25:23:AC:E1:6F:EF:DE:62:39:E2:68:C4:E0:46:B6:C8:C5:F6:19:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/JSOs4W_v3mI54mjE4Ea2yMX2GWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSOs4W_v3mI54mjE4Ea2yMX2GWU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A9B1/5CACF6A8B92611E997528922C4F9AE02/2FD106D2B92711E99D48BA23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.138.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:81:4e:0a:27:92:f3:78:cd:95:2f:a3:e6:1a:e9:cb:52:4f:
8c:37:e9:20:d1:a3:d2:a9:ad:12:34:a4:f6:af:c3:bf:ff:c8:
23:37:45:91:84:9b:bd:93:a9:40:b5:55:d8:90:97:1a:c9:88:
9a:80:d0:05:07:d9:2d:d8:70:67:1e:04:cf:bb:a2:fe:ce:b8:
9c:a2:99:c3:74:a7:92:3d:63:cc:e2:c0:5b:17:07:3d:1b:74:
f8:2a:ee:de:1d:58:d6:40:ed:e8:10:97:e3:45:b0:79:b3:23:
14:07:34:ca:6b:6a:b5:13:0d:e0:74:6a:12:63:97:aa:1b:73:
d0:d0:06:88:7a:c6:46:a3:6a:f6:7e:dd:c0:ac:23:d6:71:45:
7c:17:68:d6:b7:7d:c6:75:ff:1a:00:c9:72:a3:c3:a0:a4:f3:
68:fd:02:84:7d:47:a5:84:89:7b:6a:8b:73:03:65:c3:43:2d:
34:36:07:a0:a5:52:11:b8:15:fe:a9:8f:2d:8d:be:2d:52:5c:
63:3f:b2:5a:dc:ad:51:2d:fa:1b:96:16:f9:94:a2:52:f1:18:
73:16:f4:f8:31:f4:2e:b0:14:5d:a5:e3:5e:13:14:a1:9a:9c:
67:f1:51:07:35:ed:00:55:2a:1e:38:ec:b2:17:6a:c7:19:fa:
39:2e:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:46 2026 by rpki-client