
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/C3C44D22ECA311EEAD3CC112C4F9AE02.roa
File: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (raw, json)
Hash identifier: ZgyNp/+kaqwVStVmnjZ3bnZAYkWgSQvrw8uSupm7tj4=
Subject key identifier: 84:E4:CB:E4:3E:B7:35:15:2B:11:82:60:59:7C:8E:49:E1:CB:B8:53
Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Certificate serial: 1939
Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/C3C44D22ECA311EEAD3CC112C4F9AE02.roa
Signing time: Wed 26 Aug 2026 16:30:16 +0000
ROA not before: Wed 26 Aug 2026 16:30:16 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 9009
IP address blocks: 103.100.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 16:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6457 (0x1939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C
Validity
Not Before: Aug 26 16:30:16 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8f1498-8f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1d:28:42:f0:eb:82:10:aa:d1:48:88:79:ee:
95:88:91:08:7a:c0:32:37:d4:15:9d:ff:0a:8c:ac:
85:7f:2a:2f:01:d2:20:9f:64:00:f5:53:b8:8b:75:
0f:91:f6:15:15:c7:a1:eb:43:6b:df:14:1b:81:62:
83:24:38:13:ab:98:1c:33:4a:11:38:ac:cf:77:a6:
a3:f1:03:25:d6:b4:72:22:d3:d3:30:df:8c:8d:da:
54:3c:56:19:5d:76:90:68:6e:44:38:f0:70:4a:fd:
84:cf:5b:1d:dd:fa:37:6f:b7:58:fd:ec:9b:9e:da:
d2:a2:b0:e4:96:ab:36:04:c3:c2:c9:55:25:c2:e9:
6a:9d:ca:07:36:ce:0d:af:4c:f5:32:86:f0:9e:ec:
85:c3:d5:27:81:65:8a:11:97:37:24:8c:09:e4:7f:
16:36:e3:7a:d2:dc:47:1b:64:66:cf:b1:be:d5:04:
39:85:58:44:8d:65:69:88:47:8c:0a:f4:77:58:05:
8e:80:15:73:34:1f:c2:2b:71:09:14:49:c6:15:34:
c7:ce:ed:31:8f:f1:52:b8:0c:41:4b:48:d7:56:56:
e4:b4:78:81:46:17:96:be:57:98:7e:d0:e4:32:bd:
54:ff:0c:a9:8b:77:55:af:31:25:ee:76:00:22:e8:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:CB:E4:3E:B7:35:15:2B:11:82:60:59:7C:8E:49:E1:CB:B8:53
X509v3 Authority Key Identifier:
keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/C3C44D22ECA311EEAD3CC112C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.100.122.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:53:24:79:5f:15:9a:dd:7d:e2:ca:d0:b0:3f:83:8c:af:bb:
d6:f7:f0:55:d5:26:d9:71:c7:18:3f:ea:9b:94:0e:a5:9e:11:
12:f0:bf:9d:d2:e7:b6:fe:fb:8b:0c:67:63:6a:63:91:80:45:
36:6c:e2:ad:13:20:fe:62:e6:34:d8:57:ae:75:6b:12:c4:54:
32:41:8e:71:67:9f:af:94:c0:06:57:fb:cb:ef:41:5f:ce:46:
c4:c9:0d:17:2b:b0:ab:4c:27:9b:86:b9:2e:78:aa:40:29:c7:
db:e8:f1:66:6b:b7:3e:ec:97:6a:03:bc:be:da:26:51:c0:fc:
ea:35:5b:8a:b0:c9:95:a5:1a:08:81:46:4e:1c:7b:59:3b:d7:
64:b1:b9:10:72:f3:f7:06:3d:ad:a4:ff:33:5f:dd:53:c5:67:
b4:7d:d8:bf:dc:12:fd:24:aa:35:dc:ed:16:26:83:99:10:ee:
b0:5c:89:08:25:e3:61:a4:55:2b:c9:75:e2:ed:38:9c:eb:de:
aa:55:d3:51:f9:0e:3b:31:a7:c1:dd:99:c1:f5:97:ff:e9:2f:
a3:d9:c8:1b:56:6b:08:cd:e2:4b:7b:17:a3:4d:38:84:05:53:
7c:6f:f5:46:5b:98:3e:b3:35:93:7f:fb:e3:88:85:bd:ba:4d:
cf:53:cc:fc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICGTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw
MTgwMkE5NUMwHhcNMjYwODI2MTYzMDE2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YThmMTQ5OC04ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7h0oQvDrghCq0UiIee6ViJEIesAyN9QVnf8KjKyFfyovAdIgn2QA9VO4i3UP
kfYVFceh60Nr3xQbgWKDJDgTq5gcM0oROKzPd6aj8QMl1rRyItPTMN+MjdpUPFYZ
XXaQaG5EOPBwSv2Ez1sd3fo3b7dY/eybntrSorDklqs2BMPCyVUlwulqncoHNs4N
r0z1MobwnuyFw9UngWWKEZc3JIwJ5H8WNuN60txHG2Rmz7G+1QQ5hVhEjWVpiEeM
CvR3WAWOgBVzNB/CK3EJFEnGFTTHzu0xj/FSuAxBS0jXVlbktHiBRheWvleYftDk
Mr1U/wypi3dVrzEl7nYAIuiUqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFITky+Q+
tzUVKxGCYFl8jknhy7hTMB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw
QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFFRDQvQkVDOUFDODJCMEJEMTFFNzkyQTJCRjMwQzRGOUFFMDIvQzNDNDREMjJF
Q0EzMTFFRUFEM0NDMTEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ2R6MA0GCSqGSIb3DQEBCwUAA4IBAQALUyR5XxWa3X3iytCwP4OM
r7vW9/BV1SbZcccYP+qblA6lnhES8L+d0ue2/vuLDGdjamORgEU2bOKtEyD+YuY0
2FeudWsSxFQyQY5xZ5+vlMAGV/vL70FfzkbEyQ0XK7CrTCebhrkueKpAKcfb6PFm
a7c+7JdqA7y+2iZRwPzqNVuKsMmVpRoIgUZOHHtZO9dksbkQcvP3Bj2tpP8zX91T
xWe0fdi/3BL9JKo13O0WJoOZEO6wXIkIJeNhpFUryXXi7Tic696qVdNR+Q47MafB
3ZnB9Zf/6S+j2cgbVmsIzeJLexejTTiEBVN8b/VGW5g+szWTf/vjiIW9uk3PU8z8
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:09:27 2026 by rpki-client