
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
File: 9E173D98C3A011F09FB4B135C4F9AE02.roa (raw, json)
Hash identifier: Du9re4YnGbzI32FEa+5SNfgxUVGqyoMQw5ZZIhqirTQ=
Subject key identifier: 55:44:8D:E5:51:F0:2A:9F:17:57:EC:90:50:AB:B4:68:0E:C4:67:17
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C75
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
Signing time: Mon 25 May 2026 03:53:47 +0000
ROA not before: Mon 25 May 2026 03:53:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140666
IP address blocks: 103.84.110.0/24 maxlen: 24
103.198.203.0/24 maxlen: 24
2404:a140:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3189 (0xc75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: May 25 03:53:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a13c7cb-a2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:25:9a:04:c3:61:e7:ed:f6:63:5b:38:b1:
32:cf:b5:86:d7:4d:5a:b5:62:09:f5:ee:c9:2e:17:
ab:77:fa:07:60:7c:14:e0:c8:30:df:d5:e3:33:32:
1d:70:be:8c:43:0e:5e:d3:44:eb:3a:52:68:02:35:
72:5d:1e:95:34:c8:c5:05:dc:92:01:90:66:be:0f:
93:ac:44:a4:31:03:bd:f0:78:da:6c:9d:e2:4f:91:
6c:e4:97:47:65:c7:bb:ef:12:2e:c1:3d:0e:a4:d0:
0a:94:56:51:06:14:df:7c:c8:bf:37:44:77:fd:4a:
54:ae:d2:6f:95:28:29:ef:ba:3a:02:2c:f8:72:24:
3b:33:ff:1d:4d:b9:07:6e:3b:5d:6c:b2:68:1c:2d:
c2:fb:46:c2:4b:6f:7c:95:ac:f7:6a:5a:62:eb:f8:
68:e9:f6:2e:3e:54:47:74:e7:d9:55:bc:2b:17:07:
60:df:8c:f0:c3:07:a8:ca:54:cc:ff:de:34:42:98:
78:6f:3d:64:89:64:31:26:48:81:46:3f:a1:59:1e:
1f:0a:c1:5e:df:bc:a6:34:05:6c:9e:da:a5:98:03:
b3:62:4d:d9:e3:ed:6b:cd:f5:1b:c4:cd:76:2b:24:
d7:24:e4:6f:d0:9b:04:7d:aa:c3:a9:d6:77:49:f8:
4f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:8D:E5:51:F0:2A:9F:17:57:EC:90:50:AB:B4:68:0E:C4:67:17
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.110.0/24
103.198.203.0/24
IPv6:
2404:a140:50::/48
Signature Algorithm: sha256WithRSAEncryption
2b:7d:e8:25:09:44:31:60:65:ac:94:0f:5e:34:e1:0a:b4:2a:
97:31:0b:d7:a8:bc:64:a5:88:b2:4e:dc:1c:6b:f2:5b:5e:97:
7e:44:5f:c7:2f:eb:c9:65:ab:28:03:0f:7d:a4:75:e0:f8:f4:
ca:f8:af:7c:46:bd:95:4a:22:82:eb:ff:08:c8:45:34:7c:8d:
cb:64:7d:95:12:7d:17:41:6e:13:9f:0f:54:82:59:db:c4:bd:
5f:bd:c8:91:29:86:0f:99:3c:b8:05:fd:c7:fa:88:e4:79:d2:
5e:64:ed:25:2a:d1:91:22:ad:1c:53:da:7d:de:40:38:52:62:
62:c5:b1:1e:92:fe:24:6a:ac:66:6c:61:a2:6c:0d:7b:10:0b:
32:40:16:7a:1d:85:f3:6f:61:d2:ec:38:a2:70:b0:fa:88:2f:
77:f2:d3:32:5c:c5:af:59:01:41:ee:71:28:9e:21:4b:c1:23:
94:c1:77:37:43:fe:9c:ae:d0:05:25:8c:e9:f1:23:76:55:6c:
ff:d5:d0:3e:7e:c6:0a:6d:fb:85:18:91:06:03:be:1b:28:04:
1f:35:93:ba:bb:4a:5c:42:07:f8:13:38:96:8e:97:3e:85:aa:
ca:10:6e:66:d8:0d:43:a1:f2:d0:84:33:37:22:42:5f:99:53:
9d:cb:75:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:58:01 2026 by rpki-client