
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa
File: D6883996DABE11EAB12A5209C4F9AE02.roa (raw, json)
Hash identifier: zBlokYSAqztcyso1tQzNpvjPasNfqNMnXVvr4E7ZFzc=
Subject key identifier: 2B:A6:23:56:A7:C5:89:98:C3:87:74:FD:FC:EB:98:A1:44:92:35:94
Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Certificate serial: 08F8
Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa
Signing time: Fri 31 Jul 2026 21:40:45 +0000
ROA not before: Fri 31 Jul 2026 21:40:45 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132435
IP address blocks: 103.234.100.0/22 maxlen: 22
103.234.100.0/24 maxlen: 24
103.234.101.0/24 maxlen: 24
103.234.102.0/24 maxlen: 24
103.234.103.0/24 maxlen: 24
2401:d740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 20:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0
Validity
Not Before: Jul 31 21:40:45 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=6a6d165d-f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:65:81:f2:10:d8:81:9f:4a:cb:ed:01:2c:2b:
f8:16:63:7d:a7:a2:39:88:b3:5c:3c:19:3a:4c:7e:
f4:aa:68:26:a3:9b:13:d5:00:44:8e:80:db:91:79:
07:0f:8f:d4:71:cc:2c:9b:57:c5:a4:76:83:87:29:
f8:bb:e7:c1:48:5f:89:29:28:3d:1e:bd:1c:05:c3:
ea:3d:b3:3f:91:0e:c3:90:c6:29:ba:12:46:33:8a:
8b:da:67:cf:3f:15:47:2f:de:63:32:73:b1:2e:a5:
31:52:7a:8a:01:d0:8c:6b:68:35:25:fd:80:99:1f:
50:1a:e3:5b:3f:ee:56:72:59:5f:16:18:bd:32:01:
13:96:bd:32:41:9f:99:12:e9:04:05:47:6a:84:34:
88:b2:0a:75:7a:de:4b:46:c6:9c:e7:be:ff:62:ad:
46:52:e1:03:f4:27:72:ef:48:bd:22:de:30:9a:71:
31:b8:95:17:bc:5d:83:24:c9:40:48:9e:97:5c:f8:
14:9b:ce:de:f1:0d:bf:a0:dd:bc:bf:78:7f:07:dd:
77:04:ee:87:4b:9a:b8:14:62:3e:fc:f5:c1:87:22:
da:99:73:eb:3e:2a:8a:10:51:a4:0e:d4:6f:3b:b0:
a6:9f:f8:20:2b:5d:34:12:e4:55:4c:77:37:15:aa:
69:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:23:56:A7:C5:89:98:C3:87:74:FD:FC:EB:98:A1:44:92:35:94
X509v3 Authority Key Identifier:
keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/D6883996DABE11EAB12A5209C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.234.100.0/22
IPv6:
2401:d740::/32
Signature Algorithm: sha256WithRSAEncryption
38:9b:72:e0:51:a5:97:93:72:22:48:f7:76:0f:f3:f4:77:3b:
31:cd:71:c8:dd:d3:b9:62:87:ab:18:ef:81:18:aa:85:db:52:
74:ce:d8:c7:16:3e:b8:8d:9a:8e:0a:a6:c8:ae:e7:50:48:aa:
a0:c8:36:25:b9:c2:d0:3f:32:b4:ce:be:14:a0:c1:4b:ed:4b:
62:0f:b7:3c:1b:b6:07:c1:3a:ef:1d:cf:70:b5:6c:93:3e:64:
01:e6:60:4c:7e:25:ab:ab:3f:59:b8:ad:16:40:13:39:ce:78:
5d:88:9d:f0:79:93:2e:b9:b6:b3:31:e8:b0:9f:df:a5:fc:88:
5c:ca:fd:f5:db:11:0e:5d:56:14:60:37:45:ec:6d:76:82:ee:
d9:d8:9a:41:32:ba:25:a7:54:8b:76:e9:9f:3b:cb:92:71:2e:
b2:0e:da:73:1d:d0:63:86:16:e6:db:e8:7f:05:68:d4:6f:8c:
4c:a3:f6:9b:2d:ed:33:1e:96:0b:06:6c:9c:64:16:7c:af:bb:
a1:80:21:01:d5:29:f5:97:f4:17:f2:ee:c9:bf:a0:50:ad:a9:
57:f6:db:3b:62:8f:96:95:2e:7c:d3:34:6a:24:01:6e:f4:5b:
62:3a:60:18:f1:03:56:0c:84:63:8b:7c:07:1b:73:6f:fd:1f:
5f:4d:8b:04
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3
QjI0NUQ3QjAwHhcNMjYwNzMxMjE0MDQ1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkMTY1ZC1mNDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAymWB8hDYgZ9Ky+0BLCv4FmN9p6I5iLNcPBk6TH70qmgmo5sT1QBEjoDbkXkH
D4/Uccwsm1fFpHaDhyn4u+fBSF+JKSg9Hr0cBcPqPbM/kQ7DkMYpuhJGM4qL2mfP
PxVHL95jMnOxLqUxUnqKAdCMa2g1Jf2AmR9QGuNbP+5WcllfFhi9MgETlr0yQZ+Z
EukEBUdqhDSIsgp1et5LRsac577/Yq1GUuED9Cdy70i9It4wmnExuJUXvF2DJMlA
SJ6XXPgUm87e8Q2/oN28v3h/B913BO6HS5q4FGI+/PXBhyLamXPrPiqKEFGkDtRv
O7Cmn/ggK100EuRVTHc3FappzwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFCumI1an
xYmYw4d0/fzrmKFEkjWUMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB
QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkRBMUYvRkIxNEE4ODJEQUJDMTFFQUE2MjAyQzg1QzRGOUFFMDIvRDY4ODM5OTZE
QUJFMTFFQUIxMkE1MjA5QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ+pkMA0EAgACMAcDBQAkAddAMA0GCSqGSIb3DQEBCwUAA4IBAQA4
m3LgUaWXk3IiSPd2D/P0dzsxzXHI3dO5YoerGO+BGKqF21J0ztjHFj64jZqOCqbI
rudQSKqgyDYlucLQPzK0zr4UoMFL7UtiD7c8G7YHwTrvHc9wtWyTPmQB5mBMfiWr
qz9ZuK0WQBM5znhdiJ3weZMuubazMeiwn9+l/Ihcyv312xEOXVYUYDdF7G12gu7Z
2JpBMrolp1SLdumfO8uScS6yDtpzHdBjhhbm2+h/BWjUb4xMo/abLe0zHpYLBmyc
ZBZ8r7uhgCEB1Sn1l/QX8u7Jv6BQralX9ts7Yo+WlS580zRqJAFu9FtiOmAY8QNW
DIRji3wHG3Nv/R9fTYsE
-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:39 2026 by rpki-client