
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa
File: DD9876F4B19911EFA6C3FD55C4F9AE02.roa (raw, json)
Hash identifier: W8q2ly/PPCr3lwwKvrJUMlu8idGuOCMWK2eAe3nph+o=
Subject key identifier: 93:79:23:62:A9:03:52:FE:AF:17:A6:C3:B5:6B:55:9D:FB:28:DA:F6
Certificate issuer: /CN=A912E99B/serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Certificate serial: 07E9
Authority key identifier: 24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa
Signing time: Sun 02 Aug 2026 22:42:31 +0000
ROA not before: Sun 02 Aug 2026 22:42:31 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151330
IP address blocks: 103.152.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 21:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2025 (0x7e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E99B, serialNumber=246F6A4BE15B00CFEC0DC399A5E8439F939C9174
Validity
Not Before: Aug 2 22:42:31 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6fc7d7-45c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e6:f3:1b:13:f1:c8:a6:93:24:7e:14:b2:de:
50:a0:16:39:f3:79:d3:00:85:eb:45:b7:7a:db:2b:
2d:51:00:76:15:ed:f6:f9:a2:30:f4:fe:9f:13:21:
a4:9e:44:04:d6:74:01:40:b0:59:6d:e4:87:71:17:
75:11:ea:29:91:69:e2:75:91:9d:fa:fa:6f:75:45:
17:67:c6:02:57:54:02:22:ca:42:f1:2b:d5:54:63:
66:bd:2d:1e:52:08:24:c4:78:c9:e1:8b:f1:ca:eb:
88:58:88:5b:61:b8:07:42:8d:a0:b8:37:da:4a:be:
2b:29:6d:f9:89:ef:a6:75:d3:68:89:e7:fd:d3:6f:
c0:f0:99:5f:66:55:71:a8:36:8e:56:eb:6b:64:b3:
12:dd:25:5b:1a:3f:ea:eb:a3:84:1f:1f:fe:99:67:
98:36:a0:95:ff:1f:64:ca:f7:9b:c6:12:62:ed:28:
f7:25:12:01:ef:2f:1f:74:e7:bd:63:60:ee:f5:f4:
46:42:bb:3e:bc:d6:ec:84:6a:7d:9d:aa:b8:e2:50:
f5:ec:a4:a8:1e:78:b7:65:65:c4:82:2f:f7:9e:4a:
f9:e7:c6:47:1d:54:bb:ca:71:a0:94:79:d8:d1:9f:
fb:a3:25:bc:d7:0d:2f:19:01:81:c6:8a:d7:30:0f:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:79:23:62:A9:03:52:FE:AF:17:A6:C3:B5:6B:55:9D:FB:28:DA:F6
X509v3 Authority Key Identifier:
keyid:24:6F:6A:4B:E1:5B:00:CF:EC:0D:C3:99:A5:E8:43:9F:93:9C:91:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/JG9qS-FbAM_sDcOZpehDn5OckXQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JG9qS-FbAM_sDcOZpehDn5OckXQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E99B/733DA4E85B3311EB800CB80CC4F9AE02/DD9876F4B19911EFA6C3FD55C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.100.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:4b:8e:68:94:dc:7f:5e:ef:2a:9b:2a:7e:47:43:93:a1:ec:
fd:b1:73:72:e1:0f:f1:c7:19:60:6c:6a:54:16:82:01:83:31:
19:98:9e:7e:79:4e:e3:4e:48:e4:79:d2:5c:80:18:60:73:3e:
6b:21:b4:73:d3:9c:c5:3f:e3:cf:3e:de:c9:ee:82:01:c0:a7:
d2:8e:9a:f1:e0:ee:7f:27:0d:4d:52:21:4d:5d:3b:0c:7b:e8:
6d:04:a6:47:d7:d1:be:b0:16:4f:6b:12:28:2d:74:42:09:a7:
4f:45:86:b2:b8:8a:f5:b8:8b:61:14:e1:41:dd:84:d4:db:2b:
2c:d2:68:5a:29:c4:f2:a2:1a:3c:21:f5:ff:26:60:86:51:e5:
f6:2e:60:d9:6f:cd:f4:b5:47:8b:1e:34:71:bb:0e:4a:51:88:
a1:73:03:87:78:7e:c7:c5:35:ac:a8:35:1f:8d:28:3e:b3:cb:
27:33:a7:e6:06:18:ed:f5:5c:02:ed:32:2f:4a:a8:03:fc:99:
fa:ea:76:42:b2:05:db:13:5e:90:dd:ec:b7:02:02:fa:dd:b7:
e1:56:50:04:c2:30:f6:0e:8b:e6:8b:ae:bc:66:14:07:f8:8e:
31:17:a1:20:ac:c9:1b:eb:eb:2d:6d:8e:4a:aa:03:56:2c:ac:
0c:90:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 17:05:12 2026 by rpki-client