
$ rpki-client -vvf rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/BA3B98B2FB0D11F098EF6A0C746F56BC.roa
File: BA3B98B2FB0D11F098EF6A0C746F56BC.roa (raw, json)
Hash identifier: x05h0nUjM+m7Xj3DDk1u9/bZc6i1XSo8GdyroMYaZ8w=
Subject key identifier: B0:F5:E9:66:38:FA:82:6F:94:1C:43:6E:F4:30:97:81:E4:5B:B2:59
Certificate issuer: /CN=A9133065/serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Certificate serial: 6B
Authority key identifier: 65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/BA3B98B2FB0D11F098EF6A0C746F56BC.roa
Signing time: Wed 28 Jan 2026 11:43:34 +0000
ROA not before: Wed 28 Jan 2026 11:43:34 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 395793
IP address blocks: 103.95.74.0/24 maxlen: 24
103.95.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 06:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9133065, serialNumber=654BCFD70ABC60B54139285305EFD0E315C3368E
Validity
Not Before: Jan 28 11:43:34 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=6979f666-5c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:6d:f9:89:0d:32:b4:c1:d2:58:ef:11:e2:
40:17:57:7a:2e:a3:d4:4d:5c:6a:06:46:30:77:44:
c1:c5:bd:5b:bd:7b:fd:e2:2d:7a:30:58:a8:79:be:
5e:98:14:8a:ad:f2:43:21:c2:48:0f:d5:af:95:00:
bb:4c:0e:75:fb:77:f5:25:51:5b:f1:4f:3e:6e:28:
47:bc:b8:99:8a:8c:63:e9:86:63:bb:57:2d:e6:31:
c8:0d:d6:2b:3e:aa:4e:e7:b8:86:12:b0:76:fd:4a:
47:12:94:1e:e1:6e:72:76:7b:d5:58:36:eb:1d:c1:
d9:d6:28:49:38:53:a4:c5:b3:6d:6e:95:9a:cc:6c:
43:79:b0:08:84:38:f7:42:74:cb:3b:2c:b0:5e:3b:
e9:94:b3:e3:eb:cc:a6:70:98:bb:7c:8e:62:e6:ca:
85:66:60:2c:20:c9:83:0d:f8:85:14:bc:46:65:70:
cd:0e:41:44:db:f1:d3:d0:80:0c:c3:86:93:4d:8a:
44:77:84:62:f4:f3:24:fc:7c:78:8a:0f:53:03:80:
8a:b6:b0:57:5a:21:73:7c:db:54:84:6a:6f:09:16:
35:9c:28:13:91:0f:29:0e:92:b7:e4:36:fb:e0:fa:
6d:68:ab:7a:ab:7a:ce:86:3f:8f:49:7b:e1:5f:a5:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F5:E9:66:38:FA:82:6F:94:1C:43:6E:F4:30:97:81:E4:5B:B2:59
X509v3 Authority Key Identifier:
keyid:65:4B:CF:D7:0A:BC:60:B5:41:39:28:53:05:EF:D0:E3:15:C3:36:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUvP1wq8YLVBOShTBe_Q4xXDNo4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133065/DB3514B0823311F0939BFF3FC4F9AE02/BA3B98B2FB0D11F098EF6A0C746F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.95.74.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:bd:48:a9:1b:92:50:bd:2f:64:5b:63:11:8a:48:37:87:38:
0a:37:c1:37:ff:79:6e:94:1b:e4:c9:18:bc:5a:ad:f6:23:4f:
23:bb:1d:d1:a6:35:d7:72:1a:cc:a7:1e:1f:68:72:85:13:66:
11:bb:15:1a:88:5a:89:f1:d9:8a:9a:61:6b:8c:80:dc:dc:37:
bb:0c:7a:b6:52:94:1c:c7:97:00:13:18:87:10:5e:89:fa:a5:
4a:12:bb:f4:c7:7f:a0:19:5f:ee:15:37:64:5d:9b:eb:36:eb:
aa:c6:9d:40:0d:c9:d6:45:17:64:a2:9c:58:35:28:86:ef:dc:
33:e9:a6:2f:a1:db:f0:ea:57:ea:ab:14:d9:0a:ba:f3:4a:93:
34:3b:e9:9d:49:e4:b7:4f:d0:4b:85:e7:38:74:c8:c8:da:14:
c6:f7:58:8f:f4:9b:29:70:ec:e8:b9:3c:83:48:59:90:d7:ec:
18:2d:b4:ba:b6:db:b2:0f:af:05:09:36:8f:9c:20:e5:e7:b4:
35:82:11:c9:46:dc:0d:79:49:4a:2a:fb:8e:d2:5f:e5:9c:f4:
df:98:ba:7b:a1:aa:8b:63:fe:a9:7f:43:2b:29:8e:43:3b:97:
0b:93:05:f6:39:0b:6b:a9:dd:5f:1c:5b:c6:41:ae:77:50:f8:
39:5c:05:d5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
MzA2NTExMC8GA1UEBRMoNjU0QkNGRDcwQUJDNjBCNTQxMzkyODUzMDVFRkQwRTMx
NUMzMzY4RTAeFw0yNjAxMjgxMTQzMzRaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMMDTY5NzlmNjY2LTVjNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjqW35iQ0ytMHSWO8R4kAXV3ouo9RNXGoGRjB3RMHFvVu9e/3iLXowWKh5vl6Y
FIqt8kMhwkgP1a+VALtMDnX7d/UlUVvxTz5uKEe8uJmKjGPphmO7Vy3mMcgN1is+
qk7nuIYSsHb9SkcSlB7hbnJ2e9VYNusdwdnWKEk4U6TFs21ulZrMbEN5sAiEOPdC
dMs7LLBeO+mUs+PrzKZwmLt8jmLmyoVmYCwgyYMN+IUUvEZlcM0OQUTb8dPQgAzD
hpNNikR3hGL08yT8fHiKD1MDgIq2sFdaIXN821SEam8JFjWcKBORDykOkrfkNvvg
+m1oq3qres6GP49Je+Ffpe5/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsPXpZjj6
gm+UHENu9DCXgeRbslkwHwYDVR0jBBgwFoAUZUvP1wq8YLVBOShTBe/Q4xXDNo4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzMDY1L0RCMzUxNEIwODIz
MzExRjA5MzlCRkYzRkM0RjlBRTAyL1pVdlAxd3E4WUxWQk9TaFRCZV9RNHhYRE5v
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWlV2UDF3cThZTFZCT1NoVEJlX1E0eFhETm80LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MzA2NS9EQjM1MTRCMDgyMzMxMUYwOTM5QkZGM0ZDNEY5QUUwMi9CQTNCOThCMkZC
MEQxMUYwOThFRjZBMEM3NDZGNTZCQy5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWdfSjANBgkqhkiG9w0BAQsFAAOCAQEAqr1IqRuSUL0vZFtj
EYpIN4c4CjfBN/95bpQb5MkYvFqt9iNPI7sd0aY113IazKceH2hyhRNmEbsVGoha
ifHZippha4yA3Nw3uwx6tlKUHMeXABMYhxBeifqlShK79Md/oBlf7hU3ZF2b6zbr
qsadQA3J1kUXZKKcWDUohu/cM+mmL6Hb8OpX6qsU2Qq680qTNDvpnUnkt0/QS4Xn
OHTIyNoUxvdYj/SbKXDs6Lk8g0hZkNfsGC20urbbsg+vBQk2j5wg5ee0NYIRyUbc
DXlJSir7jtJf5Zz035i6e6Gqi2P+qX9DKymOQzuXC5MF9jkLa6ndXxxbxkGud1D4
OVwF1Q==
-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:58 2026 by rpki-client