
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7C5A543CBCB711F08806E909C4F9AE02.roa
File: 7C5A543CBCB711F08806E909C4F9AE02.roa (raw, json)
Hash identifier: TnUIMsTLLUWLq6RKFJvvlaICGc8yJRHnp3bZVmKD+K8=
Subject key identifier: FE:BB:97:0E:93:E6:B4:11:00:11:51:07:CD:6F:C3:C6:3F:84:D1:47
Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial: F6
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7C5A543CBCB711F08806E909C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:45:56 +0000
ROA not before: Sun 09 Nov 2025 04:21:59 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 401696
IP address blocks: 103.212.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Validity
Not Before: Nov 9 04:21:59 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58683-db13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bb:78:66:bd:cb:e7:ff:09:cc:f7:54:2b:f6:
9a:30:60:f6:86:77:cc:08:87:23:8c:6a:7c:57:01:
3a:3d:5f:83:94:9e:43:52:42:3b:97:82:3f:96:ca:
04:da:d9:f0:d2:24:37:55:21:b0:dc:46:f3:b9:3c:
88:ee:b2:4c:81:b6:a9:1c:f5:3b:2f:d7:d4:fb:79:
d8:6c:dd:56:6a:98:1e:01:1f:6a:af:f1:aa:17:51:
06:d1:6e:36:7a:c5:79:cd:00:98:52:e0:d6:55:33:
eb:79:ce:9e:1f:99:9a:4b:e4:10:af:db:d9:5c:75:
c2:8a:2d:0b:14:2c:bb:b6:a9:0c:83:dd:64:48:e0:
63:db:cf:17:7c:40:68:b6:a3:a6:52:b8:9b:ed:cd:
25:c8:32:f4:41:5a:9e:d9:bb:fd:f5:a1:cf:b8:3f:
7f:2d:71:a8:e9:60:8d:2f:1d:70:13:9c:81:10:f7:
ca:c8:9b:f1:70:d3:81:57:60:31:48:a2:06:47:3c:
69:c3:74:9e:74:cb:fb:5c:bf:66:dc:6e:5c:3e:03:
80:b0:df:dd:95:5c:77:40:54:36:bb:81:ef:58:a1:
57:68:97:70:15:e0:bf:88:28:a7:58:49:53:a7:44:
cb:32:f4:26:b5:d9:7c:45:c4:da:bb:43:d8:6a:4a:
1e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:97:0E:93:E6:B4:11:00:11:51:07:CD:6F:C3:C6:3F:84:D1:47
X509v3 Authority Key Identifier:
keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7C5A543CBCB711F08806E909C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.212.186.0/23
Signature Algorithm: sha256WithRSAEncryption
34:1d:2a:d0:ad:57:df:d2:7e:2d:d3:fa:e2:c8:93:0c:24:17:
08:cd:53:1b:8c:28:b7:b3:f4:36:66:69:1a:10:ad:74:67:5f:
ff:e2:ce:d9:76:09:63:ed:de:96:92:f2:da:29:25:17:a5:92:
5a:75:05:f6:32:4c:1e:4a:29:5e:5a:19:42:39:60:43:41:9f:
8c:3c:89:4d:d6:a5:b9:e5:4e:5d:39:e8:69:a9:5f:22:4c:c9:
91:b2:7f:78:33:93:33:c0:04:26:e6:5b:d5:63:ab:39:e0:94:
bc:2c:be:a9:97:0a:fd:e3:fb:b3:c3:4e:4c:3a:d9:45:3c:95:
a0:d5:a4:79:34:7b:d7:de:9e:ed:97:45:dd:bb:59:8f:55:0b:
30:c5:f6:e2:8d:23:08:41:06:db:31:f7:26:50:50:01:bb:35:
2c:8a:0e:13:b6:ab:a8:56:0b:c0:03:8f:c9:fc:1d:73:08:3f:
5b:d7:b7:8d:45:45:fe:84:72:a2:8c:0f:42:83:1f:4a:c2:fa:
34:2f:93:98:6b:07:0f:9b:b9:c3:5b:c8:8e:14:3b:b7:ce:73:
15:fd:ca:79:0d:e4:57:3d:b5:1c:01:8c:b8:61:6e:4c:96:bf:
d0:37:ef:4d:7e:d6:93:5b:51:05:27:39:4b:c1:48:ae:ad:65:
76:e8:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:25:33 2026 by rpki-client