
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7D3521CABCB711F08B02E909C4F9AE02.roa
File: 7D3521CABCB711F08B02E909C4F9AE02.roa (raw, json)
Hash identifier: VHWzuR8NTDaBmGYmSm5ZS2QGGvm+Hb7NngfwNUpxxQc=
Subject key identifier: 86:C3:26:B9:20:08:A2:BC:B9:C8:A7:C9:F0:E3:C9:1B:83:5E:86:0E
Certificate issuer: /CN=A9147B4B/serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Certificate serial: F8
Authority key identifier: C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7D3521CABCB711F08B02E909C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:45:57 +0000
ROA not before: Sun 09 Nov 2025 04:22:02 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 40779
IP address blocks: 103.212.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248 (0xf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B4B, serialNumber=C877CDF22D25B6E33FC5E495BE55E59D0A94987E
Validity
Not Before: Nov 9 04:22:02 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a58685-aa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e0:17:01:6b:55:dc:da:7f:e6:43:44:56:e9:
eb:47:b4:f3:da:a8:f5:77:6d:b5:57:dc:d4:7f:4a:
c8:08:6e:99:3f:d2:bb:bd:5f:86:ec:40:f1:ec:ca:
1f:85:d6:04:f0:31:f5:13:bc:3a:67:c4:1d:cd:08:
28:b3:2e:93:b0:d0:bd:6d:cc:f0:0b:19:88:0d:a6:
7f:13:e7:15:0b:76:3d:62:4f:c2:40:7c:1d:62:b6:
4b:7e:cc:61:32:b3:20:e1:b4:6a:02:ab:5b:7e:ae:
ec:da:14:bb:7b:12:08:72:c9:1f:fd:03:87:b1:61:
f6:81:4f:af:3c:bb:c6:bc:61:52:1d:40:f5:fc:7f:
d3:a6:a7:af:7f:e7:51:42:00:65:a0:45:f5:c4:dd:
ff:f4:15:fe:48:6f:31:20:3f:d0:9a:25:79:60:7d:
22:6d:b1:ef:09:a7:6b:6c:63:19:d7:77:cd:e8:c1:
26:e8:a6:c6:05:2f:62:04:3e:26:ec:e0:2a:b3:0e:
3f:ce:f3:c6:0c:34:18:61:22:ae:b6:a1:cb:d1:cf:
22:80:be:0a:dd:8d:d8:09:6a:cd:41:7d:3e:26:57:
d1:bf:a0:8b:45:38:33:9a:a3:48:0e:c4:5c:7c:4d:
54:85:cc:3d:e9:01:fc:36:e5:60:7d:08:d7:34:bc:
1f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C3:26:B9:20:08:A2:BC:B9:C8:A7:C9:F0:E3:C9:1B:83:5E:86:0E
X509v3 Authority Key Identifier:
keyid:C8:77:CD:F2:2D:25:B6:E3:3F:C5:E4:95:BE:55:E5:9D:0A:94:98:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/yHfN8i0ltuM_xeSVvlXlnQqUmH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHfN8i0ltuM_xeSVvlXlnQqUmH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B4B/E156A04CCF3811EF8484E92FC4F9AE02/7D3521CABCB711F08B02E909C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.212.186.0/23
Signature Algorithm: sha256WithRSAEncryption
83:b4:6c:b4:5a:eb:c5:be:c8:57:a5:4b:df:d8:f8:bb:50:25:
86:9e:75:8e:be:56:a0:e1:b8:fc:6c:f1:11:bc:a1:3b:a2:91:
7c:9e:de:67:19:37:d1:61:53:e4:71:7e:5a:d4:32:a6:65:25:
25:f3:95:d9:08:f8:a4:7a:f8:a9:65:6d:7f:94:53:cb:e4:65:
01:11:91:f7:a2:37:4e:97:09:e6:7a:38:a9:49:95:19:ba:da:
75:32:aa:39:d7:52:e8:4b:0e:af:cb:ed:73:77:f5:0e:d1:e4:
0f:e9:41:c0:cd:29:46:72:88:bd:f6:6b:30:5b:78:b0:c7:18:
c1:b3:c8:67:ca:df:3f:7a:88:22:90:04:0e:ce:ef:9f:b1:d7:
24:b4:73:12:c4:02:5f:d2:c8:21:5e:2d:8b:c3:8b:f2:12:bb:
5c:dc:27:54:5c:94:46:f3:73:c7:2d:e1:86:ec:08:ee:ac:68:
b9:7d:08:d7:9a:f6:7f:b2:48:9a:5b:a5:8d:b5:b8:ee:40:b6:
ed:eb:a3:a7:c8:f7:f6:77:95:dc:88:99:ec:e3:f4:fe:ed:67:
0d:4d:25:f5:06:14:5c:38:69:5e:cc:9c:63:d5:c2:62:9b:bf:
0a:c9:14:48:1c:ee:84:79:a9:78:29:af:d2:1f:e8:27:6f:22:
d2:f2:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:36:44 2026 by rpki-client