
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa
File: 33DAC0AE640211EDA193F079C4F9AE02.roa (raw, json)
Hash identifier: pZC0bFljxbSt/xAAnpAH8YDzTQVHbkwSa3MfUSj8PuQ=
Subject key identifier: A1:B7:80:0C:17:B7:10:57:6F:B5:BD:29:EC:05:15:D6:28:B9:88:5D
Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Certificate serial: 0588
Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa
Signing time: Fri 02 Oct 2026 23:44:36 +0000
ROA not before: Fri 02 Oct 2026 23:44:36 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 134732
IP address blocks: 103.121.216.0/23 maxlen: 23
103.121.216.0/24 maxlen: 24
103.121.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1416 (0x588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925
Validity
Not Before: Oct 2 23:44:36 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac041e4-f280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:9e:ae:68:70:70:d3:af:a6:11:33:68:ba:
4d:35:7a:e0:c4:0a:77:2a:fc:94:b2:9b:2e:fc:80:
99:e4:88:aa:47:32:a4:0c:89:ee:b5:a8:b6:0d:ff:
aa:56:58:89:0d:44:63:dc:d6:c2:b8:7f:42:d5:a1:
4e:22:d2:5f:ea:94:4e:19:ae:46:a5:c1:24:7e:82:
6a:26:eb:a5:af:32:9d:4f:1d:13:67:7f:b2:1b:f8:
f5:d9:0e:30:42:ab:b8:c1:56:94:48:a7:91:8a:06:
ba:dc:ac:dc:a8:3f:30:d7:19:aa:93:04:61:d4:4d:
a7:7b:57:17:4b:37:1b:c7:6a:99:c5:3b:13:66:df:
0f:94:3d:9c:94:a8:0d:64:cf:f9:a5:59:1e:a6:10:
18:dd:02:5b:0a:68:53:56:05:86:44:8e:99:3c:4f:
6c:94:36:15:b9:f6:50:46:35:7f:14:0b:19:5b:c5:
dd:77:27:0d:b3:0a:aa:ac:e6:e7:ce:66:9a:84:8d:
1b:85:8c:29:ad:02:88:96:70:b6:a9:9b:e1:f3:b2:
7e:9e:53:27:8c:71:49:41:be:19:4e:39:48:94:2c:
01:e8:c1:d5:3a:cf:8c:f3:f1:8e:9f:a9:d2:d2:ad:
2a:22:a9:5b:94:05:c7:e8:e1:b1:17:c2:cd:89:dc:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B7:80:0C:17:B7:10:57:6F:B5:BD:29:EC:05:15:D6:28:B9:88:5D
X509v3 Authority Key Identifier:
keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/33DAC0AE640211EDA193F079C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.216.0/23
Signature Algorithm: sha256WithRSAEncryption
65:ac:f7:ae:19:e4:6e:36:3d:e4:44:bc:6b:6b:bd:13:91:96:
cb:3f:50:e7:a7:61:f2:41:88:4e:7c:6c:07:87:27:8b:cb:ad:
bc:e4:12:79:94:0c:5e:be:35:6f:30:a9:c2:37:9e:ca:8d:0e:
0e:cf:e2:2f:4d:b0:3f:bb:a9:06:bc:21:f9:01:74:ca:5a:f6:
e7:21:27:f3:38:72:7b:91:66:a1:f8:06:a0:2d:70:7c:66:52:
b3:ee:3c:fe:3b:f9:2e:b6:0c:11:37:b2:d2:1b:f9:e4:c7:19:
4d:1e:5f:04:93:ad:b8:ed:af:f0:9b:5d:70:92:15:ae:52:87:
0b:27:71:08:23:15:6c:57:a7:69:88:32:61:5d:5a:be:3b:2f:
72:83:05:d6:c6:8f:08:69:0c:22:40:da:5a:80:dd:af:93:3a:
76:89:a6:d8:62:e3:f8:25:af:f8:4d:b3:2d:c4:7f:87:58:8c:
0f:05:6b:8f:00:45:8c:9d:6a:b9:86:dc:66:9f:aa:11:5c:57:
62:bc:0e:88:cb:e0:ab:98:70:5a:84:0e:7a:7d:7b:62:22:d6:
5e:e8:d8:dd:1b:b6:b8:2f:eb:44:62:b4:64:0a:df:8c:d9:d4:
d2:ba:a7:45:34:0e:7b:ac:53:03:9c:69:6c:8a:2e:0b:36:7b:
2f:d8:22:25
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4
RjNCN0E5MjUwHhcNMjYxMDAyMjM0NDM2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWMwNDFlNC1mMjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApN6ermhwcNOvphEzaLpNNXrgxAp3KvyUspsu/ICZ5IiqRzKkDInutai2Df+q
VliJDURj3NbCuH9C1aFOItJf6pROGa5GpcEkfoJqJuulrzKdTx0TZ3+yG/j12Q4w
Qqu4wVaUSKeRiga63KzcqD8w1xmqkwRh1E2ne1cXSzcbx2qZxTsTZt8PlD2clKgN
ZM/5pVkephAY3QJbCmhTVgWGRI6ZPE9slDYVufZQRjV/FAsZW8XddycNswqqrObn
zmaahI0bhYwprQKIlnC2qZvh87J+nlMnjHFJQb4ZTjlIlCwB6MHVOs+M8/GOn6nS
0q0qIqlblAXH6OGxF8LNidw9TwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKG3gAwX
txBXb7W9KewFFdYouYhdMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1
MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTJDODkvOEZBOTdBRkU0NTEwMTFFQzhDODZFRDQ4QzRGOUFFMDIvMzNEQUMwQUU2
NDAyMTFFREExOTNGMDc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ3nYMA0GCSqGSIb3DQEBCwUAA4IBAQBlrPeuGeRuNj3kRLxra70T
kZbLP1Dnp2HyQYhOfGwHhyeLy6285BJ5lAxevjVvMKnCN57KjQ4Oz+IvTbA/u6kG
vCH5AXTKWvbnISfzOHJ7kWah+AagLXB8ZlKz7jz+O/kutgwRN7LSG/nkxxlNHl8E
k6247a/wm11wkhWuUocLJ3EIIxVsV6dpiDJhXVq+Oy9ygwXWxo8IaQwiQNpagN2v
kzp2iabYYuP4Ja/4TbMtxH+HWIwPBWuPAEWMnWq5htxmn6oRXFdivA6Iy+CrmHBa
hA56fXtiItZe6NjdG7a4L+tEYrRkCt+M2dTSuqdFNA57rFMDnGlsii4LNnsv2CIl
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:07:20 2026 by rpki-client