
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/9F7A4D22950711F196EC2BEB4C11F970.roa
File: 9F7A4D22950711F196EC2BEB4C11F970.roa (raw, json)
Hash identifier: ii4enchmx/iTiouv3evG9RhEX3dHM7Ii6fGAmSdmsqY=
Subject key identifier: 1A:A2:E0:5B:41:A7:F0:45:6B:C5:DA:48:9F:F9:47:38:09:FE:F7:FB
Certificate issuer: /CN=A91912D9/serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
Certificate serial: 28
Authority key identifier: 21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/9F7A4D22950711F196EC2BEB4C11F970.roa
Signing time: Fri 09 Oct 2026 09:57:57 +0000
ROA not before: Fri 09 Oct 2026 09:57:57 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 198949
IP address blocks: 103.157.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl
rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 09:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91912D9, serialNumber=218716825DBCF8DF33974485789E47B9B100CB29
Validity
Not Before: Oct 9 09:57:57 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac8baa5-cac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:46:33:05:f7:fb:51:56:72:45:66:9c:fc:5d:
42:d6:0d:05:f1:3d:f9:34:4c:57:0d:02:a5:4c:81:
25:ae:cb:c2:61:c7:cc:9e:3b:6c:75:7f:e3:5f:70:
f2:48:20:1c:52:74:9f:8f:35:ce:5d:fc:c7:71:b2:
fe:35:f0:22:34:10:21:10:a5:88:7c:57:88:97:36:
15:52:35:9d:9f:e3:6c:6e:c9:ea:b0:f7:52:24:39:
86:10:8a:20:14:5c:f0:e3:d0:df:60:d4:7d:4d:31:
f5:10:ce:1b:c5:fc:d7:f7:9f:f8:09:fd:92:55:e4:
c3:03:7b:e2:02:10:53:c5:9e:d7:93:f5:34:6a:0d:
d8:6c:eb:24:e7:0d:44:22:63:29:6d:df:fa:3f:08:
bf:fe:08:58:86:e0:31:a2:6c:ab:ea:00:27:3a:ea:
ad:28:c3:80:0b:7d:fb:2f:8b:f6:40:9e:6e:d3:58:
d1:18:82:b8:b0:c4:52:27:d3:91:20:c1:10:75:7b:
3b:02:13:a9:ef:8c:f9:45:50:d9:2f:e9:49:67:1b:
e3:4c:d3:79:1e:27:e7:cc:b4:e5:17:5a:a8:bd:21:
f1:42:a5:22:77:bf:50:dd:56:b4:8b:e7:c5:d4:94:
50:f8:f0:8c:fd:63:ff:5b:3b:f1:6e:ba:12:17:fe:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A2:E0:5B:41:A7:F0:45:6B:C5:DA:48:9F:F9:47:38:09:FE:F7:FB
X509v3 Authority Key Identifier:
keyid:21:87:16:82:5D:BC:F8:DF:33:97:44:85:78:9E:47:B9:B1:00:CB:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/IYcWgl28-N8zl0SFeJ5HubEAyyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYcWgl28-N8zl0SFeJ5HubEAyyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912D9/CDB1A7CC950611F1A46AB7364C11F970/9F7A4D22950711F196EC2BEB4C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.157.252.0/24
Signature Algorithm: sha256WithRSAEncryption
37:36:25:db:dd:13:5f:b1:9b:99:65:cb:b7:b7:69:9a:47:70:
48:25:81:93:29:88:f9:8b:4c:01:80:22:60:9e:be:fe:7d:41:
07:42:23:c1:5e:b5:be:43:53:90:89:6b:28:3b:71:cc:56:b9:
39:6d:1d:45:f1:c0:65:b6:04:57:a7:ac:64:ca:25:c2:be:7c:
08:46:ec:b1:93:aa:cc:2c:7c:a6:35:71:e5:2a:0a:a8:07:46:
48:85:98:7c:2b:8a:fb:62:74:a6:19:44:32:9b:29:d5:da:3f:
71:d2:d7:d3:ca:92:7d:1e:6c:ec:8c:b7:fc:60:b3:d5:e8:9d:
bd:eb:2d:ad:e4:6d:b7:84:15:73:89:8d:6e:1d:ce:16:7a:02:
17:96:14:16:08:0d:66:fb:af:ab:f0:d9:90:54:50:0f:b8:a7:
a0:83:c2:8f:ec:8c:55:b0:6b:f9:61:b6:1e:fc:ad:e2:9b:52:
38:f3:cc:f4:36:7e:d5:85:43:fb:f9:69:35:6e:6f:57:e3:fb:
4f:5a:48:9e:28:b6:80:db:19:9e:b3:be:18:e5:89:70:a5:65:
ac:16:0b:92:78:12:81:78:00:54:10:d7:5a:fb:8f:ac:78:d5:
1f:06:b8:22:32:1f:3d:9d:67:50:45:dc:e5:dd:31:97:1f:22:
69:fc:be:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 01:18:50 2026 by rpki-client