
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5D0EE5C78FB11F097FE627EC4F9AE02.roa
File: A5D0EE5C78FB11F097FE627EC4F9AE02.roa (raw, json)
Hash identifier: x7xExkcsqVf/rO4zDfzFzjGgtwWT6vovaeltj8xw3y4=
Subject key identifier: 3E:C6:FC:5C:01:C6:AA:FF:C6:2F:C6:05:99:C3:25:5C:4A:78:9F:2E
Certificate issuer: /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial: 0546
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5D0EE5C78FB11F097FE627EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 20:06:32 +0000
ROA not before: Thu 06 Nov 2025 11:35:59 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 58487
IP address blocks: 103.247.8.0/22 maxlen: 24
203.175.8.0/22 maxlen: 24
203.194.112.0/22 maxlen: 24
218.33.100.0/22 maxlen: 24
218.33.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Validity
Not Before: Nov 6 11:35:59 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a49c48-4410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:63:39:17:5c:fc:97:a8:78:6b:98:e8:8b:
dd:c3:05:b3:23:3e:10:07:ac:0f:02:2f:71:9b:db:
81:49:e3:9b:cf:92:51:1b:59:9d:69:ec:a3:53:77:
91:e5:14:63:0e:00:65:8f:e4:3b:3b:ed:78:2c:20:
47:d4:87:2e:28:09:c7:02:f1:43:7c:4c:1e:c6:d9:
34:16:37:f5:ac:c6:5d:64:aa:c2:85:00:60:76:b5:
09:39:88:56:58:4b:ca:b8:35:3a:63:e8:8c:b7:1a:
97:b4:ee:ab:af:f0:9e:80:d9:14:1a:b9:86:2a:33:
f4:8b:9f:5d:f4:45:0e:5d:89:f4:48:22:ff:85:98:
0f:b9:34:92:59:4c:51:7c:e9:f9:27:46:f1:37:c4:
4a:b2:61:79:7e:85:a4:52:c3:28:db:a0:a5:95:4e:
27:c4:27:40:c8:bc:03:82:c8:3e:75:23:d1:3d:ef:
4a:c7:96:c1:6f:a6:89:e4:00:c3:7f:03:14:4b:ae:
c0:7a:14:1d:5f:8b:c5:48:52:13:84:31:96:0e:df:
2b:5d:27:7f:94:72:28:f4:a8:c0:e5:ee:e2:97:cf:
06:19:5b:6d:5d:1a:1f:a1:a3:eb:21:f0:32:04:f2:
e9:81:7b:eb:e7:68:2a:f6:16:ae:d4:73:4c:b6:63:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C6:FC:5C:01:C6:AA:FF:C6:2F:C6:05:99:C3:25:5C:4A:78:9F:2E
X509v3 Authority Key Identifier:
keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A5D0EE5C78FB11F097FE627EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.247.8.0/22
203.175.8.0/22
203.194.112.0/22
218.33.100.0/22
218.33.124.0/22
Signature Algorithm: sha256WithRSAEncryption
72:66:5c:87:69:b6:48:a4:94:bf:24:aa:e2:06:0a:66:a1:20:
7b:b1:28:cc:36:56:49:5c:cb:23:6e:4d:16:3d:0c:de:8f:04:
de:03:b3:ac:70:5e:87:b8:10:2f:8f:9b:7b:7e:1d:fa:59:4e:
25:7b:28:30:5c:a9:90:93:82:f8:4d:98:eb:10:c0:c0:59:8d:
ed:1e:05:dd:08:e9:f3:94:b3:32:5c:68:34:72:68:d0:26:9c:
b3:4d:e5:6a:2a:b9:b8:2c:94:9e:6a:f0:59:2b:ec:c9:44:b4:
73:20:aa:95:10:3c:61:3f:e5:06:a4:d6:ee:97:55:c7:a6:10:
36:ae:db:6a:6f:fa:9c:ae:61:30:a0:f9:33:a4:44:3c:4a:01:
1e:26:90:d2:ab:40:d2:80:31:31:43:1b:cd:d1:49:6e:11:86:
51:f3:98:ed:9d:1d:af:9a:a0:b2:d3:9e:c9:5d:1a:22:00:da:
1a:37:e7:94:98:5a:71:8f:fc:35:78:f1:10:33:98:04:e8:8f:
0e:dd:aa:f9:62:3f:0b:ab:d4:b9:86:42:5e:dc:bc:1b:a2:3b:
84:95:41:22:37:d5:3e:a4:56:a4:74:bb:0a:18:a8:65:87:76:
82:d0:11:c3:0a:60:4b:12:02:99:54:92:9c:90:54:48:15:dc:
3b:1e:0f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 19:13:55 2026 by rpki-client