
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/A768E6B6FB0811ED860A5143C4F9AE02.roa
File: A768E6B6FB0811ED860A5143C4F9AE02.roa (raw, json)
Hash identifier: MDPP/VIQwu8qPe+/SiKWS6o/CY6nGMpyQ4F+e1jNL0g=
Subject key identifier: A5:25:F2:D1:29:2B:1C:2A:38:F5:6C:50:FE:46:65:E2:0C:6A:BE:52
Certificate issuer: /CN=A9196BD8/serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Certificate serial: 243E
Authority key identifier: F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/A768E6B6FB0811ED860A5143C4F9AE02.roa
Signing time: Sun 02 Aug 2026 16:28:01 +0000
ROA not before: Sun 02 Aug 2026 16:28:01 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 134204
IP address blocks: 103.12.72.0/22 maxlen: 22
103.12.72.0/23 maxlen: 23
103.12.72.0/24 maxlen: 24
103.12.73.0/24 maxlen: 24
103.12.74.0/23 maxlen: 23
103.12.74.0/24 maxlen: 24
103.12.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9278 (0x243e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196BD8, serialNumber=F97C8DACC27E9FCCD33AEB85350B26A4815F10B7
Validity
Not Before: Aug 2 16:28:01 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a6f7011-1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:24:13:63:4f:a2:7b:90:c0:78:60:cb:f6:
6e:b3:2b:09:78:a8:63:a3:d1:99:8b:0d:67:71:22:
9b:74:84:77:2a:da:4c:2f:39:7b:a5:9c:81:f9:9b:
ef:21:5d:e4:c5:0a:29:79:dd:55:79:48:db:63:a4:
21:29:cf:7b:a0:eb:69:90:26:14:fc:ef:7c:3c:c7:
57:e3:96:a8:71:13:08:b4:9a:fd:de:5b:cf:6b:10:
34:52:6f:e2:27:40:89:4d:2f:c1:ba:76:40:58:56:
2a:02:63:b2:ab:4c:5b:f4:e4:12:1d:4b:ec:cb:bc:
c5:7f:71:ed:2f:50:6d:ba:64:a4:ee:3f:d7:71:da:
cb:b6:e3:6d:fa:d9:a3:49:3f:a6:a6:37:c0:0c:1b:
d7:08:01:ec:b9:f7:d2:d2:0e:12:61:08:3f:df:07:
7b:b3:4f:5b:c4:c8:cd:b2:98:35:96:6d:6f:42:9f:
80:e9:ae:a6:21:e0:39:0d:e6:67:4e:ea:e1:6b:d2:
86:0e:b6:1c:67:34:c8:1e:11:9b:67:e4:5a:b9:f6:
55:35:49:a7:70:34:54:90:a2:31:3a:12:9a:3b:d6:
42:f7:94:04:8d:dc:5b:f5:20:a3:3b:7e:60:c3:d8:
d4:de:e5:cc:03:73:72:ca:17:f4:3e:f1:ba:79:23:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:25:F2:D1:29:2B:1C:2A:38:F5:6C:50:FE:46:65:E2:0C:6A:BE:52
X509v3 Authority Key Identifier:
keyid:F9:7C:8D:AC:C2:7E:9F:CC:D3:3A:EB:85:35:0B:26:A4:81:5F:10:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/-XyNrMJ-n8zTOuuFNQsmpIFfELc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XyNrMJ-n8zTOuuFNQsmpIFfELc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196BD8/C583D23287A211E59E51F251C4F9AE02/A768E6B6FB0811ED860A5143C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.72.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:c8:ae:91:85:52:a6:53:e2:29:e6:60:10:18:6f:f4:68:57:
36:42:3e:dd:9a:18:eb:a1:aa:42:fd:02:7c:15:d7:70:e4:9f:
39:1f:06:59:d3:b1:b2:94:c9:44:83:d4:7b:ee:a3:9d:ff:4c:
46:7f:a7:ac:9b:ae:4d:a4:cf:98:14:25:7e:3a:30:95:9c:b7:
2a:14:ac:10:e5:4c:26:a4:e0:a6:63:7e:11:73:05:17:9c:78:
24:5a:8a:bd:c5:03:f5:9c:1c:4b:9a:dc:07:d1:96:e6:7c:5d:
bf:e9:fc:73:4f:bd:69:59:6c:d2:c3:41:00:2b:5e:53:60:07:
5a:61:63:9b:ed:47:41:a9:1b:c4:1d:5e:96:64:07:30:e7:14:
4e:a1:b3:b5:b6:4d:f1:8a:4a:4d:ac:21:b4:8b:82:1f:10:13:
7f:80:1e:0b:68:ea:9b:c6:a7:51:17:4a:e4:57:64:2f:7b:67:
e8:54:26:eb:84:e6:bb:dd:ec:b5:3a:74:52:b3:28:79:18:2d:
6e:29:ef:56:fe:39:0d:62:6e:76:58:12:9c:6a:01:c4:73:ea:
a6:02:0c:92:e2:f2:3f:ce:f0:02:f3:05:f8:fc:3f:6c:5a:69:
b0:59:b7:05:b8:48:0c:91:f4:b3:2d:d5:19:ca:9e:50:aa:b2:
8b:07:2c:fc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTZCRDgxMTAvBgNVBAUTKEY5N0M4REFDQzI3RTlGQ0NEMzNBRUI4NTM1MEIyNkE0
ODE1RjEwQjcwHhcNMjYwODAyMTYyODAxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZmNzAxMS0xMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0hckE2NPonuQwHhgy/ZusysJeKhjo9GZiw1ncSKbdIR3KtpMLzl7pZyB+Zvv
IV3kxQoped1VeUjbY6QhKc97oOtpkCYU/O98PMdX45aocRMItJr93lvPaxA0Um/i
J0CJTS/BunZAWFYqAmOyq0xb9OQSHUvsy7zFf3HtL1BtumSk7j/XcdrLtuNt+tmj
ST+mpjfADBvXCAHsuffS0g4SYQg/3wd7s09bxMjNspg1lm1vQp+A6a6mIeA5DeZn
Turha9KGDrYcZzTIHhGbZ+RaufZVNUmncDRUkKIxOhKaO9ZC95QEjdxb9SCjO35g
w9jU3uXMA3Nyyhf0PvG6eSP36QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKUl8tEp
KxwqOPVsUP5GZeIMar5SMB8GA1UdIwQYMBaAFPl8jazCfp/M0zrrhTULJqSBXxC3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkJEOC9DNTgzRDIzMjg3
QTIxMUU1OUU1MUYyNTFDNEY5QUUwMi8tWHlOck1KLW44elRPdXVGTlFzbXBJRmZF
TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1YeU5yTUotbjh6VE91dUZOUXNtcElGZkVMYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTZCRDgvQzU4M0QyMzI4N0EyMTFFNTlFNTFGMjUxQzRGOUFFMDIvQTc2OEU2QjZG
QjA4MTFFRDg2MEE1MTQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZwxIMA0GCSqGSIb3DQEBCwUAA4IBAQC/yK6RhVKmU+Ip5mAQGG/0
aFc2Qj7dmhjroapC/QJ8Fddw5J85HwZZ07GylMlEg9R77qOd/0xGf6esm65NpM+Y
FCV+OjCVnLcqFKwQ5UwmpOCmY34RcwUXnHgkWoq9xQP1nBxLmtwH0ZbmfF2/6fxz
T71pWWzSw0EAK15TYAdaYWOb7UdBqRvEHV6WZAcw5xROobO1tk3xikpNrCG0i4If
EBN/gB4LaOqbxqdRF0rkV2Qve2foVCbrhOa73ey1OnRSsyh5GC1uKe9W/jkNYm52
WBKcagHEc+qmAgyS4vI/zvAC8wX4/D9sWmmwWbcFuEgMkfSzLdUZyp5QqrKLByz8
-----END CERTIFICATE-----
Generated at Sat Sep 5 11:00:43 2026 by rpki-client