
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa
File: 7BF0DB503ECF11EEA6759B55C4F9AE02.roa (raw, json)
Hash identifier: Rn+12EEMKi6aXzl8gBx8ZdWOx7AcWAcDoiEgWgJE5kw=
Subject key identifier: CE:95:7A:38:83:B4:70:DE:73:09:89:01:BA:B8:72:E6:38:2E:11:6F
Certificate issuer: /CN=A9110BA6/serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Certificate serial: 0AA7
Authority key identifier: B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa
Signing time: Wed 04 Feb 2026 19:16:35 +0000
ROA not before: Wed 04 Feb 2026 19:16:35 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 131471
IP address blocks: 103.148.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 19:44:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2727 (0xaa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110BA6, serialNumber=B4B8558BEC543620FE6EA92FEBC5E8A927214C39
Validity
Not Before: Feb 4 19:16:35 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69839b13-5de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:77:01:e7:a2:ad:6d:0c:5a:8d:20:1f:d6:
a0:b2:8a:ed:04:46:88:1c:e2:7b:5a:32:a2:b2:ec:
78:f4:31:61:5d:41:a4:62:99:ae:40:81:72:73:0a:
80:7e:cf:00:08:6b:44:51:d9:8d:4e:f3:95:82:0d:
fd:de:03:f1:98:6f:2d:53:71:bc:ad:27:9e:da:92:
29:0e:cf:89:e2:07:a7:af:70:fc:45:70:4d:ad:e1:
88:c3:5b:c2:10:da:5a:5d:1e:61:91:4f:54:03:ab:
ba:27:7f:76:d7:7f:8f:f5:95:dc:a2:6e:50:18:7c:
6d:19:bb:61:23:56:47:90:c1:ed:99:0a:2d:5b:cd:
52:e6:32:e8:5c:2e:7d:d8:f6:3c:3f:4e:93:82:05:
a0:d2:d4:e5:0c:28:19:bc:ce:e2:e5:c1:94:25:09:
2b:f5:e6:78:8d:76:fd:33:a4:37:24:9b:86:72:21:
05:f8:ca:b6:d9:cf:93:a0:50:96:c9:9a:84:c3:c5:
56:87:ca:b8:27:dd:7c:6d:7e:ee:bf:ad:e5:31:50:
b1:0b:85:69:50:80:a9:e3:82:c6:f8:85:61:e7:28:
92:68:4c:22:65:86:51:3f:17:fb:d0:d3:1c:7b:dd:
ab:91:8e:54:ef:9f:9c:7f:a3:2f:26:9e:39:4c:bd:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:95:7A:38:83:B4:70:DE:73:09:89:01:BA:B8:72:E6:38:2E:11:6F
X509v3 Authority Key Identifier:
keyid:B4:B8:55:8B:EC:54:36:20:FE:6E:A9:2F:EB:C5:E8:A9:27:21:4C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/tLhVi-xUNiD-bqkv68XoqSchTDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tLhVi-xUNiD-bqkv68XoqSchTDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110BA6/0F3DF428715711EA86559D2DC4F9AE02/7BF0DB503ECF11EEA6759B55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.128.0/24
Signature Algorithm: sha256WithRSAEncryption
24:80:43:38:e1:b3:61:cc:52:e1:35:b7:2e:09:a9:9a:84:83:
38:5c:92:42:c0:17:24:95:65:34:2e:89:a5:69:95:24:b6:0a:
01:3b:62:34:1d:74:17:bc:6c:45:82:ba:f8:15:ba:35:6b:49:
14:3c:14:1d:04:05:98:a1:2c:8d:b5:71:95:c2:2f:0c:48:4c:
e3:3f:12:0f:e5:15:46:e6:8f:72:6a:8f:f3:05:67:5e:22:45:
45:67:03:fd:3e:fc:17:d0:54:48:08:87:0e:a6:f1:67:72:6a:
2c:e5:60:af:71:c2:e9:72:a3:01:39:aa:63:93:7e:3e:10:59:
cd:03:92:80:de:9e:1e:ad:98:ea:0d:b3:c2:62:e1:aa:b2:ad:
a1:06:e1:72:e9:bb:bd:31:ab:61:d4:1d:8c:1e:71:2a:a5:88:
00:91:d9:75:74:d4:b3:1d:e2:02:96:c9:c8:9f:08:eb:0e:b3:
40:b3:bc:78:29:19:84:07:5f:2b:58:dd:3d:9a:ac:db:50:e6:
9a:4c:1c:d5:75:6a:47:a8:b9:ab:93:44:8c:f4:ad:ab:31:6f:
80:ec:d2:b1:23:22:ad:8e:b1:43:db:b0:91:5e:7f:60:6b:88:
86:aa:7a:38:ae:55:38:92:e7:8a:f1:4a:6b:fc:5f:6e:00:9d:
ee:c1:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:58 2026 by rpki-client