
$ rpki-client -vvf rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa
File: 8E9B074050E311EF8624AC36C4F9AE02.roa (raw, json)
Hash identifier: DNo6LAjYKJT9hMbFIUnOrjoJbdOcs5kpnOeIkHugpwQ=
Subject key identifier: 7B:93:A6:9B:7F:4D:27:D7:E4:8B:CE:49:7D:53:7C:BE:AA:59:87:DB
Certificate issuer: /CN=A911392E/serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Certificate serial: 0131
Authority key identifier: 62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:20:25 +0000
ROA not before: Mon 07 Jul 2025 06:42:30 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136920
IP address blocks: 103.99.26.0/24 maxlen: 24
103.176.215.0/24 maxlen: 24
2001:df0:f980::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911392E, serialNumber=629B50963EBC6A022E27AECB613420E40E74DB4A
Validity
Not Before: Jul 7 06:42:30 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5aab9-1419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:67:b7:dc:3e:84:81:ce:ac:48:7c:45:1b:d3:
13:02:61:d7:f8:53:44:28:f1:89:1f:4c:63:ec:b0:
06:6b:eb:1e:8c:30:4e:fc:ed:f1:e1:d1:03:50:a8:
9f:20:35:4b:ed:76:28:13:3e:d2:15:8e:5d:83:06:
65:09:f5:ad:0a:61:a7:9d:9a:f1:26:20:97:e2:64:
54:43:cf:32:c0:05:f9:51:2c:be:01:58:a8:ea:a1:
16:94:81:17:7c:da:c3:5f:eb:2e:4e:3f:53:88:d1:
a7:bb:b7:fa:d3:b5:37:08:8a:46:f9:1e:3f:67:0e:
5a:44:b3:5a:2f:8e:25:55:db:00:30:f9:8e:6a:d1:
19:9c:32:d0:96:1a:65:a7:17:05:9b:cc:89:41:dd:
5d:58:51:4f:20:0b:e1:81:28:33:8e:47:52:f6:a6:
7c:25:5a:ef:2d:ee:c7:04:45:bf:d7:19:31:7f:7e:
78:f4:86:2c:82:b9:1f:28:d6:31:a1:fb:51:e8:30:
48:39:33:46:0f:71:c8:28:22:0e:8f:de:f8:33:15:
58:4b:f6:ce:a9:d2:ed:37:01:f0:d9:d6:65:05:a2:
36:60:d5:2a:6d:55:66:97:1f:b9:28:84:0e:f4:6c:
a1:fb:5d:cc:37:c4:a6:02:86:59:a3:ce:2d:bc:c8:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:93:A6:9B:7F:4D:27:D7:E4:8B:CE:49:7D:53:7C:BE:AA:59:87:DB
X509v3 Authority Key Identifier:
keyid:62:9B:50:96:3E:BC:6A:02:2E:27:AE:CB:61:34:20:E4:0E:74:DB:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/YptQlj68agIuJ67LYTQg5A5020o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YptQlj68agIuJ67LYTQg5A5020o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911392E/32E1F35850E011EFA7094168C4F9AE02/8E9B074050E311EF8624AC36C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.26.0/24
103.176.215.0/24
IPv6:
2001:df0:f980::/48
Signature Algorithm: sha256WithRSAEncryption
03:0f:24:03:0b:1b:a9:a0:96:0e:73:9b:e3:f5:7e:3a:b7:d0:
a8:87:be:88:17:eb:86:2c:fc:6a:75:ef:3e:a6:23:7a:a5:32:
48:69:30:0f:6f:33:a7:1c:0b:40:d6:34:b9:7d:fd:8f:eb:b8:
27:2d:be:02:7c:54:19:8e:df:2b:9a:55:e1:23:4e:88:fe:d7:
22:dc:61:0d:22:45:d2:ae:e4:0e:38:43:7a:f6:35:4d:bf:d7:
90:91:45:b8:2a:63:81:09:42:c5:9b:41:3a:f4:87:ba:59:a4:
e2:c5:d0:0b:9e:90:1e:c4:c3:db:39:9c:44:0c:c3:3f:78:b3:
a1:b8:52:f8:3d:36:9e:ce:7b:84:7f:aa:7f:ee:b3:d7:2a:a4:
8e:a4:eb:52:dc:d0:1b:45:68:b7:92:47:cf:e6:70:8b:b8:10:
53:e7:56:04:bb:bf:1a:4e:24:6a:a6:33:2f:f7:d9:82:19:be:
68:1b:69:8e:7b:f2:29:52:3d:77:aa:bf:35:07:2e:4f:e5:b6:
91:a4:01:f7:03:63:30:38:55:df:d6:3a:d7:70:f1:ef:18:d2:
b4:08:ff:22:2c:10:3f:02:4c:ee:98:55:58:2c:b5:8e:2f:fc:
7d:a7:fb:ff:d7:08:0d:a9:aa:3e:a7:8f:65:61:3f:61:22:61:
58:13:12:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:09:49 2026 by rpki-client