
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/80C4CAC6AE5311E983E98A4FC4F9AE02.roa
File: 80C4CAC6AE5311E983E98A4FC4F9AE02.roa (raw, json)
Hash identifier: rUGh9laQQlUNRtiEnQ0+0nzmb8FmYpDOK1/6IczmTbI=
Subject key identifier: FA:59:A4:8E:B0:5C:35:B6:81:6B:2F:09:35:1E:1E:C2:07:3F:B1:F3
Certificate issuer: /CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF
Certificate serial: 0EAD
Authority key identifier: 9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/80C4CAC6AE5311E983E98A4FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:49:28 +0000
ROA not before: Wed 26 Nov 2025 17:37:00 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139335
IP address blocks: 103.103.124.0/22 maxlen: 22
103.103.124.0/24 maxlen: 24
103.103.125.0/24 maxlen: 24
103.103.126.0/24 maxlen: 24
103.103.127.0/24 maxlen: 24
2403:f940::/32 maxlen: 32
2403:f940::/36 maxlen: 36
2403:f940:1000::/36 maxlen: 36
2403:f940:2000::/36 maxlen: 36
2403:f940:3000::/36 maxlen: 36
2403:f940:4000::/36 maxlen: 36
2403:f940:5000::/36 maxlen: 36
2403:f940:6000::/36 maxlen: 36
2403:f940:7000::/36 maxlen: 36
2403:f940:8000::/36 maxlen: 36
2403:f940:9000::/36 maxlen: 36
2403:f940:a000::/36 maxlen: 36
2403:f940:b000::/36 maxlen: 36
2403:f940:c000::/36 maxlen: 36
2403:f940:d000::/36 maxlen: 36
2403:f940:e000::/36 maxlen: 36
2403:f940:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl
rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:14:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3757 (0xead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9115854, serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF
Validity
Not Before: Nov 26 17:37:00 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a443e8-14fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:93:c4:43:1d:c2:44:b9:7c:6f:76:12:f8:
fe:85:7a:35:02:30:bd:cc:a7:21:fa:b6:db:6c:45:
96:6a:5a:57:b0:db:63:a5:dc:b6:be:4c:32:3f:3c:
d2:20:42:ee:07:81:c3:af:e8:4d:95:cb:cf:19:95:
87:17:24:c0:25:01:b7:2c:5a:40:31:b7:44:6b:0c:
e8:f2:a2:bb:2d:51:26:a8:af:c4:f0:56:2c:19:73:
f8:69:c8:d0:c1:00:fe:ec:b9:92:07:e5:d9:af:19:
6f:be:4e:a2:a2:e3:8a:df:f4:11:30:5e:f8:f0:7d:
3b:76:91:d2:ab:07:71:31:1a:4e:c1:fc:2f:65:ae:
c4:91:ad:98:41:7e:8b:34:c5:68:58:77:a5:0e:88:
70:a2:3d:55:8c:d8:eb:f2:e4:c4:32:b7:b5:a2:47:
68:7c:f0:ce:d9:d3:aa:19:2c:d9:45:18:db:3f:02:
90:d2:46:93:82:6b:af:01:eb:95:21:9c:c3:13:6c:
bf:b7:1c:75:9c:87:e9:44:d0:cf:05:54:e3:e5:a6:
0a:78:d0:11:dd:31:a0:21:d7:0e:88:d5:61:25:58:
b7:4b:c3:01:98:2e:7c:bf:e6:36:92:e8:35:ce:ad:
2a:97:6c:b0:8a:42:9b:62:42:29:22:73:d9:c9:69:
e6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:59:A4:8E:B0:5C:35:B6:81:6B:2F:09:35:1E:1E:C2:07:3F:B1:F3
X509v3 Authority Key Identifier:
keyid:9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/80C4CAC6AE5311E983E98A4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.103.124.0/22
IPv6:
2403:f940::/32
Signature Algorithm: sha256WithRSAEncryption
2c:e4:17:40:ef:25:47:c5:95:45:b5:65:5f:dc:f4:a9:23:9d:
e5:16:d4:6e:e9:3a:46:a3:c0:1b:6e:5f:33:12:b2:63:59:2d:
6b:3f:51:5e:fa:08:27:7a:54:c6:12:cf:92:64:7a:a4:3a:b6:
b5:6e:d5:ef:4d:a0:9c:16:84:3b:1c:f4:df:b5:84:9f:9d:3a:
ac:37:d3:99:9c:55:67:c1:62:55:fe:07:76:d8:76:30:3e:36:
a7:7f:bd:4e:fe:a5:99:95:22:2f:9d:3e:06:ab:40:c2:d8:37:
ec:f8:ca:ca:cc:49:3c:fd:36:e5:89:9a:7c:8b:b4:cf:e1:2f:
a3:09:14:0c:75:aa:59:3b:f2:6a:ab:76:79:27:80:aa:b6:e1:
44:46:13:84:cb:cd:ce:9f:e1:88:2c:81:6f:b0:38:11:b1:88:
ea:da:de:9c:ad:8c:2a:58:85:dc:d3:1c:fd:62:78:07:cb:65:
4d:cb:85:e7:87:ae:ef:54:24:e1:f6:20:41:e6:c3:80:10:d0:
5a:6d:33:a2:a9:bc:21:2d:ee:a2:de:75:50:18:d7:4c:e7:9f:
89:91:67:8a:3f:d3:9e:e1:53:ed:08:97:dc:c1:5d:04:2c:57:
9e:e1:ea:fa:f4:42:cc:2a:dd:dc:3d:b2:a4:90:e3:12:02:41:
06:ea:b9:07
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTU4NTQxMTAvBgNVBAUTKDlCQTM5NTFDQ0I1RDgzQTlGM0RDNEE3NUJFQTAxRkY1
QUZENzFGRkYwHhcNMjUxMTI2MTczNzAwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDNlOC0xNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo16TxEMdwkS5fG92Evj+hXo1AjC9zKch+rbbbEWWalpXsNtjpdy2vkwyPzzS
IELuB4HDr+hNlcvPGZWHFyTAJQG3LFpAMbdEawzo8qK7LVEmqK/E8FYsGXP4acjQ
wQD+7LmSB+XZrxlvvk6iouOK3/QRMF748H07dpHSqwdxMRpOwfwvZa7Eka2YQX6L
NMVoWHelDohwoj1VjNjr8uTEMre1okdofPDO2dOqGSzZRRjbPwKQ0kaTgmuvAeuV
IZzDE2y/txx1nIfpRNDPBVTj5aYKeNAR3TGgIdcOiNVhJVi3S8MBmC58v+Y2kug1
zq0ql2ywikKbYkIpInPZyWnmywIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPpZpI6w
XDW2gWsvCTUeHsIHP7HzMB8GA1UdIwQYMBaAFJujlRzLXYOp89xKdb6gH/Wv1x//
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTg1NC8zNjM4MEZBQUFD
QzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2bnozRXAxdnFBZjlhX1hI
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL202T1ZITXRkZzZuejNFcDF2cUFmOWFfWEhfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTU4NTQvMzYzODBGQUFBQ0M3MTFFOTgyODkwMjUzQzRGOUFFMDIvODBDNENBQzZB
RTUzMTFFOTgzRTk4QTRGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQCZ2d8MA0EAgACMAcDBQAkA/lAMA0GCSqGSIb3DQEBCwUAA4IBAQAs
5BdA7yVHxZVFtWVf3PSpI53lFtRu6TpGo8Abbl8zErJjWS1rP1Fe+ggnelTGEs+S
ZHqkOra1btXvTaCcFoQ7HPTftYSfnTqsN9OZnFVnwWJV/gd22HYwPjanf71O/qWZ
lSIvnT4Gq0DC2Dfs+MrKzEk8/TbliZp8i7TP4S+jCRQMdapZO/Jqq3Z5J4CqtuFE
RhOEy83On+GILIFvsDgRsYjq2t6crYwqWIXc0xz9YngHy2VNy4Xnh67vVCTh9iBB
5sOAENBabTOiqbwhLe6i3nVQGNdM55+JkWeKP9Oe4VPtCJfcwV0ELFee4er69ELM
Kt3cPbKkkOMSAkEG6rkH
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:59 2026 by rpki-client