
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/99AB821E859C11E7A1FEC80AC4F9AE02.roa
File: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (raw, json)
Hash identifier: zT1WvW8KfErCCGr8dQr6mISjAiGw8RTqnvePhZgSly8=
Subject key identifier: 44:90:5C:F9:06:5C:92:51:24:77:FB:C9:59:E1:93:7C:0A:8F:B4:07
Certificate issuer: /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E
Certificate serial: 19C6
Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/99AB821E859C11E7A1FEC80AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:42:42 +0000
ROA not before: Thu 18 Sep 2025 16:55:00 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 136909
IP address blocks: 103.98.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl
rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:06:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6598 (0x19c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E
Validity
Not Before: Sep 18 16:55:00 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44252-8e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:53:2b:d9:7a:9e:5b:7b:80:f6:8c:a6:07:
06:09:1b:af:6c:7b:5e:7b:7f:6c:da:5f:b4:52:75:
2a:06:0e:43:01:68:f1:81:95:cd:15:96:10:2c:fe:
a5:e3:e8:d0:ed:db:ef:66:f0:c5:bd:75:41:3e:6e:
92:66:1b:59:ee:a3:7b:4e:e1:37:e1:2a:56:a1:20:
d7:69:94:08:a3:da:0b:64:6a:06:ce:a8:3c:22:e0:
15:53:2b:50:25:81:d4:b7:b1:c3:3c:d0:47:16:46:
61:2f:64:e2:32:4c:19:99:03:19:c7:59:54:a2:f0:
28:a7:74:2e:ef:82:05:e7:e0:ee:13:85:70:c1:12:
38:3e:6f:6e:eb:91:1e:c4:c8:33:ef:5f:9f:32:31:
b6:da:67:93:27:d1:ca:6f:b1:29:91:e7:e3:d1:79:
41:69:87:d5:17:ad:25:2d:39:8b:9b:33:5b:0a:9b:
eb:dc:41:6d:93:8d:3d:7c:02:c0:96:4b:7f:a6:42:
6a:b8:0e:08:70:76:1d:c9:c1:65:15:d1:2c:4d:80:
08:97:81:86:81:88:c7:40:6a:aa:c4:ec:6b:e0:43:
63:1b:f7:e6:dc:27:55:8a:d4:74:e2:91:de:9e:dc:
f4:ca:a6:75:d6:53:e4:75:1c:be:a9:fe:00:21:cc:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:90:5C:F9:06:5C:92:51:24:77:FB:C9:59:E1:93:7C:0A:8F:B4:07
X509v3 Authority Key Identifier:
keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/99AB821E859C11E7A1FEC80AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.98.200.0/22
Signature Algorithm: sha256WithRSAEncryption
13:f2:67:6c:49:0f:6b:f7:ad:6b:95:d5:0d:9d:e8:b5:9e:57:
31:8d:52:88:be:1f:c2:49:fc:45:03:e8:13:3e:bb:6c:d6:6c:
14:de:07:c3:72:c8:77:4d:b0:60:27:cd:10:d6:c6:d5:c0:bf:
6e:58:77:e1:47:1d:b8:cc:38:b1:98:78:d2:70:81:56:d3:d8:
4f:ec:45:06:a7:32:3a:65:c0:3e:12:4e:7a:64:24:c0:2b:59:
c6:04:bf:33:79:b2:35:01:96:b6:8d:ce:d0:2b:73:9d:5f:96:
18:80:aa:c9:66:ce:4c:06:03:49:f6:aa:d6:01:5c:22:b6:80:
69:55:c5:64:b8:fb:67:0a:87:57:71:f1:68:27:ca:5d:c6:15:
d1:8b:a7:47:ca:a9:01:36:18:96:71:68:61:3f:07:89:48:9e:
8f:88:fc:91:ff:2a:34:6c:76:76:7a:28:12:ac:31:b9:58:f3:
ba:23:58:49:8d:cc:15:30:c7:c5:ba:df:05:0a:d8:73:5f:ae:
32:93:e5:ab:4f:7f:ca:46:92:76:37:ba:ea:3d:41:00:48:c0:
ee:02:17:03:16:cc:6a:a4:13:f6:d6:31:46:20:63:55:3f:89:
96:43:50:a4:0b:bd:2d:20:12:03:4e:1a:18:aa:41:dd:f5:65:
f3:60:61:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:40 2026 by rpki-client