
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/E76F99C60FDB11ED9718606AC4F9AE02.roa
File: E76F99C60FDB11ED9718606AC4F9AE02.roa (raw, json)
Hash identifier: jPruOReU41tiy9WKYUDnZKPfOqm/FjV3E9pMcApFq0A=
Subject key identifier: E6:9C:5C:12:09:7F:60:6F:A7:35:55:C0:CF:B4:9A:68:27:38:06:E8
Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Certificate serial: 09E9
Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/E76F99C60FDB11ED9718606AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:40:43 +0000
ROA not before: Sat 30 Aug 2025 20:41:25 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 141452
IP address blocks: 103.151.171.0/24 maxlen: 24
2001:df3:cc80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E
Validity
Not Before: Aug 30 20:41:25 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a45dfb-ed22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:13:af:a0:59:b3:d3:c0:d6:d2:41:04:a8:
1b:33:37:fd:0e:3c:1c:1c:eb:87:2f:69:36:7c:6f:
8f:7f:f3:72:de:8c:37:f5:df:7c:6d:ba:a4:fd:d1:
1c:d5:48:b3:06:d6:44:55:98:72:32:c6:1e:19:4e:
0e:ea:21:1b:61:d1:3a:4a:16:0d:06:7b:fd:5e:3f:
48:f9:c1:bc:8d:0b:db:c3:06:79:98:40:8c:69:6c:
e9:ae:cb:40:aa:cc:d7:46:6e:b8:50:aa:ac:fa:4f:
0c:56:ab:73:a2:f8:f9:91:52:c0:e7:01:98:c3:17:
b5:02:63:7e:37:db:80:99:9c:51:d4:93:bb:43:ec:
ca:17:07:c1:b6:1a:93:52:3b:2f:51:6a:42:81:c5:
02:68:12:76:10:7d:e4:02:db:e9:18:5f:92:22:4e:
9e:40:ad:57:84:67:95:fb:6d:a4:6b:5f:b2:2d:c7:
01:0b:39:26:62:b0:b7:ad:c1:d4:83:58:f4:07:69:
48:70:ea:e7:54:b1:14:61:01:ee:85:fb:0b:6d:5b:
a7:eb:f1:d3:21:27:fb:11:91:94:6a:1d:09:ee:d6:
1d:09:38:49:da:3f:14:d1:a1:22:0e:dd:60:96:b2:
fd:74:41:34:0a:f2:1c:2b:86:d9:b7:cd:b9:1c:b7:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9C:5C:12:09:7F:60:6F:A7:35:55:C0:CF:B4:9A:68:27:38:06:E8
X509v3 Authority Key Identifier:
keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/E76F99C60FDB11ED9718606AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.171.0/24
IPv6:
2001:df3:cc80::/48
Signature Algorithm: sha256WithRSAEncryption
39:4e:52:97:41:a9:f5:6a:ae:9a:d8:29:50:9f:c4:63:99:9c:
9a:9b:42:36:eb:18:2a:26:8c:96:cd:0f:cc:66:99:33:7c:e1:
76:8a:fa:67:b8:2e:5a:ce:fe:eb:1e:53:b7:1e:1b:53:ef:b9:
2e:75:fa:a8:a1:d9:5b:8c:59:be:9a:9f:f4:a8:ba:51:f8:19:
d9:94:95:90:59:8c:1a:8c:15:55:bd:e9:a7:64:57:38:6b:8f:
dd:27:24:ea:79:cc:0d:b6:de:98:13:45:5d:0c:58:9c:36:77:
bc:42:a8:59:5a:00:a1:42:07:b4:d3:56:15:f3:43:e0:74:88:
c5:80:f7:fe:b2:7a:a0:e8:86:22:59:74:e1:f7:e5:d6:fa:43:
ed:f6:36:43:90:ec:6e:4c:00:a7:9d:8c:db:ed:ea:06:f6:c5:
53:c5:0e:8d:8c:28:b6:3d:1f:65:f5:54:89:2e:f4:4d:78:fd:
b0:3f:74:bc:94:95:62:d8:6e:1e:33:6d:b8:41:5d:32:18:df:
f5:f6:53:c9:78:66:77:78:eb:7d:ef:da:5f:0b:05:4a:0a:e4:
ec:12:23:01:af:da:d1:e9:dc:e2:70:88:bf:2e:ea:7d:c8:ff:
b7:06:71:67:6e:82:ee:78:f2:5d:6f:7c:14:1a:be:70:c2:70:
2d:f8:29:36
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2
N0Q1RDREMEUwHhcNMjUwODMwMjA0MTI1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWRmYi1lZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuUYTr6BZs9PA1tJBBKgbMzf9DjwcHOuHL2k2fG+Pf/Ny3ow39d98bbqk/dEc
1UizBtZEVZhyMsYeGU4O6iEbYdE6ShYNBnv9Xj9I+cG8jQvbwwZ5mECMaWzprstA
qszXRm64UKqs+k8MVqtzovj5kVLA5wGYwxe1AmN+N9uAmZxR1JO7Q+zKFwfBthqT
UjsvUWpCgcUCaBJ2EH3kAtvpGF+SIk6eQK1XhGeV+22ka1+yLccBCzkmYrC3rcHU
g1j0B2lIcOrnVLEUYQHuhfsLbVun6/HTISf7EZGUah0J7tYdCThJ2j8U0aEiDt1g
lrL9dEE0CvIcK4bZt825HLd5wwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFOacXBIJ
f2BvpzVVwM+0mmgnOAboMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw
RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MThDQTcvMkZDNzBBMjRBMEQ1MTFFQUE3RkZERjI5QzRGOUFFMDIvRTc2Rjk5QzYw
RkRCMTFFRDk3MTg2MDZBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ5erMA8EAgACMAkDBwAgAQ3zzIAwDQYJKoZIhvcNAQELBQADggEB
ADlOUpdBqfVqrprYKVCfxGOZnJqbQjbrGComjJbND8xmmTN84XaK+me4LlrO/use
U7ceG1PvuS51+qih2VuMWb6an/SoulH4GdmUlZBZjBqMFVW96adkVzhrj90nJOp5
zA223pgTRV0MWJw2d7xCqFlaAKFCB7TTVhXzQ+B0iMWA9/6yeqDohiJZdOH35db6
Q+32NkOQ7G5MAKedjNvt6gb2xVPFDo2MKLY9H2X1VIku9E14/bA/dLyUlWLYbh4z
bbhBXTIY3/X2U8l4Znd4633v2l8LBUoK5OwSIwGv2tHp3OJwiL8u6n3I/7cGcWdu
gu548l1vfBQavnDCcC34KTY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:03 2026 by rpki-client