
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/73A346A24D5D11EAA811C368C4F9AE02.roa
File: 73A346A24D5D11EAA811C368C4F9AE02.roa (raw, json)
Hash identifier: gGOBRkWJQFEn3Ide6JWEEBoMC/t51zFgYubDAzKamCs=
Subject key identifier: FA:D3:40:40:AD:A2:9A:86:A8:C2:35:14:81:A4:8F:7E:27:90:B9:7A
Certificate issuer: /CN=A9120A29/serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Certificate serial: 0B64
Authority key identifier: 41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/73A346A24D5D11EAA811C368C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:27:00 +0000
ROA not before: Mon 24 Mar 2025 19:59:18 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 140093
IP address blocks: 103.148.114.0/23 maxlen: 24
2001:df2:d180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2916 (0xb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120A29, serialNumber=41B31A68C9278A4D44748E2DF8C6ACA81578ECB5
Validity
Not Before: Mar 24 19:59:18 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40664-c10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:55:c8:9a:54:f9:9d:23:45:ce:66:6f:e9:
f7:0b:7e:46:a3:a0:6f:f5:a3:c0:85:cb:87:a7:9b:
9c:60:20:a9:0e:73:6b:8b:19:bc:13:fc:fb:b7:77:
c0:73:d6:07:c1:7a:28:78:25:1b:bb:83:97:d7:37:
fc:9d:2a:b7:ef:2d:9e:fb:c8:3f:93:db:07:77:12:
68:c3:c6:38:37:18:86:5d:00:35:7d:3e:ad:d0:f1:
4f:0e:f6:2b:87:23:60:fc:2e:46:ce:78:b2:c8:c1:
42:39:1d:ba:85:40:ce:1f:11:4f:db:ff:69:0a:6d:
de:e3:53:d5:4c:4a:6e:40:42:7b:ba:94:6d:eb:da:
cf:43:e6:00:e1:64:a0:1b:b0:4c:65:26:43:be:d7:
05:ae:6b:e9:9b:7c:53:2b:02:94:64:89:42:4d:7b:
65:04:46:94:92:92:3a:2b:3d:9a:58:96:ca:86:e5:
b6:e1:2c:06:f9:7e:69:b7:d8:e9:cd:51:c2:bc:2b:
3d:01:a1:fc:26:23:42:c1:65:79:ef:da:bb:b5:5f:
a7:0c:72:93:a9:f8:24:59:52:42:e1:3e:79:29:db:
4d:e4:f2:67:90:19:2a:b2:c2:26:06:eb:d6:48:04:
6a:23:a6:db:1f:1b:84:bc:53:24:1d:55:cd:0d:4a:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D3:40:40:AD:A2:9A:86:A8:C2:35:14:81:A4:8F:7E:27:90:B9:7A
X509v3 Authority Key Identifier:
keyid:41:B3:1A:68:C9:27:8A:4D:44:74:8E:2D:F8:C6:AC:A8:15:78:EC:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/QbMaaMknik1EdI4t-MasqBV47LU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbMaaMknik1EdI4t-MasqBV47LU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120A29/0E06DBA24D5C11EAA8088A66C4F9AE02/73A346A24D5D11EAA811C368C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.114.0/23
IPv6:
2001:df2:d180::/48
Signature Algorithm: sha256WithRSAEncryption
64:6b:97:be:9d:19:38:91:25:58:8f:ca:63:4a:2a:66:5d:d4:
ba:5c:45:15:21:a3:a4:be:04:24:83:46:32:34:c8:37:2d:47:
6d:4f:ff:74:9a:6e:ac:75:7f:d8:a0:85:6a:b2:e2:98:5f:2b:
b6:a4:6f:08:78:2b:d9:b4:42:56:18:70:45:e2:86:8d:3a:18:
bb:b7:9a:74:94:97:8b:87:4d:8c:cf:d5:40:7a:59:3a:06:6f:
38:52:b4:98:15:fa:9d:8f:f9:83:a8:c6:02:44:88:cc:27:71:
f4:21:f4:b3:2f:fb:25:54:23:7d:1c:87:75:7f:d2:bb:c1:13:
f6:17:16:56:2d:cc:94:4e:50:96:4b:77:e0:33:cd:73:7c:29:
ef:82:b4:bf:18:ed:8b:f7:49:e9:e5:2b:fa:d3:af:b4:44:a7:
6c:1c:22:3a:0a:6f:bc:4c:a8:d0:bf:93:3e:4a:19:16:36:0c:
72:c4:52:05:75:1c:c1:9d:30:c9:76:dc:09:a0:21:0a:00:94:
ff:91:4a:58:5a:7e:ec:67:f5:d3:a3:98:f1:9e:a0:97:5f:aa:
20:d1:68:5b:3c:45:40:d1:c2:a6:f9:5d:63:ad:a9:55:7c:37:
31:96:3b:2f:26:af:ee:b2:92:13:71:eb:fd:61:d7:f8:a7:23:
d1:28:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:21 2026 by rpki-client