
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/8F447DB8149911F197DD892E413D8C67.roa
File: 8F447DB8149911F197DD892E413D8C67.roa (raw, json)
Hash identifier: 9HlejyuoDqfmEXIUW5GCTKYZVKxEmefNGE2bDDFH2HY=
Subject key identifier: F0:DC:42:F2:5A:C8:FA:E1:DD:51:E6:45:3F:9B:C3:98:08:13:DF:9B
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 1448
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/8F447DB8149911F197DD892E413D8C67.roa
Signing time: Sun 01 Mar 2026 17:27:25 +0000
ROA not before: Sat 28 Feb 2026 11:35:19 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135542
IP address blocks: 103.116.44.0/24 maxlen: 24
103.129.198.0/24 maxlen: 24
103.129.199.0/24 maxlen: 24
2402:f5c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5192 (0x1448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Feb 28 11:35:19 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a476fd-a5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:db:2e:3d:a4:9e:05:c3:26:f3:7f:59:ac:
38:7f:53:70:3e:71:ec:b0:c0:a2:97:ef:1c:19:6a:
27:33:09:0e:76:63:9e:63:89:1d:75:e2:25:36:86:
41:02:0a:31:92:2d:d3:84:27:52:e7:de:16:12:b4:
bb:dd:67:04:b5:ff:b9:45:05:8c:2b:3b:6a:a4:f4:
cd:9a:1d:27:86:6b:29:4b:bb:fd:7c:06:2a:a7:46:
70:60:22:1c:76:04:6a:20:7e:27:19:fc:79:52:6b:
1d:13:a8:52:0d:00:36:2a:b6:a9:c3:89:87:92:04:
ce:2e:a8:0b:c2:c1:9b:8e:2a:23:08:5c:97:93:b5:
c1:9e:a6:96:c1:23:74:a2:cc:ef:5c:f6:b9:39:6f:
48:21:fe:48:da:a0:c0:d6:c2:70:e2:cf:c6:12:30:
6b:46:66:a8:2d:e1:c0:3e:68:81:6d:7e:23:55:38:
51:f7:7b:52:93:75:16:20:e6:55:e8:34:9f:81:31:
70:63:b5:d1:a7:69:0f:62:0a:52:32:6c:77:39:6c:
fa:79:d5:68:b4:71:72:3f:b1:d9:b7:fb:8d:06:a8:
69:c4:5c:87:9f:f4:ad:c2:b4:b4:1b:fd:2a:86:dd:
c5:0c:3b:26:53:73:0f:b3:d2:92:04:dd:12:cc:2e:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DC:42:F2:5A:C8:FA:E1:DD:51:E6:45:3F:9B:C3:98:08:13:DF:9B
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/8F447DB8149911F197DD892E413D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.44.0/24
103.129.198.0/23
IPv6:
2402:f5c0::/32
Signature Algorithm: sha256WithRSAEncryption
13:31:d9:c6:a3:93:3c:42:4f:d1:3c:2f:0d:ca:0b:a9:81:91:
ff:4d:ac:aa:97:24:c2:fd:2a:ee:9d:04:15:a0:35:db:18:00:
64:08:34:0b:9a:35:35:8e:86:98:db:e0:ab:42:6e:54:ca:0a:
74:90:d7:f3:2b:8a:0a:00:6f:11:21:75:8a:f2:a3:d1:f9:17:
74:a3:f9:d3:1b:4e:50:7b:8f:fe:3a:2c:94:57:3f:8b:2d:16:
77:36:1e:d2:61:a4:2f:fb:38:03:17:20:bc:ef:ef:d9:a3:a1:
f8:b7:39:95:34:89:41:d8:b4:b0:b8:80:f2:c5:09:5e:ab:6a:
ac:e3:e1:97:e7:79:87:93:5c:7b:e1:ff:8c:69:7d:63:ac:2d:
ae:4d:b5:71:c4:e3:2c:94:6a:69:b5:85:de:93:35:96:39:71:
99:ac:c1:28:a8:b4:15:cd:f1:3a:cf:9e:f3:30:ea:d2:dd:79:
7d:66:c6:22:2b:99:22:bd:80:6d:cb:6a:cc:85:a3:8e:eb:36:
95:3a:66:6e:cc:6a:03:52:38:1d:75:1b:8b:2e:b7:9e:68:1f:
aa:47:a1:28:d9:2e:71:14:05:43:83:be:d5:c3:98:0e:42:fa:
22:01:ca:79:e0:57:43:88:d3:91:60:43:39:ef:aa:e4:1d:43:
0e:36:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:13 2026 by rpki-client