
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa
File: 98FB9AA812EB11F1974F37D30E3D8C67.roa (raw, json)
Hash identifier: RGRkjXCs5NkIsFlBV4PSVHCbwn4KFTzJA6Li9AcD2Nc=
Subject key identifier: A1:DC:B2:F1:D5:3C:26:23:2E:25:7F:6F:1B:BA:4D:F6:32:04:A2:AC
Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Certificate serial: 1449
Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa
Signing time: Sun 01 Mar 2026 17:27:25 +0000
ROA not before: Sat 28 Feb 2026 11:36:01 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 215748
IP address blocks: 103.116.45.0/24 maxlen: 24
103.129.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5193 (0x1449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9
Validity
Not Before: Feb 28 11:36:01 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a476fd-334f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:d1:f2:88:0d:12:bc:b4:5c:f2:64:0e:0f:
23:fb:fb:6b:84:dc:52:f2:f0:87:3c:21:d6:d0:7c:
9e:51:c4:1c:40:f2:e6:2e:0e:08:b9:f9:08:45:4c:
b3:8e:60:88:d5:b7:d6:7e:67:26:ce:24:fb:8f:b5:
5a:cf:cc:96:0a:c8:26:5a:f6:70:13:e8:0e:8d:4c:
74:75:32:7a:11:95:0e:74:c5:97:6e:e4:3b:45:d0:
be:8f:55:8d:4a:cf:59:52:7e:92:48:9a:ca:09:65:
ec:26:d6:8d:cd:63:db:82:a9:13:a1:48:4f:cb:7a:
4d:34:65:c9:a3:96:51:8e:b4:00:9f:dc:c5:b5:6d:
9a:91:44:0d:f8:c7:41:59:52:50:a6:c1:7c:e3:50:
44:86:74:ea:18:03:be:bb:3b:f9:f9:4e:6c:fb:1c:
a2:e9:08:f0:b2:9e:23:e2:2f:9a:74:1d:b6:93:cc:
1c:c1:51:88:17:18:04:50:3c:93:64:c5:52:57:22:
bc:01:2b:53:1b:0f:ee:f3:92:9a:07:b3:d7:52:c0:
28:7f:45:d0:f5:e5:13:45:a0:69:54:a5:44:f3:c0:
df:52:af:ad:e6:f6:19:ab:ec:a5:5d:81:b1:b8:f1:
67:3e:f2:55:11:d9:27:f1:b4:49:84:d8:65:1d:46:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DC:B2:F1:D5:3C:26:23:2E:25:7F:6F:1B:BA:4D:F6:32:04:A2:AC
X509v3 Authority Key Identifier:
keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/98FB9AA812EB11F1974F37D30E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.45.0/24
103.129.196.0/24
Signature Algorithm: sha256WithRSAEncryption
f0:7f:83:9c:5f:88:2d:27:a7:57:01:74:da:76:2e:c1:f6:25:
d5:bf:8d:a9:26:55:60:97:7f:3c:76:c2:d6:5f:51:c0:9b:be:
c2:19:90:59:b6:fa:f3:44:ef:b1:73:b8:5c:22:a8:8c:21:83:
a0:6f:bd:10:5b:dc:c5:6b:d2:a9:b1:a0:27:68:0d:15:8f:eb:
e4:ee:6d:43:9e:32:dc:19:18:0a:2e:52:f0:98:64:15:04:d4:
c1:87:66:66:8b:c7:ba:74:e5:9b:17:93:59:9c:d0:11:44:08:
bb:99:d2:22:3d:eb:9a:2b:3a:0c:fb:48:83:15:63:62:70:4a:
dd:8b:ea:1f:b4:fa:6b:b9:53:da:e3:46:57:f7:e1:5d:bb:2a:
2f:a5:51:6b:6b:d6:f6:e7:1b:e8:46:80:70:27:d9:c5:f4:86:
6f:4c:d4:3a:05:28:be:a6:bd:37:83:92:2d:a6:e6:a4:5e:5b:
c7:ab:54:82:ac:e8:b8:53:4c:b3:4b:86:40:eb:0a:be:a0:0e:
5c:f4:0c:f5:d8:74:82:a6:0c:67:4d:53:ba:3c:4a:2c:15:5e:
f4:f8:77:96:fe:aa:f3:10:fb:c5:4d:f7:06:f7:2f:46:79:fe:
07:4e:ca:a8:af:07:6f:26:01:3a:81:70:21:cb:9f:fe:e6:db:
85:61:bf:25
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICFEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC
MzVFODU5RjkwHhcNMjYwMjI4MTEzNjAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzZmZC0zMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqfbR8ogNEry0XPJkDg8j+/trhNxS8vCHPCHW0HyeUcQcQPLmLg4IufkIRUyz
jmCI1bfWfmcmziT7j7Vaz8yWCsgmWvZwE+gOjUx0dTJ6EZUOdMWXbuQ7RdC+j1WN
Ss9ZUn6SSJrKCWXsJtaNzWPbgqkToUhPy3pNNGXJo5ZRjrQAn9zFtW2akUQN+MdB
WVJQpsF841BEhnTqGAO+uzv5+U5s+xyi6Qjwsp4j4i+adB22k8wcwVGIFxgEUDyT
ZMVSVyK8AStTGw/u85KaB7PXUsAof0XQ9eUTRaBpVKVE88DfUq+t5vYZq+ylXYGx
uPFnPvJVEdkn8bRJhNhlHUZqnwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKHcsvHV
PCYjLiV/bxu6TfYyBKKsMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez
NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X
ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjBGMEQvMDhFQzJCMENBMzZFMTFFOEI4OTY2NjJCQzRGOUFFMDIvOThGQjlBQTgx
MkVCMTFGMTk3NEYzN0QzMEUzRDhDNjcucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAZ3QtAwQAZ4HEMA0GCSqGSIb3DQEBCwUAA4IBAQDwf4OcX4gtJ6dX
AXTadi7B9iXVv42pJlVgl388dsLWX1HAm77CGZBZtvrzRO+xc7hcIqiMIYOgb70Q
W9zFa9KpsaAnaA0Vj+vk7m1DnjLcGRgKLlLwmGQVBNTBh2Zmi8e6dOWbF5NZnNAR
RAi7mdIiPeuaKzoM+0iDFWNicErdi+oftPpruVPa40ZX9+FduyovpVFra9b25xvo
RoBwJ9nF9IZvTNQ6BSi+pr03g5ItpuakXlvHq1SCrOi4U0yzS4ZA6wq+oA5c9Az1
2HSCpgxnTVO6PEosFV70+HeW/qrzEPvFTfcG9y9Gef4HTsqorwdvJgE6gXAhy5/+
5tuFYb8l
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:53:26 2026 by rpki-client