
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/5BF797081CF411EBB5ADE642C4F9AE02.roa
File: 5BF797081CF411EBB5ADE642C4F9AE02.roa (raw, json)
Hash identifier: 1c98NA9cHWOcz+QEe0M5ImtNh0IRowEb6OME0CEVJwU=
Subject key identifier: 39:30:B6:BF:74:78:75:0D:2C:E2:BE:DF:B1:04:E1:B2:BE:14:93:3C
Certificate issuer: /CN=A9122C94/serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Certificate serial: 07FE
Authority key identifier: 50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/5BF797081CF411EBB5ADE642C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:08:49 +0000
ROA not before: Wed 10 Sep 2025 22:03:35 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 133066
IP address blocks: 103.241.156.0/22 maxlen: 22
103.241.156.0/24 maxlen: 24
103.241.157.0/24 maxlen: 24
103.241.158.0/24 maxlen: 24
103.241.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046 (0x7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122C94, serialNumber=50CDD60CF8F3123FDEBCE90882AF37BBE3EF5C48
Validity
Not Before: Sep 10 22:03:35 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a44871-f867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:fd:88:1f:b4:98:d3:50:71:ad:bd:ee:b1:
13:8b:0f:66:3c:b6:45:3e:3b:50:ee:e9:ad:ca:7c:
f9:fd:51:51:3b:bc:cc:d5:b4:02:77:19:2a:53:79:
27:fd:17:5b:56:64:1c:40:4b:ad:35:3f:e6:a3:c1:
1f:44:a8:ff:d9:5a:f1:36:89:29:56:9d:8c:dd:5f:
c0:0b:95:fd:04:34:d1:6a:19:aa:d7:b7:2d:4e:da:
09:64:d5:50:d9:56:3d:91:6f:17:62:82:99:01:63:
76:67:3a:af:ee:fa:bc:5c:4d:4c:7e:69:d4:14:4b:
8b:da:9e:53:87:f0:e7:16:2d:bf:8b:d7:9f:cd:62:
91:ff:f1:d3:40:0f:b7:9d:10:c4:75:f7:d7:b6:21:
98:fd:dc:58:b2:1f:4f:7f:3f:b5:7d:8c:7e:91:99:
04:d5:91:b1:23:ad:24:be:85:d5:66:0c:4e:78:ec:
eb:f3:80:4f:61:c7:2f:67:46:e9:47:b6:6c:e5:be:
41:fd:2c:bf:8c:40:c6:a6:4d:9c:c7:6e:e5:09:c3:
e3:12:87:94:0e:f0:4b:96:50:ab:0d:d1:fb:a5:c6:
fe:f7:50:41:cb:3e:bb:e2:9c:72:b7:28:db:8a:29:
fa:3a:be:03:b4:ea:c4:99:3e:e1:ea:e4:25:61:98:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:30:B6:BF:74:78:75:0D:2C:E2:BE:DF:B1:04:E1:B2:BE:14:93:3C
X509v3 Authority Key Identifier:
keyid:50:CD:D6:0C:F8:F3:12:3F:DE:BC:E9:08:82:AF:37:BB:E3:EF:5C:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/UM3WDPjzEj_evOkIgq83u-PvXEg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UM3WDPjzEj_evOkIgq83u-PvXEg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122C94/8222C27E1CF211EB84209540C4F9AE02/5BF797081CF411EBB5ADE642C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.241.156.0/22
Signature Algorithm: sha256WithRSAEncryption
57:01:70:d4:50:1c:de:f3:ee:fc:d4:50:51:45:27:d2:39:0b:
0a:e7:bf:5e:a6:ce:75:bd:7b:8d:dd:0a:ac:16:27:f4:a7:d3:
e5:86:ce:d2:95:ec:47:d9:a2:17:70:c3:3d:81:b1:7b:18:80:
78:3b:74:01:f1:f6:ce:e3:16:75:4f:9c:16:b1:8c:60:52:5c:
b1:1a:05:00:9f:cc:45:83:6d:c1:41:a3:b4:29:30:af:fd:e0:
d3:65:e1:60:ff:59:3d:7b:8c:69:af:b8:d4:55:d5:ad:31:f8:
6f:f0:97:aa:f9:20:d9:bb:30:a0:c6:dc:6a:7f:d8:67:2a:eb:
64:02:78:dd:0a:d3:c2:a1:7c:fb:95:21:68:f1:40:44:ab:09:
91:a3:26:5d:26:92:2b:90:15:f8:b1:95:38:68:95:40:57:00:
bd:a1:69:3a:94:e4:66:f6:ba:95:b0:fb:5d:c5:09:6b:8d:59:
ff:81:21:b4:dc:d2:cb:97:6f:19:5d:7e:f9:7b:22:bd:9e:3f:
65:e3:11:e4:f9:30:8f:9b:47:7e:14:b8:55:13:47:20:c4:b4:
02:35:10:18:3f:e9:97:a2:2d:a5:72:f1:fc:66:f5:e8:48:62:
d4:f3:08:b1:54:75:05:fe:3e:5e:d7:06:53:47:1a:57:7d:ca:
b4:e4:7e:14
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjJDOTQxMTAvBgNVBAUTKDUwQ0RENjBDRjhGMzEyM0ZERUJDRTkwODgyQUYzN0JC
RTNFRjVDNDgwHhcNMjUwOTEwMjIwMzM1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDg3MS1mODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3x79iB+0mNNQca297rETiw9mPLZFPjtQ7umtynz5/VFRO7zM1bQCdxkqU3kn
/RdbVmQcQEutNT/mo8EfRKj/2VrxNokpVp2M3V/AC5X9BDTRahmq17ctTtoJZNVQ
2VY9kW8XYoKZAWN2Zzqv7vq8XE1MfmnUFEuL2p5Th/DnFi2/i9efzWKR//HTQA+3
nRDEdffXtiGY/dxYsh9Pfz+1fYx+kZkE1ZGxI60kvoXVZgxOeOzr84BPYccvZ0bp
R7Zs5b5B/Sy/jEDGpk2cx27lCcPjEoeUDvBLllCrDdH7pcb+91BByz674pxytyjb
iin6Or4DtOrEmT7h6uQlYZgHUQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDkwtr90
eHUNLOK+37EE4bK+FJM8MB8GA1UdIwQYMBaAFFDN1gz48xI/3rzpCIKvN7vj71xI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkM5NC84MjIyQzI3RTFD
RjIxMUVCODQyMDk1NDBDNEY5QUUwMi9VTTNXRFBqekVqX2V2T2tJZ3E4M3UtUHZY
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VNM1dEUGp6RWpfZXZPa0lncTgzdS1QdlhFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjJDOTQvODIyMkMyN0UxQ0YyMTFFQjg0MjA5NTQwQzRGOUFFMDIvNUJGNzk3MDgx
Q0Y0MTFFQkI1QURFNjQyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZ/GcMA0GCSqGSIb3DQEBCwUAA4IBAQBXAXDUUBze8+781FBRRSfS
OQsK579eps51vXuN3QqsFif0p9Plhs7SlexH2aIXcMM9gbF7GIB4O3QB8fbO4xZ1
T5wWsYxgUlyxGgUAn8xFg23BQaO0KTCv/eDTZeFg/1k9e4xpr7jUVdWtMfhv8Jeq
+SDZuzCgxtxqf9hnKutkAnjdCtPCoXz7lSFo8UBEqwmRoyZdJpIrkBX4sZU4aJVA
VwC9oWk6lORm9rqVsPtdxQlrjVn/gSG03NLLl28ZXX75eyK9nj9l4xHk+TCPm0d+
FLhVE0cgxLQCNRAYP+mXoi2lcvH8ZvXoSGLU8wixVHUF/j5e1wZTRxpXfcq05H4U
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:15 2026 by rpki-client