
$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
File: D66E75F0A5CF11EC94CFB734C4F9AE02.roa (raw, json)
Hash identifier: ETfjS8T7vy4lxoxsMESAH05v9FmpfzV/Vvpjf22fnE4=
Subject key identifier: 33:C5:29:A0:69:D3:B0:F3:45:D1:74:61:11:6D:96:88:02:10:DB:09
Certificate issuer: /CN=A9125C3D/serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Certificate serial: 0417
Authority key identifier: 57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:56:19 +0000
ROA not before: Thu 03 Apr 2025 01:26:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136964
IP address blocks: 103.183.142.0/24 maxlen: 24
103.183.143.0/24 maxlen: 24
2001:df0:8840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C3D, serialNumber=5727EEE8DA2E2CC79FABA0DAD19C88482BD159DC
Validity
Not Before: Apr 3 01:26:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3ff33-9c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:63:03:18:d4:ee:cd:40:b9:25:2f:3f:29:
92:c0:cc:1d:08:cb:44:41:04:9b:e3:da:8a:76:80:
4a:23:72:96:9d:25:f4:28:e8:88:80:49:06:12:ce:
bb:fa:2e:88:37:99:45:4c:1b:8d:a5:11:d6:e0:6a:
84:ee:55:92:88:9b:f6:c1:79:54:b0:60:36:b4:02:
24:15:05:d9:b7:9d:cf:f2:a5:b5:49:8b:5c:f6:bd:
7b:42:bf:e1:2e:7e:b3:78:73:b4:45:ec:f2:63:40:
72:e5:21:a7:29:50:13:00:ee:2a:bf:90:92:1f:e6:
55:b8:60:d1:d4:3b:af:3e:c0:bf:19:e0:56:30:c3:
cf:d2:a9:d1:8e:54:c8:09:24:3f:7d:39:02:16:e9:
42:41:e9:d8:8b:e6:32:55:eb:d0:ac:5a:a2:db:aa:
ae:ac:32:d4:4b:5a:03:b0:80:3e:10:0f:d7:fe:5d:
55:44:0c:52:73:22:09:30:2a:4b:52:d2:df:13:ff:
fb:51:6e:a8:66:f1:51:91:f0:68:01:dc:14:fe:cf:
3c:34:ad:88:2a:05:af:f3:f1:68:1d:d0:18:f6:69:
06:65:13:07:25:1a:b5:53:97:30:74:18:98:8d:f9:
ff:18:c7:e6:9e:76:4f:f0:7c:e0:8e:8b:88:da:c2:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C5:29:A0:69:D3:B0:F3:45:D1:74:61:11:6D:96:88:02:10:DB:09
X509v3 Authority Key Identifier:
keyid:57:27:EE:E8:DA:2E:2C:C7:9F:AB:A0:DA:D1:9C:88:48:2B:D1:59:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/Vyfu6NouLMefq6Da0ZyISCvRWdw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vyfu6NouLMefq6Da0ZyISCvRWdw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C3D/F8029A46A5CC11ECB75EC52DC4F9AE02/D66E75F0A5CF11EC94CFB734C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.142.0/23
IPv6:
2001:df0:8840::/48
Signature Algorithm: sha256WithRSAEncryption
1a:65:14:f5:09:fb:41:0b:7a:34:15:5c:3f:44:bd:be:17:d7:
8b:86:5a:7c:94:ef:40:cc:98:44:ad:93:ad:b3:c0:77:13:c7:
7e:d7:34:ce:a7:01:68:97:e1:bd:d9:7d:7c:83:86:83:09:dc:
e4:31:47:33:79:62:4f:a4:dd:af:27:0f:75:9b:a3:d8:74:55:
7b:09:52:c8:e3:32:68:54:65:6f:bb:61:8a:00:b6:ae:23:e1:
2b:40:e2:05:1f:c4:10:be:30:12:98:48:1d:a1:bb:c1:c3:00:
8a:2a:94:bc:fd:cf:48:8c:c8:cc:44:2b:37:aa:67:1f:e1:e4:
af:b0:b7:6c:d8:62:93:58:70:18:4e:2b:9d:01:32:b9:71:eb:
eb:8c:b6:a7:70:d4:82:0b:b8:9a:a0:25:8d:42:0b:57:86:78:
e7:b6:39:74:3c:c5:f7:8a:2a:7a:f6:0c:87:9e:8a:8b:1b:8d:
57:1f:40:7e:7e:bf:a6:e3:a4:b4:85:36:02:e6:16:26:e7:27:
d8:38:71:41:23:c9:79:1f:ee:d4:f7:38:21:0d:1d:c3:f7:cf:
4e:5d:ca:9e:99:0c:2b:20:74:fa:88:e0:a8:49:d4:37:d8:d6:
88:82:b7:43:4d:06:a9:10:a9:e3:10:db:8a:87:52:c0:33:6d:
24:86:87:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:29 2026 by rpki-client