
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa
File: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (raw, json)
Hash identifier: ir+ohPjIccF3vHpqVtefjBEm+cD7sV1/e2b1iEqR4BI=
Subject key identifier: 26:12:D4:51:E1:E3:7F:A0:03:EF:AF:FF:74:6A:B4:8E:84:FF:4C:DA
Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Certificate serial: 022C
Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:08:14 +0000
ROA not before: Sun 15 Feb 2026 03:24:00 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 23854
IP address blocks: 103.212.67.0/24 maxlen: 24
119.15.64.0/24 maxlen: 24
119.15.66.0/24 maxlen: 24
119.15.68.0/23 maxlen: 24
119.15.70.0/23 maxlen: 24
203.3.70.0/24 maxlen: 24
203.5.59.0/24 maxlen: 24
203.8.95.0/24 maxlen: 24
203.26.51.0/24 maxlen: 24
203.26.177.0/24 maxlen: 24
203.26.213.0/24 maxlen: 24
203.27.199.0/24 maxlen: 24
203.31.75.0/24 maxlen: 24
2001:df1:5a00::/48 maxlen: 48
2401:8560::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Validity
Not Before: Feb 15 03:24:00 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a4565e-3c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:3d:20:e6:27:71:e7:75:60:40:5b:ca:b4:
c4:26:3b:64:3f:b4:5a:21:58:6b:5a:ca:bf:24:9d:
06:d0:2b:9b:1a:b8:23:5d:c8:dd:d1:44:ab:fe:d9:
bc:e3:ec:31:36:45:6f:0d:af:62:6c:1d:64:d9:95:
54:fd:8f:21:ec:71:51:1b:fb:d0:12:f6:ae:00:6a:
6d:a0:96:76:ae:08:89:a0:16:b4:93:8f:e5:f4:99:
53:31:34:4c:c0:5b:64:8b:52:27:84:f8:57:ac:eb:
14:8d:79:2e:16:58:c9:d7:7d:e7:d6:44:4c:5a:fa:
28:81:70:24:d9:fd:de:b7:64:a0:4e:56:9d:c2:c9:
3f:93:3a:d8:00:af:81:23:f2:a3:ff:69:c8:5d:11:
7e:db:98:41:48:4d:d6:9a:98:b9:3c:f9:a4:d4:e7:
f0:28:96:8a:8f:cb:75:36:b4:c5:5d:8e:07:44:f6:
0c:13:1e:5f:4a:30:25:06:33:fc:e2:af:cf:07:50:
15:bd:79:3e:be:df:a9:18:8b:5e:ea:5c:7c:df:79:
46:7e:ae:11:fc:e7:43:9c:f8:e1:16:2f:1a:bc:61:
30:f2:6a:90:68:ff:de:b1:d3:9e:02:bd:1d:45:8a:
25:71:b7:b2:74:9f:54:5b:85:5c:a9:4b:b8:0b:53:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:12:D4:51:E1:E3:7F:A0:03:EF:AF:FF:74:6A:B4:8E:84:FF:4C:DA
X509v3 Authority Key Identifier:
keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.212.67.0/24
119.15.64.0/24
119.15.66.0/24
119.15.68.0/22
203.3.70.0/24
203.5.59.0/24
203.8.95.0/24
203.26.51.0/24
203.26.177.0/24
203.26.213.0/24
203.27.199.0/24
203.31.75.0/24
IPv6:
2001:df1:5a00::/48
2401:8560::/31
Signature Algorithm: sha256WithRSAEncryption
05:a3:df:62:c9:38:07:3e:b7:cc:93:18:0c:ca:24:e9:4a:77:
25:a0:3d:87:3b:3f:b3:0d:96:bd:a4:ba:96:b2:0f:c4:82:2d:
b0:85:0d:18:a9:19:ee:a3:fd:53:9b:1b:e4:2f:5c:a7:ea:18:
44:f6:62:b2:2c:92:8f:ac:96:70:6c:1c:8b:fe:fe:76:d6:3b:
47:82:97:6b:9d:d8:91:20:9b:b7:1f:65:20:52:c0:a3:7e:69:
33:c5:dd:48:32:90:6e:cc:13:e2:3b:56:aa:29:c4:51:9c:09:
7e:c6:67:ee:93:c8:5c:a3:a6:db:b4:af:8b:34:be:4b:d7:44:
2d:c7:4a:48:a0:47:b1:7d:da:c0:0a:9f:d6:81:ea:69:31:e8:
36:1f:f1:41:a1:ec:cc:da:fb:4d:f8:b6:b5:0d:27:ef:7d:a8:
fc:d0:e8:38:ff:66:df:c0:ae:fa:d5:82:a6:d6:e0:7f:10:81:
d4:9f:3e:0e:3c:86:63:dc:21:c4:6a:8c:c0:9d:1f:0c:ee:96:
39:b6:df:c1:40:94:76:f4:83:3d:08:29:bc:bc:a3:33:15:6e:
1e:73:7a:dc:ba:1e:37:51:fa:59:00:c7:3d:52:07:a1:7b:7f:
da:be:7d:d9:d6:ba:9b:fe:f1:c5:f5:a5:a6:2d:23:fc:02:61:
f0:8d:16:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:39 2026 by rpki-client