
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/9E82296E5FA611EF9A75477FC4F9AE02.roa
File: 9E82296E5FA611EF9A75477FC4F9AE02.roa (raw, json)
Hash identifier: kOf83aQjaaKqko4elWofBx+7KSgYudc2m1r/KiOBcQg=
Subject key identifier: 5B:52:0F:D4:62:C6:BF:2B:09:63:70:E8:F0:5B:C2:5F:42:B4:02:D8
Certificate issuer: /CN=A912A138/serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Certificate serial: 07CF
Authority key identifier: E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/9E82296E5FA611EF9A75477FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:54:08 +0000
ROA not before: Sat 12 Jul 2025 22:02:44 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 15830
IP address blocks: 103.140.211.0/24 maxlen: 24
180.189.52.0/23 maxlen: 23
180.189.54.0/23 maxlen: 23
2405:4c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:51:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A138, serialNumber=E889DDD5542C6D2C9DC740E1246A9E748E751352
Validity
Not Before: Jul 12 22:02:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a45310-bb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:5c:04:0d:74:39:98:ae:eb:11:2b:4e:b3:
9a:95:9b:94:37:d5:e2:d8:e6:2c:c4:00:b8:6a:4b:
0a:6f:40:ec:af:73:2d:17:61:42:7c:43:e6:3e:f8:
f9:68:77:c6:f0:61:b5:a6:27:80:93:fd:ab:cf:f0:
cf:b1:1d:6b:c2:70:79:78:c6:a2:46:59:38:25:93:
3a:fe:e9:ad:91:a1:5c:ae:6a:70:20:1e:26:c1:3f:
a2:6d:34:dd:f8:62:36:fc:a8:7a:1c:b0:19:1d:fa:
e2:d8:5d:2f:ac:52:3d:58:ae:8f:42:ce:df:3b:2a:
75:c5:96:7f:89:87:89:d7:e6:d9:f1:7e:8f:c9:0c:
7f:82:af:3f:1b:40:f3:1e:8e:2e:b0:31:0f:1f:cb:
76:6f:fe:4b:85:34:2f:1c:bb:c9:77:4f:fe:74:5e:
ab:0f:b0:85:9f:8f:5f:f6:78:c2:36:96:61:61:3d:
c7:80:62:88:81:1a:6d:be:c4:e8:8f:a2:ec:34:ca:
56:50:92:a4:65:aa:51:f8:9c:e1:22:28:74:6e:f7:
90:38:88:31:82:bb:7a:38:d0:8f:ee:f7:ee:a3:7d:
44:7b:62:66:70:53:d7:18:3d:ff:1f:4a:aa:48:87:
d1:35:30:d2:d6:69:c5:c7:8f:70:bb:be:fb:7e:d7:
c1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:0F:D4:62:C6:BF:2B:09:63:70:E8:F0:5B:C2:5F:42:B4:02:D8
X509v3 Authority Key Identifier:
keyid:E8:89:DD:D5:54:2C:6D:2C:9D:C7:40:E1:24:6A:9E:74:8E:75:13:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/6Ind1VQsbSydx0DhJGqedI51E1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ind1VQsbSydx0DhJGqedI51E1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A138/BB06B338392711EB9F955E7EC4F9AE02/9E82296E5FA611EF9A75477FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.211.0/24
180.189.52.0/22
IPv6:
2405:4c0::/32
Signature Algorithm: sha256WithRSAEncryption
30:78:f5:15:54:9d:de:1e:72:fc:6f:c6:a1:8b:18:cd:39:4e:
9d:32:25:04:c4:87:93:9f:f8:42:71:d6:1f:b8:4e:cb:e3:fd:
2c:44:c4:bc:06:8e:bb:57:6a:c6:ee:f7:34:24:31:cf:85:11:
df:8e:b4:6f:8c:bf:9b:58:96:8b:46:85:f9:99:41:1a:c4:42:
93:7e:a6:1a:fb:bb:b1:90:0f:93:2d:dd:e1:61:dd:78:b9:ce:
4c:b5:75:2e:43:2d:9d:0e:52:3b:19:40:1d:bc:13:85:f9:d3:
9d:8b:a8:ac:32:98:1d:e8:0e:52:7e:40:a2:b4:23:a9:10:82:
46:84:3b:eb:59:49:35:f9:fe:91:81:18:ca:18:2a:eb:a7:67:
77:ea:cc:a3:b9:f3:e8:8c:b7:0d:69:82:b5:af:d8:f0:bf:a9:
22:d0:89:26:22:b3:4c:36:95:5d:b4:3e:43:d1:81:d7:05:b8:
d8:88:00:a7:5c:bb:c9:5a:93:e5:79:d3:c1:fc:95:51:45:db:
3a:8e:3b:b7:bb:f6:3b:13:34:b8:ef:72:2c:18:72:f3:13:fe:
67:46:8e:bb:c2:dd:8b:cf:c1:07:51:d5:f0:d4:3c:5c:6e:68:
5e:b1:25:7e:31:7c:fe:5b:a6:33:e0:93:ff:b6:25:c4:b4:2c:
6c:0a:34:da
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkExMzgxMTAvBgNVBAUTKEU4ODlEREQ1NTQyQzZEMkM5REM3NDBFMTI0NkE5RTc0
OEU3NTEzNTIwHhcNMjUwNzEyMjIwMjQ0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTMxMC1iYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArGRcBA10OZiu6xErTrOalZuUN9Xi2OYsxAC4aksKb0Dsr3MtF2FCfEPmPvj5
aHfG8GG1pieAk/2rz/DPsR1rwnB5eMaiRlk4JZM6/umtkaFcrmpwIB4mwT+ibTTd
+GI2/Kh6HLAZHfri2F0vrFI9WK6PQs7fOyp1xZZ/iYeJ1+bZ8X6PyQx/gq8/G0Dz
Ho4usDEPH8t2b/5LhTQvHLvJd0/+dF6rD7CFn49f9njCNpZhYT3HgGKIgRptvsTo
j6LsNMpWUJKkZapR+JzhIih0bveQOIgxgrt6ONCP7vfuo31Ee2JmcFPXGD3/H0qq
SIfRNTDS1mnFx49wu777ftfB6QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFtSD9Ri
xr8rCWNw6PBbwl9CtALYMB8GA1UdIwQYMBaAFOiJ3dVULG0sncdA4SRqnnSOdRNS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTEzOC9CQjA2QjMzODM5
MjcxMUVCOUY5NTVFN0VDNEY5QUUwMi82SW5kMVZRc2JTeWR4MERoSkdxZWRJNTFF
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZJbmQxVlFzYlN5ZHgwRGhKR3FlZEk1MUUxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkExMzgvQkIwNkIzMzgzOTI3MTFFQjlGOTU1RTdFQzRGOUFFMDIvOUU4MjI5NkU1
RkE2MTFFRjlBNzU0NzdGQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQAZ4zTAwQCtL00MA0EAgACMAcDBQAkBQTAMA0GCSqGSIb3DQEBCwUA
A4IBAQAwePUVVJ3eHnL8b8ahixjNOU6dMiUExIeTn/hCcdYfuE7L4/0sRMS8Bo67
V2rG7vc0JDHPhRHfjrRvjL+bWJaLRoX5mUEaxEKTfqYa+7uxkA+TLd3hYd14uc5M
tXUuQy2dDlI7GUAdvBOF+dOdi6isMpgd6A5SfkCitCOpEIJGhDvrWUk1+f6RgRjK
GCrrp2d36syjufPojLcNaYK1r9jwv6ki0IkmIrNMNpVdtD5D0YHXBbjYiACnXLvJ
WpPledPB/JVRRds6jju3u/Y7EzS473IsGHLzE/5nRo67wt2Lz8EHUdXw1Dxcbmhe
sSV+MXz+W6Yz4JP/tiXEtCxsCjTa
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:58 2026 by rpki-client