
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9D060E183ED611ED8963B549C4F9AE02.roa
File: 9D060E183ED611ED8963B549C4F9AE02.roa (raw, json)
Hash identifier: 6q6cxVdTWvtGrtWiJ2DlSVXHWjVLMFZYfVQkRp5qxGU=
Subject key identifier: 43:4D:74:9C:81:82:60:4E:A0:D5:CD:DA:B7:0E:B3:DD:06:37:40:5A
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C3A
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9D060E183ED611ED8963B549C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:44:41 +0000
ROA not before: Wed 02 Apr 2025 19:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8452
IP address blocks: 103.84.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3130 (0xc3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Apr 2 19:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a48919-9c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:ae:4b:d3:b9:86:fe:e3:13:e8:fd:ad:e8:
66:bf:97:dc:72:2b:ca:bb:a4:eb:18:7d:cb:84:5f:
bd:ff:08:91:0c:ca:de:ab:21:e6:e8:2b:ce:61:9f:
7b:a6:f5:fb:bb:11:11:52:13:09:17:0c:82:6f:7b:
05:72:58:8b:65:42:fb:67:7d:bc:5a:bf:04:21:f8:
93:85:df:34:88:c2:6e:81:12:d2:ac:9b:e1:4f:c5:
ff:e7:ab:b0:f3:9a:ae:a9:78:dc:77:fa:75:7b:28:
54:5e:1c:11:6b:5e:ad:5c:df:86:d0:53:56:c4:0e:
ea:14:61:6e:c4:3f:9a:86:1b:fd:16:9c:23:0b:0c:
30:cc:2d:64:11:4f:17:16:76:6e:51:0d:f3:9d:13:
34:a9:98:c6:51:f6:41:02:b8:e6:23:74:36:9f:14:
bc:1d:79:78:85:9b:d2:2b:9c:61:33:16:6b:25:e8:
1f:2e:11:dd:6c:f5:88:f0:a6:4b:3c:a4:31:c6:89:
4e:62:b0:d1:fb:a1:8f:ea:04:3d:ae:93:e6:3c:11:
a8:47:c5:01:20:00:68:b6:4a:94:d8:8f:66:0b:f3:
c4:00:f7:1e:5f:7b:ed:2d:76:d2:d5:98:a1:2e:07:
a9:2d:43:5d:bf:e7:91:cc:57:2c:10:87:38:ec:a3:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4D:74:9C:81:82:60:4E:A0:D5:CD:DA:B7:0E:B3:DD:06:37:40:5A
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9D060E183ED611ED8963B549C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.111.0/24
Signature Algorithm: sha256WithRSAEncryption
01:fd:c1:66:d3:a6:5c:d0:2d:71:f2:a0:51:fa:63:d9:67:a9:
92:e9:73:18:09:32:a8:e1:79:c0:54:2d:eb:3d:9a:2e:3d:2b:
0c:5c:4d:22:30:a4:17:64:ad:ef:69:ac:af:74:ee:8f:14:40:
6e:0f:5e:37:68:c3:0a:1b:dc:60:6f:ef:fb:1a:dd:3a:d8:da:
23:30:36:c2:1a:d3:e5:c1:e1:7f:50:0e:9e:14:0f:bc:6a:67:
3f:3e:60:67:6c:52:53:2f:f6:ac:9f:a3:b6:02:ed:13:f4:d8:
03:84:f8:aa:c1:87:4f:d4:ae:d4:23:2c:f4:4f:90:40:70:28:
cc:91:1c:f2:8c:20:91:4b:f5:e8:2e:ed:d6:79:8b:c8:54:8c:
85:5f:dd:ac:87:c3:64:ea:ab:64:ea:17:7b:2c:af:55:0c:13:
97:99:13:1a:bf:0c:3e:7c:45:e7:1c:c1:4f:48:52:20:ec:e8:
37:3f:63:2e:d4:a8:41:df:6f:da:ea:de:60:9b:9e:0e:d2:45:
cc:c3:7d:c0:47:ea:2f:41:b3:a9:52:ac:be:a5:ac:06:62:2e:
ec:04:fb:7d:fe:7f:fb:4e:d2:d7:5a:a7:fb:0a:be:f2:d7:f5:
08:2f:40:d0:3e:4c:8c:6f:26:ef:27:ce:d2:52:8e:f6:f5:ab:
1e:ab:7f:45
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjUwNDAyMTk1MDM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODkxOS05Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAptKuS9O5hv7jE+j9rehmv5fccivKu6TrGH3LhF+9/wiRDMreqyHm6CvOYZ97
pvX7uxERUhMJFwyCb3sFcliLZUL7Z328Wr8EIfiThd80iMJugRLSrJvhT8X/56uw
85quqXjcd/p1eyhUXhwRa16tXN+G0FNWxA7qFGFuxD+ahhv9FpwjCwwwzC1kEU8X
FnZuUQ3znRM0qZjGUfZBArjmI3Q2nxS8HXl4hZvSK5xhMxZrJegfLhHdbPWI8KZL
PKQxxolOYrDR+6GP6gQ9rpPmPBGoR8UBIABotkqU2I9mC/PEAPceX3vtLXbS1Zih
LgepLUNdv+eRzFcsEIc47KMzFQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFENNdJyB
gmBOoNXN2rcOs90GN0BaMB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvOUQwNjBFMTgz
RUQ2MTFFRDg5NjNCNTQ5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ1RvMA0GCSqGSIb3DQEBCwUAA4IBAQAB/cFm06Zc0C1x8qBR+mPZ
Z6mS6XMYCTKo4XnAVC3rPZouPSsMXE0iMKQXZK3vaayvdO6PFEBuD143aMMKG9xg
b+/7Gt062NojMDbCGtPlweF/UA6eFA+8amc/PmBnbFJTL/asn6O2Au0T9NgDhPiq
wYdP1K7UIyz0T5BAcCjMkRzyjCCRS/XoLu3WeYvIVIyFX92sh8Nk6qtk6hd7LK9V
DBOXmRMavww+fEXnHMFPSFIg7Og3P2Mu1KhB32/a6t5gm54O0kXMw33AR+ovQbOp
Uqy+pawGYi7sBPt9/n/7TtLXWqf7Cr7y1/UIL0DQPkyMbybvJ87SUo729aseq39F
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:12 2026 by rpki-client