
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7BFABFDE928611EE9B72027FC4F9AE02.roa
File: 7BFABFDE928611EE9B72027FC4F9AE02.roa (raw, json)
Hash identifier: e5s4Spxd3J8HwN8uF5Z006jLhe1iCuKDPedtYRd/C2Q=
Subject key identifier: 6F:1F:E1:D3:A7:F3:14:19:D8:10:B8:17:35:AB:54:06:A8:BE:30:42
Certificate issuer: /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial: 01B8
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7BFABFDE928611EE9B72027FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:19:48 +0000
ROA not before: Tue 23 Dec 2025 03:23:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 132581
IP address blocks: 103.126.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Validity
Not Before: Dec 23 03:23:49 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a45914-3a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:b1:fd:35:b2:30:c8:3e:e4:5b:cd:ae:d7:
42:48:70:87:07:d1:06:d5:bd:74:37:04:5b:72:bd:
cb:3e:26:a5:fc:bf:ed:18:71:6f:23:d1:6f:74:80:
4f:02:e9:56:77:09:44:80:e4:b0:8d:fb:3a:11:8f:
7e:58:c9:39:20:57:5f:69:84:c6:5d:e2:31:4d:95:
25:e3:3d:4d:14:9b:a0:49:bc:8c:02:1e:2e:0f:32:
ea:43:2b:ad:2b:fc:cb:9e:cd:85:b9:90:db:24:da:
12:73:ef:c9:f5:c5:c2:64:b1:f0:df:9c:73:00:b4:
2f:91:5e:61:a2:76:5d:79:69:25:7d:41:e3:2f:b7:
b6:08:96:83:10:10:97:80:59:4d:94:85:e8:77:e5:
35:71:59:ed:3a:c9:6a:58:c0:b6:59:08:28:2c:2b:
d9:fe:77:65:34:9e:23:a6:71:cf:9b:cb:02:38:87:
2d:80:c1:b0:ee:32:98:c3:49:89:16:35:5f:3f:e1:
68:f1:9e:76:c8:55:92:a6:58:2f:45:f8:f9:17:93:
87:c3:4c:e6:d8:d2:17:98:d3:c2:2e:2c:fe:c5:d3:
c9:2e:a6:60:a7:47:c8:80:94:50:fe:a2:49:04:f1:
e6:9a:71:4b:07:a4:85:fc:93:af:83:fa:8b:51:ff:
ff:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1F:E1:D3:A7:F3:14:19:D8:10:B8:17:35:AB:54:06:A8:BE:30:42
X509v3 Authority Key Identifier:
keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7BFABFDE928611EE9B72027FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.126.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c1:0b:c1:56:f4:04:e4:a0:e2:88:47:2b:d5:50:e6:b1:7f:
5e:7d:43:44:d3:b2:5d:5a:43:e6:4a:03:0b:47:09:ee:d8:a9:
50:e4:2a:8f:78:39:12:50:68:6c:22:1e:7c:ad:f8:c4:1f:9a:
a6:33:32:de:4f:b9:01:07:75:29:85:a4:11:0c:f0:6e:c5:d5:
21:37:c5:af:2f:1c:c2:d4:3b:5f:50:b6:14:10:4b:bf:3e:84:
b2:29:8b:55:43:07:64:6e:94:89:92:4f:56:dc:c2:7f:cc:f9:
a3:18:84:c2:e1:ac:81:ac:0f:0f:7c:53:4c:fb:81:be:07:c2:
ac:5b:09:09:cc:66:38:a7:8f:bd:75:b4:e4:d1:19:80:2a:ca:
11:96:09:6f:8e:81:2f:b3:8f:f4:af:32:8a:bd:12:d9:4a:dc:
8c:83:94:d3:f1:71:5d:dd:a2:e2:9e:dd:84:ad:e0:b2:47:7a:
dd:05:cb:34:c0:96:8d:b7:2a:c0:a9:58:75:e4:5c:bc:c8:db:
f0:0e:43:1d:34:98:2d:f3:d3:c9:74:75:97:d8:f2:e1:bd:ab:
9f:0e:21:f8:2f:4d:e5:8f:b6:03:74:f9:98:7d:2f:5d:61:e2:
ff:43:36:d9:dd:64:38:65:4e:62:5d:12:1d:f5:d6:e1:da:81:
f8:61:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:48 2026 by rpki-client