
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa
File: D791DEB48DEE11EEB451D416C4F9AE02.roa (raw, json)
Hash identifier: ogB5LcAFLGDiGBGlkcmZB7OcR4/ExHiQ1cF7R3OBSzU=
Subject key identifier: 1F:74:E7:A0:44:9E:D5:64:DF:BF:4D:09:2B:B2:E8:2F:3E:42:5B:48
Certificate issuer: /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial: 0497
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa
Signing time: Fri 11 Sep 2026 00:50:13 +0000
ROA not before: Fri 11 Sep 2026 00:50:13 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 55410
IP address blocks: 103.121.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1175 (0x497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Validity
Not Before: Sep 11 00:50:13 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa35045-aaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:eb:4b:b5:46:18:a3:4b:b2:ec:64:bb:dd:
b6:bd:8d:59:4f:48:63:aa:76:2c:a1:c3:49:3e:55:
a3:f2:57:32:00:a5:bc:55:e5:b2:b2:03:9f:c9:37:
c8:ea:f6:37:17:ee:5e:bf:fa:b4:18:06:3d:cc:8c:
38:ee:bf:15:a6:d1:7b:cc:ea:47:ec:b9:d3:b7:ce:
0d:83:73:08:8e:73:16:de:e1:90:46:88:1f:fb:60:
df:99:bf:3a:29:6a:dd:a7:69:4f:e3:f9:23:37:77:
dd:c1:b2:56:97:1b:29:17:b4:8d:37:43:57:ab:d9:
55:33:10:de:30:eb:66:01:85:95:51:f1:94:bd:0c:
be:7d:1f:50:a5:2b:94:b1:5f:69:0b:b6:7e:e0:a3:
9a:80:cd:88:9a:5e:8a:40:f1:66:b8:17:49:a6:2a:
94:94:e9:25:b4:00:cb:13:7f:3d:a2:2f:65:43:d3:
93:76:ad:c1:07:fa:24:8a:7c:23:d9:fa:0a:d8:c8:
b6:d3:7a:13:ec:c9:3c:bd:38:68:ed:fb:6f:36:76:
ea:01:59:41:17:88:73:14:7b:72:da:99:25:58:3b:
8c:6f:c2:09:53:5f:de:f7:f0:be:e9:78:65:44:fb:
26:74:0d:8a:61:39:42:1a:65:08:94:b5:15:8f:cf:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:74:E7:A0:44:9E:D5:64:DF:BF:4D:09:2B:B2:E8:2F:3E:42:5B:48
X509v3 Authority Key Identifier:
keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/D791DEB48DEE11EEB451D416C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.192.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7f:e3:b1:0b:5d:c7:19:2a:89:ea:ee:ac:28:2c:30:36:81:
6b:e6:03:c9:3c:35:c2:0e:d4:a4:73:bd:4a:b3:11:7f:2c:c1:
c0:dc:05:8a:fc:97:2b:05:41:e5:41:08:fa:53:95:eb:f1:c4:
a2:24:f1:5e:82:5d:fc:1c:ef:5f:37:64:f2:19:d1:d3:f6:77:
d2:d5:b5:3c:ea:32:8d:b9:fd:a5:19:50:8b:53:4f:53:4b:33:
6d:78:af:73:ba:e6:aa:58:48:fe:26:45:e5:92:21:f2:d9:16:
ca:c6:67:4e:cb:0a:0f:f8:51:90:33:af:49:f9:32:c7:e5:d3:
2f:07:97:fd:8d:7d:db:af:59:88:ed:f5:a2:03:92:ec:bf:b0:
9e:f4:af:f3:4d:7f:75:5e:27:d4:d9:9b:71:4a:7c:fb:96:36:
19:95:0d:9f:dc:b2:21:47:40:29:8f:df:c9:3f:18:04:4d:0e:
d6:9b:5e:9c:95:dc:73:0b:dd:23:f1:bd:86:a5:74:a9:6f:4e:
f4:71:8b:8f:2a:67:76:7a:c6:62:35:75:97:30:26:43:0e:26:
0b:43:11:88:48:60:c8:70:75:48:33:f5:35:0f:f5:e5:93:28:
b3:a0:39:c1:6a:a0:e2:e8:05:f4:53:17:6c:11:03:46:36:2c:
af:41:50:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:38:58 2026 by rpki-client