
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/923B6404466B11EE8B37E13CC4F9AE02.roa
File: 923B6404466B11EE8B37E13CC4F9AE02.roa (raw, json)
Hash identifier: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=
Subject key identifier: 63:90:03:B7:B6:FC:B7:7D:39:7B:E4:3E:E0:06:E2:76:54:B1:EB:DD
Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Certificate serial: 0AF7
Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/923B6404466B11EE8B37E13CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:00:36 +0000
ROA not before: Sun 22 Feb 2026 19:16:38 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 58895
IP address blocks: 103.83.20.0/22 maxlen: 22
103.83.20.0/24 maxlen: 24
103.83.21.0/24 maxlen: 24
103.83.22.0/24 maxlen: 24
103.83.23.0/24 maxlen: 24
123.108.94.0/24 maxlen: 24
123.108.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2807 (0xaf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33
Validity
Not Before: Feb 22 19:16:38 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a462a4-3c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2a:68:9e:2f:d8:67:da:4f:ba:e1:b4:d9:09:
6b:7c:93:a1:27:ae:6b:c0:47:d2:44:83:d6:17:61:
d6:a1:64:2e:80:c2:74:8d:a4:7b:e5:32:6f:4f:06:
34:7b:03:0d:8e:a6:a2:9e:a7:40:81:50:0a:6d:28:
39:96:94:bf:d0:10:1d:8e:9b:87:f2:ac:82:1b:a9:
40:32:33:52:53:d1:cc:7b:39:a3:4f:7a:67:cb:cd:
d5:ff:28:2a:39:40:4f:4d:2a:42:5e:be:77:01:6f:
d1:62:3b:a9:4d:34:a1:f4:b4:1c:80:aa:18:74:fa:
99:49:0d:f4:72:bd:98:66:ca:32:2a:5c:03:d7:ae:
fd:74:dc:44:68:d4:f2:cc:ef:ee:f2:d5:a1:dc:9b:
45:89:ee:b8:76:6d:18:51:77:88:93:c6:07:c6:b8:
90:e9:de:da:47:77:53:53:ce:78:03:ab:98:4f:ea:
44:bd:cc:0e:4e:3c:d5:1d:a3:09:33:b5:1d:64:1c:
5f:64:47:9d:59:71:f2:b2:1a:9d:0f:d3:3d:59:c7:
ba:07:f2:32:9e:22:e2:14:6b:3a:dc:1e:d0:ad:f7:
c3:34:21:b4:b9:1a:0e:88:98:0e:97:cb:98:b5:08:
94:8f:9d:ae:ae:1c:44:44:02:9a:2c:ce:56:af:22:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:03:B7:B6:FC:B7:7D:39:7B:E4:3E:E0:06:E2:76:54:B1:EB:DD
X509v3 Authority Key Identifier:
keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/923B6404466B11EE8B37E13CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.20.0/22
123.108.94.0/23
Signature Algorithm: sha256WithRSAEncryption
92:30:78:d6:ff:7d:49:4a:e3:4b:ea:94:11:c2:58:f5:53:80:
fa:6a:c6:5b:89:98:17:84:05:fe:bc:79:86:dd:2c:bc:d8:4d:
c6:b5:13:73:bd:28:4b:2c:e1:f8:5d:b2:f8:52:6e:e7:8d:e1:
67:1e:92:ef:45:f7:cd:b3:2d:a5:47:15:29:da:4d:d0:a0:eb:
62:f9:cf:e7:78:42:a0:e6:b0:95:67:ff:ef:0d:b7:d6:ad:c5:
d3:d2:d8:11:9e:4e:26:e7:4a:30:ea:06:3b:95:aa:14:d6:5f:
ea:8e:f5:f4:30:ab:ff:06:c0:a9:9a:90:ee:b5:1d:25:c0:b0:
49:83:cc:d1:7b:fa:c1:1f:e1:b5:ad:62:1c:a0:96:a0:ec:84:
d4:87:cf:cf:92:06:d0:44:e8:ba:13:c7:3a:ee:51:1a:9b:39:
43:a8:2e:6e:1a:cb:66:01:1b:e5:47:6b:c2:d0:bb:46:64:1d:
22:0e:a4:6a:36:01:de:bb:97:ac:b1:06:6b:2e:e8:35:c4:7d:
94:c0:be:41:b9:97:69:d8:e2:fe:6a:6a:cd:05:64:ac:15:2d:
e5:37:ac:ab:da:37:c9:9d:4c:83:cb:3d:f1:0e:58:f5:6e:4e:
13:fb:17:b2:2d:c0:89:65:71:4c:c7:d1:1a:7c:9a:b1:f7:a4:
2c:eb:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:46 2026 by rpki-client