
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/938E408897E011EB8870DB29C4F9AE02.roa
File: 938E408897E011EB8870DB29C4F9AE02.roa (raw, json)
Hash identifier: QYBeeWDToObu5YeRRiPoZJxNZpiaZK2fKH61yIoBXno=
Subject key identifier: 5D:B9:08:A3:D4:49:CB:8E:D8:DD:97:95:A0:5B:C1:81:5D:79:99:55
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0DFC
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/938E408897E011EB8870DB29C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:39:49 +0000
ROA not before: Tue 20 Jan 2026 18:15:12 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 133547
IP address blocks: 103.200.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Jan 20 18:15:12 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a479e5-593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:c9:ee:cb:df:22:d7:5b:94:c2:0e:64:9a:
76:d8:3a:c7:58:48:76:6c:bb:d0:6a:b8:08:1e:81:
c8:7b:32:e5:60:81:dd:25:8b:68:07:eb:f9:fb:c8:
63:bc:bf:cc:1b:d1:02:5f:d1:fb:95:f3:4d:b2:be:
55:74:13:e0:a4:bd:0e:f2:ab:12:af:fc:61:af:8f:
46:a2:24:8d:9b:b3:76:48:fb:70:2f:c1:ba:e0:08:
de:d4:66:dc:59:b4:e3:6c:6d:4a:80:68:4c:9b:03:
cb:fc:06:15:60:c7:ee:96:5a:b1:70:24:07:fb:32:
7a:ab:78:6b:78:d0:21:e4:17:50:bf:64:3e:ad:d0:
70:8d:d6:a7:86:0d:54:cc:96:c3:c0:86:fc:9f:f8:
c5:f2:10:62:52:7c:9f:b0:96:60:ed:ca:05:15:f1:
69:7b:65:c1:f6:5e:d6:d2:2b:04:5e:cc:46:4b:31:
98:df:63:41:f8:7f:90:c7:8e:33:ef:d6:b0:9f:8b:
12:af:03:78:71:36:2b:da:f1:26:cd:90:29:27:87:
ed:ca:5e:8d:51:e2:7a:e2:72:7a:5b:9e:9f:4c:75:
02:5b:cd:cc:34:c0:7d:2c:84:a1:cb:85:93:39:1c:
d7:aa:1c:ab:c3:32:37:43:10:8f:6a:6b:42:40:d3:
87:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B9:08:A3:D4:49:CB:8E:D8:DD:97:95:A0:5B:C1:81:5D:79:99:55
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/938E408897E011EB8870DB29C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.200.39.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5d:a6:08:c3:90:88:16:56:7e:6e:0c:c7:9f:60:47:59:1b:
a0:01:fa:bf:03:db:42:c1:d4:54:d2:e6:9c:f6:52:8a:ca:50:
b7:c9:08:37:94:f8:04:e7:4f:66:1b:dd:3d:36:6c:ef:e9:5f:
92:2a:27:32:30:44:8b:1e:14:c1:c4:32:49:31:73:dd:1a:ff:
3c:bb:50:7e:a5:79:ee:08:43:06:c8:01:a8:1c:24:e3:a2:4b:
0d:c6:fe:83:a9:db:26:30:c0:42:b0:83:ee:1b:88:d1:d2:a6:
a7:07:e5:54:d2:af:93:cb:c6:10:3e:88:5f:97:19:6c:e5:5e:
2c:5f:cc:89:5b:0a:a9:db:38:55:e1:95:dd:c3:51:f6:70:d5:
25:61:ea:ee:0a:5a:ee:5c:bf:c7:10:0d:ca:3f:3b:69:7d:a9:
6e:f7:df:95:f6:df:a1:cc:4e:ea:25:ee:1d:1e:21:1c:0a:08:
05:58:de:a0:4e:e8:9a:80:58:c9:1c:f0:3e:f7:5a:b2:d0:1e:
cc:1a:7c:84:ba:1d:fa:f7:50:c7:60:3e:e0:e8:be:23:7e:f7:
79:dc:dd:c9:4c:35:dd:e5:0a:3a:8a:c5:28:4c:d3:0c:46:ac:
2a:84:48:2f:0d:e2:b3:90:4a:2a:6a:78:80:99:bc:a0:e6:b4:
bd:0c:c7:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw
ODc0OEQwREYwHhcNMjYwMTIwMTgxNTEyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzllNS01OTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApMjJ7svfItdblMIOZJp22DrHWEh2bLvQargIHoHIezLlYIHdJYtoB+v5+8hj
vL/MG9ECX9H7lfNNsr5VdBPgpL0O8qsSr/xhr49GoiSNm7N2SPtwL8G64Aje1Gbc
WbTjbG1KgGhMmwPL/AYVYMfullqxcCQH+zJ6q3hreNAh5BdQv2Q+rdBwjdanhg1U
zJbDwIb8n/jF8hBiUnyfsJZg7coFFfFpe2XB9l7W0isEXsxGSzGY32NB+H+Qx44z
79awn4sSrwN4cTYr2vEmzZApJ4ftyl6NUeJ64nJ6W56fTHUCW83MNMB9LIShy4WT
ORzXqhyrwzI3QxCPamtCQNOHywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF25CKPU
ScuO2N2XlaBbwYFdeZlVMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0
RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvOTM4RTQwODg5
N0UwMTFFQjg4NzBEQjI5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ8gnMA0GCSqGSIb3DQEBCwUAA4IBAQBmXaYIw5CIFlZ+bgzHn2BH
WRugAfq/A9tCwdRU0uac9lKKylC3yQg3lPgE509mG909Nmzv6V+SKicyMESLHhTB
xDJJMXPdGv88u1B+pXnuCEMGyAGoHCTjoksNxv6DqdsmMMBCsIPuG4jR0qanB+VU
0q+Ty8YQPohflxls5V4sX8yJWwqp2zhV4ZXdw1H2cNUlYeruClruXL/HEA3KPztp
falu99+V9t+hzE7qJe4dHiEcCggFWN6gTuiagFjJHPA+91qy0B7MGnyEuh3691DH
YD7g6L4jfvd53N3JTDXd5Qo6isUoTNMMRqwqhEgvDeKzkEoqaniAmbyg5rS9DMfX
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:27 2026 by rpki-client