
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/96BD724A36E411F0AAE1DE39C4F9AE02.roa
File: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (raw, json)
Hash identifier: shoLPgC/NpsBS7wBYyvhBSwKP6LoO6Nubl4gi/Om0Kk=
Subject key identifier: 16:F6:0D:52:A4:F6:6A:ED:B9:BA:84:77:10:0C:18:B6:DA:E4:7A:C7
Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial: 01FC
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/96BD724A36E411F0AAE1DE39C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:15:38 +0000
ROA not before: Fri 09 Jan 2026 02:22:14 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 38314
IP address blocks: 103.125.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Validity
Not Before: Jan 9 02:22:14 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a411ca-f9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:71:d8:92:cd:82:b6:70:ac:8b:96:68:60:
96:5d:63:09:35:43:17:98:e2:c5:b2:80:d1:87:3b:
5e:c2:74:a9:bc:7a:d1:ec:7e:c5:4f:7a:a6:25:0c:
d8:8e:c0:6e:b2:1b:21:2a:f7:75:9b:61:bf:5b:75:
bb:f0:b2:05:fc:33:50:73:39:3d:a9:d6:11:b6:0a:
9b:74:6a:70:0d:d3:3e:ac:97:95:f9:12:29:95:31:
62:9d:05:81:9e:15:e3:50:9c:a5:99:e0:ce:e3:90:
f6:02:f1:2b:2e:37:c2:5f:00:6d:03:17:f1:a9:65:
e5:b4:df:41:ec:40:a1:12:43:e2:63:3d:1f:f2:1e:
66:4c:99:82:6c:21:9c:7e:41:5d:d3:36:d1:65:67:
44:f7:c6:17:b7:d5:2d:8c:bd:1b:d9:b9:d1:c6:b3:
e2:48:87:ea:0c:e3:85:71:8c:e3:8d:3e:28:d6:e8:
aa:28:2a:f7:e4:fc:85:40:c5:2b:9e:d4:6b:48:67:
8b:61:fe:31:8b:ee:48:51:84:4b:34:73:d1:4e:bd:
b9:2e:ae:05:a6:87:cb:68:97:ea:55:ae:66:45:0f:
39:dc:56:cc:78:35:5a:ad:20:f3:cf:62:0c:99:5d:
dd:ec:ab:8c:27:86:cd:74:7c:89:d5:43:6f:c9:7b:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:0D:52:A4:F6:6A:ED:B9:BA:84:77:10:0C:18:B6:DA:E4:7A:C7
X509v3 Authority Key Identifier:
keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/96BD724A36E411F0AAE1DE39C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.125.61.0/24
Signature Algorithm: sha256WithRSAEncryption
71:20:ee:db:96:4f:f4:fd:11:58:2d:f3:25:8f:5b:fb:63:23:
f5:fc:93:e0:ab:e3:3c:27:f8:5b:c0:6a:f0:bf:50:a5:32:23:
fd:e3:9f:a7:e6:61:af:81:4e:b3:7f:d0:e0:40:27:b3:42:fd:
21:8d:03:85:85:12:78:54:41:9c:c0:f0:46:50:0d:db:c5:16:
bb:71:1e:2c:db:b1:61:3d:1c:c5:f2:dd:f1:bc:cd:4a:91:32:
32:47:94:69:f9:dd:f7:f0:61:3f:30:1e:05:9d:12:81:b5:ca:
d6:73:10:e2:36:50:13:6f:37:89:f0:b7:8a:86:0e:29:29:95:
e2:c4:9a:7c:1c:dc:2d:b6:b0:39:57:a3:b7:4c:ba:b9:15:af:
4a:6c:c8:9b:8f:5d:50:32:24:6e:a3:e0:07:49:f5:50:b7:9f:
30:f3:65:95:f8:5d:30:cc:8c:b9:84:87:33:6d:a6:11:51:1a:
ba:fa:22:af:c4:7c:cc:96:92:51:35:17:07:8a:d8:81:a2:c4:
1b:d8:e6:e5:36:78:94:fe:c9:46:ed:e6:51:04:e3:5b:d5:91:
1b:0d:86:4e:06:c1:76:30:79:04:2e:66:25:96:bb:d6:6b:2d:
b6:22:9b:69:ed:df:3e:71:48:06:3b:11:02:cb:28:5f:46:76:
48:54:07:66
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw
NzcwQjkzM0IwHhcNMjYwMTA5MDIyMjE0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MTFjYS1mOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA16dx2JLNgrZwrIuWaGCWXWMJNUMXmOLFsoDRhztewnSpvHrR7H7FT3qmJQzY
jsBushshKvd1m2G/W3W78LIF/DNQczk9qdYRtgqbdGpwDdM+rJeV+RIplTFinQWB
nhXjUJylmeDO45D2AvErLjfCXwBtAxfxqWXltN9B7EChEkPiYz0f8h5mTJmCbCGc
fkFd0zbRZWdE98YXt9UtjL0b2bnRxrPiSIfqDOOFcYzjjT4o1uiqKCr35PyFQMUr
ntRrSGeLYf4xi+5IUYRLNHPRTr25Lq4FpofLaJfqVa5mRQ853FbMeDVarSDzz2IM
mV3d7KuMJ4bNdHyJ1UNvyXvMhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBb2DVKk
9mrtubqEdxAMGLba5HrHMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw
RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzFBNUUvMDM0NjJFNjYxMEVBMTFFRTlBNDhGMTdCQzRGOUFFMDIvOTZCRDcyNEEz
NkU0MTFGMEFBRTFERTM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ309MA0GCSqGSIb3DQEBCwUAA4IBAQBxIO7blk/0/RFYLfMlj1v7
YyP1/JPgq+M8J/hbwGrwv1ClMiP945+n5mGvgU6zf9DgQCezQv0hjQOFhRJ4VEGc
wPBGUA3bxRa7cR4s27FhPRzF8t3xvM1KkTIyR5Rp+d338GE/MB4FnRKBtcrWcxDi
NlATbzeJ8LeKhg4pKZXixJp8HNwttrA5V6O3TLq5Fa9KbMibj11QMiRuo+AHSfVQ
t58w82WV+F0wzIy5hIczbaYRURq6+iKvxHzMlpJRNRcHitiBosQb2OblNniU/slG
7eZRBONb1ZEbDYZOBsF2MHkELmYllrvWay22Iptp7d8+cUgGOxECyyhfRnZIVAdm
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:54 2026 by rpki-client