
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa
File: E84DCBC422D211EDAF1F924EC4F9AE02.roa (raw, json)
Hash identifier: pwlC3i6Dw77h4VjdOciKa1OoCdf0YqgEjmXujNfwxJs=
Subject key identifier: 97:9D:BC:75:CD:99:6A:CF:C8:B1:DB:63:A5:45:D8:1C:51:99:B1:1A
Certificate issuer: /CN=A9131EDD/serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Certificate serial: 0712
Authority key identifier: A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:31:09 +0000
ROA not before: Sat 04 Oct 2025 22:23:48 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 132382
IP address blocks: 103.14.172.0/24 maxlen: 24
103.14.173.0/24 maxlen: 24
103.14.174.0/24 maxlen: 24
103.14.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810 (0x712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131EDD, serialNumber=A4694BE47C4F3BC94805D4A366A007C69070512E
Validity
Not Before: Oct 4 22:23:48 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4318d-0541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:fc:39:73:13:03:ae:4a:ad:52:68:90:5d:
c8:6b:8f:d5:d9:57:8e:89:be:67:27:e6:78:05:a3:
9a:24:8d:31:69:83:6f:75:98:19:9c:c1:94:9d:97:
1b:8f:65:69:c6:72:7e:0d:68:cf:4a:c3:21:e9:60:
24:2a:55:72:c7:9f:e6:7e:a0:38:f0:79:c0:b0:04:
68:7e:ad:fb:f8:c7:d5:e2:94:4a:c5:c7:92:e5:90:
ee:5d:62:11:9f:2c:0d:37:07:17:45:7e:34:e8:6c:
c9:80:24:1c:7a:f2:c4:20:25:2b:e0:3a:fb:50:c3:
55:7a:24:0c:0b:4e:fb:6b:8d:d1:97:ab:1b:fb:77:
e5:5c:a5:c7:0f:84:55:af:17:86:d1:dd:14:5a:92:
61:92:c8:e2:09:84:b2:5c:79:4f:df:c2:97:2a:90:
fb:77:59:8f:9f:ab:ec:6b:b5:3c:b9:eb:b5:a0:99:
2a:6a:39:2f:47:d3:78:b5:b8:27:2e:44:fd:29:46:
dd:14:26:29:a8:88:4b:c9:a5:a6:09:30:51:1d:cf:
a9:62:ec:4e:a0:90:14:dd:d3:f9:38:df:17:e5:da:
e1:d2:1c:11:7a:b0:d6:8e:34:5f:fa:d0:13:87:59:
6e:99:43:40:4e:8b:64:f5:c1:5e:c1:a2:c4:cb:91:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:BC:75:CD:99:6A:CF:C8:B1:DB:63:A5:45:D8:1C:51:99:B1:1A
X509v3 Authority Key Identifier:
keyid:A4:69:4B:E4:7C:4F:3B:C9:48:05:D4:A3:66:A0:07:C6:90:70:51:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/pGlL5HxPO8lIBdSjZqAHxpBwUS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pGlL5HxPO8lIBdSjZqAHxpBwUS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131EDD/210B43047BBF11EBA02A4339C4F9AE02/E84DCBC422D211EDAF1F924EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.172.0/22
Signature Algorithm: sha256WithRSAEncryption
93:57:55:e9:54:35:0e:69:0a:bb:8a:95:1c:a2:ad:7b:24:51:
4a:30:54:80:e4:6a:2a:ac:21:e1:1e:22:a3:7d:54:76:d7:58:
50:a5:99:b3:95:b8:da:56:fd:be:65:43:a4:63:cc:f8:34:57:
16:30:cf:29:d9:ec:29:36:27:0d:6d:b2:a1:c6:5c:1b:01:42:
ad:f6:95:e3:0f:0f:05:ce:41:a5:9e:34:aa:6e:69:0f:e8:28:
3a:d7:57:c3:ca:f2:27:38:e9:80:0d:d3:4d:45:47:38:d0:9c:
e9:97:68:88:29:08:5b:23:f4:a6:3c:24:88:24:96:64:3d:37:
b3:70:ab:e1:1f:6f:6d:73:5a:83:fe:ad:c0:be:61:2a:aa:47:
e9:c0:74:9a:11:eb:a2:b8:03:a5:01:f7:74:3f:de:64:91:fc:
7b:fe:45:4a:46:7a:d6:90:08:e8:6a:a2:09:73:5d:32:02:6e:
c0:3c:56:b9:81:ce:80:51:d7:fd:0b:ed:19:a8:dc:ba:f2:a5:
09:c9:06:65:f7:5d:58:75:fc:fe:d6:f2:b3:64:c2:08:2b:66:
c9:cd:20:be:57:41:2e:cf:8b:5c:17:92:42:ea:3b:fd:70:e2:
fe:5e:0d:44:5d:fa:0e:ab:69:dd:51:7e:61:58:47:20:59:ed:
ce:ee:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:48:54 2026 by rpki-client