
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/9C0D9C2C4DF211ECB01A1042C4F9AE02.roa
File: 9C0D9C2C4DF211ECB01A1042C4F9AE02.roa (raw, json)
Hash identifier: X6/5FZGpFLKO4UEX2hm6qgIOCvafOktiV54nbARKJxg=
Subject key identifier: 05:E9:37:49:C9:42:D3:A9:94:57:E9:0E:7E:66:22:6D:3A:B9:50:2B
Certificate issuer: /CN=A913D208/serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
Certificate serial: 04FB
Authority key identifier: 11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/9C0D9C2C4DF211ECB01A1042C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:46:44 +0000
ROA not before: Wed 10 Dec 2025 22:38:50 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 149033
IP address blocks: 103.177.36.0/23 maxlen: 23
103.177.36.0/24 maxlen: 24
103.177.37.0/24 maxlen: 24
2001:df0:1ac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl
rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1275 (0x4fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D208, serialNumber=11434E13D2A70B135182F5C9CE0E5995BB84743C
Validity
Not Before: Dec 10 22:38:50 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43534-5a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:13:c0:d9:44:3d:16:3e:23:4e:97:b2:93:
c4:d0:29:0b:74:2f:be:0c:f6:32:ed:fb:c1:fd:89:
72:fd:66:9e:44:73:bd:d2:f8:02:95:c9:30:bb:e6:
cf:9c:d1:cb:87:24:e5:df:22:6d:59:06:ce:70:5a:
78:32:90:6d:55:5e:85:52:1b:f2:2b:f9:0d:fd:a5:
83:3a:8b:b4:0b:fe:3e:c2:51:64:a1:89:96:b0:43:
14:d7:12:b6:d0:15:1d:8b:70:e3:1e:f0:7f:fe:73:
0d:15:62:14:b5:24:16:4f:3b:4b:8e:b6:77:15:8f:
c4:a4:3e:bc:8c:02:9c:f5:4f:cc:97:b7:67:14:79:
c0:f7:f3:61:ea:92:33:39:b9:90:a0:0a:6e:8c:66:
88:d6:5b:75:b2:1d:5b:d8:e6:c5:4b:ef:2d:3a:c8:
a8:f0:c7:b0:01:1f:8d:f0:4a:8b:b4:b5:09:34:b9:
32:29:46:bd:e1:6c:d1:62:6b:92:26:85:4c:e6:91:
9e:4c:73:69:8e:4b:db:ce:dc:2b:48:1d:ef:22:d8:
e9:ac:77:e2:c5:ba:ac:77:e1:a2:5d:97:6f:1c:9b:
e7:64:59:df:32:b9:4f:b3:37:3f:a7:7b:52:14:6f:
0f:87:51:2c:a6:15:c5:b4:d1:97:52:82:4a:94:c3:
2a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:37:49:C9:42:D3:A9:94:57:E9:0E:7E:66:22:6D:3A:B9:50:2B
X509v3 Authority Key Identifier:
keyid:11:43:4E:13:D2:A7:0B:13:51:82:F5:C9:CE:0E:59:95:BB:84:74:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EUNOE9KnCxNRgvXJzg5ZlbuEdDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D208/12AB99B84DF011EC941ACA3FC4F9AE02/9C0D9C2C4DF211ECB01A1042C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.177.36.0/23
IPv6:
2001:df0:1ac0::/48
Signature Algorithm: sha256WithRSAEncryption
a9:9d:19:f2:34:60:6e:16:e1:29:74:38:49:fc:6d:ea:0e:32:
fb:73:0b:8b:79:70:d4:9b:ad:fb:b1:2b:2e:c9:89:12:b6:99:
f3:ba:b2:87:ee:e3:f9:c4:a9:21:c0:e1:07:21:44:fe:bf:6d:
ae:fd:7e:13:ea:82:a3:a4:bb:35:db:5f:39:4d:4c:9e:5d:95:
9b:76:60:6b:90:9c:59:e3:af:c8:2b:43:15:11:09:76:a9:37:
19:32:19:26:e7:59:53:fa:cc:63:4c:6b:a5:bb:4a:54:c8:93:
2e:c2:ec:b7:b4:d8:b6:62:61:d2:52:b0:ab:34:24:d2:c3:c6:
68:dc:4a:22:f9:a6:c7:cc:a4:ca:9a:0e:80:fa:7b:c6:05:e7:
b1:2f:9d:ac:ec:d8:d1:0e:a3:e5:72:50:c5:6e:f0:b9:84:db:
c4:5e:98:2e:d9:89:39:9d:d6:02:d0:bd:d4:36:fd:1f:ef:ed:
b3:91:03:9b:15:86:be:06:af:53:17:e9:67:61:f1:31:6b:75:
43:84:f1:9b:d0:72:af:3c:c4:dd:c0:b4:88:cf:19:29:a8:43:
c6:86:dc:34:f8:6f:db:dd:95:44:a3:e8:f5:e5:a9:42:c4:1d:
50:9a:82:cd:04:d9:8a:a2:13:2e:51:d7:be:df:d3:24:e7:2c:
e9:fa:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:35 2026 by rpki-client