
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/ED7C0BCC287211EFA1483A2FC4F9AE02.roa
File: ED7C0BCC287211EFA1483A2FC4F9AE02.roa (raw, json)
Hash identifier: Xz+rMKCeJxJBHSdh+1neFSZmW+fqxhUFrSF4p43TSGo=
Subject key identifier: 99:CD:4E:3E:2F:D1:E2:58:DD:8C:0F:80:7D:F7:43:A4:34:47:9B:11
Certificate issuer: /CN=A9140BED/serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Certificate serial: 01C4
Authority key identifier: 41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/ED7C0BCC287211EFA1483A2FC4F9AE02.roa
Signing time: Wed 23 Sep 2026 03:53:53 +0000
ROA not before: Wed 23 Sep 2026 03:53:53 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 151990
IP address blocks: 103.70.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452 (0x1c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BED, serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Validity
Not Before: Sep 23 03:53:53 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ab34d51-36ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:50:86:ab:8b:bc:7f:a7:f6:bb:7f:fa:cb:d7:
99:0e:c3:7b:50:6a:f0:be:68:11:74:51:a5:27:3d:
d3:df:8a:8e:9e:7c:00:51:b0:6f:45:ff:90:79:ea:
db:88:aa:41:de:a3:a6:b8:68:9c:7d:33:73:db:11:
23:fb:f6:33:03:a8:55:7b:e3:d4:38:20:eb:fd:61:
74:19:2f:14:4a:8c:c3:19:60:01:37:7f:b6:e4:47:
b0:0a:ac:11:2d:54:4b:4e:c2:1f:04:32:79:1e:4a:
ba:4a:f9:98:31:9c:2b:c4:50:07:d9:d8:a0:93:b8:
55:6b:2f:e4:86:cc:da:28:0c:7a:b8:ec:de:ab:ad:
98:18:d9:83:d1:4e:84:88:06:2d:6a:78:65:dc:be:
b1:39:24:d3:23:41:09:71:6a:49:70:a0:02:92:3d:
4a:c4:76:be:15:93:8e:54:b9:00:8a:9b:a7:cb:1d:
f5:a3:18:a2:fc:76:b6:37:4a:7f:4b:53:65:4d:6b:
cd:b8:47:83:f4:6a:a3:11:6b:d0:a7:16:a3:d1:79:
cf:4d:03:57:15:8e:ba:b8:09:37:d9:09:45:81:15:
4c:2b:d7:7f:02:67:0e:7e:bc:b9:97:c0:47:18:7e:
8f:7a:33:57:aa:d3:b6:b1:ca:0c:33:01:bc:63:68:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CD:4E:3E:2F:D1:E2:58:DD:8C:0F:80:7D:F7:43:A4:34:47:9B:11
X509v3 Authority Key Identifier:
keyid:41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/ED7C0BCC287211EFA1483A2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.112.0/23
Signature Algorithm: sha256WithRSAEncryption
42:4f:91:5e:82:01:70:63:20:c1:22:6b:25:bd:8b:f1:ce:0e:
f8:a0:b2:22:9d:f8:03:7a:30:77:86:1f:fe:38:17:6d:e9:01:
38:3b:bb:59:a7:26:10:93:bb:f4:f7:90:4b:aa:4b:b5:ac:3a:
d6:f4:d4:b9:17:bf:d3:32:5d:28:a0:39:ab:7d:2c:cc:93:50:
e0:78:23:fc:08:f9:84:7d:f9:ac:3d:77:af:13:c5:8f:32:2f:
5a:38:fc:90:9c:37:91:99:30:9e:c3:d1:2d:9a:9b:ac:2b:25:
37:8b:4b:c9:91:a7:96:8e:8f:a2:f3:d5:3e:5c:c5:24:5c:52:
48:57:cf:90:07:6b:ab:f8:6f:af:78:9f:f5:78:64:59:1f:6e:
60:af:0f:80:fe:22:20:d8:bd:0b:e2:8d:bc:0f:b8:c9:d7:96:
b9:3a:2c:3f:ca:2e:ce:70:7f:3a:2c:99:4d:e1:c0:2c:19:46:
37:46:a3:8e:61:cb:ba:e9:bb:41:af:95:b5:37:d4:ba:81:50:
5c:60:d8:1d:8b:21:95:c2:d0:74:ac:9a:9e:ea:f9:87:54:36:
11:29:2e:ce:f2:56:06:66:ea:b3:2a:60:aa:4a:0b:32:7b:17:
70:b5:89:3c:0d:0c:e1:b8:e1:66:47:f9:9d:9a:5d:8b:aa:85:
81:1b:28:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:38:01 2026 by rpki-client