
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/D1FCB742514711ED92E3885EC4F9AE02.roa
File: D1FCB742514711ED92E3885EC4F9AE02.roa (raw, json)
Hash identifier: mF+0oU+0n20Cgq5ko570coLg0lSVzI4jtUFqm1rkd8w=
Subject key identifier: C8:66:F8:7C:8F:31:C5:E8:E4:6D:B2:FA:1A:59:16:B8:B4:6F:F8:E0
Certificate issuer: /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial: 0282
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/D1FCB742514711ED92E3885EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:30:06 +0000
ROA not before: Sat 15 Nov 2025 00:17:27 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 38195
IP address blocks: 103.12.96.0/23 maxlen: 23
2001:df1:69c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Validity
Not Before: Nov 15 00:17:27 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a44d6e-4ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:3c:d5:5b:6d:a3:3d:3d:f9:10:0e:9e:bd:
63:62:a1:e7:73:f6:3b:bb:a2:bf:53:7b:7f:15:fa:
ec:65:0d:83:07:44:e3:5e:c6:5d:06:18:16:3b:db:
fb:e6:18:2f:8e:ea:99:a0:fb:2b:f7:5e:fe:d5:4c:
f7:9d:76:f9:e9:36:29:d7:55:8b:d0:2d:92:78:ce:
67:fb:df:ef:1d:09:c6:ca:3e:a5:62:8b:07:23:94:
22:97:52:6f:e3:2a:d9:a9:00:6a:bc:c9:4f:47:1b:
1c:27:fe:ab:13:eb:f7:46:f3:97:f2:76:78:81:68:
3b:55:98:41:82:9d:b5:4e:77:26:2b:a1:db:3f:93:
1e:4c:e7:79:d5:ac:42:81:44:24:06:e1:a5:c3:d2:
32:66:2e:1c:c5:ae:20:2d:44:4e:e9:da:b9:40:7c:
6c:fa:94:2e:36:f9:e0:55:ec:3f:17:57:57:de:28:
a2:91:d6:f2:72:9b:96:31:5b:35:ac:8f:62:87:cf:
85:d6:cb:cf:b7:27:f8:36:8a:45:1c:1a:26:dc:5b:
a4:72:89:ad:cf:99:f2:ba:13:32:b7:1a:05:31:6b:
da:68:d7:6a:2a:f7:83:81:44:01:b1:5b:31:69:63:
8e:e1:36:cc:51:1f:d1:96:9c:46:b2:40:ce:cd:7f:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:F8:7C:8F:31:C5:E8:E4:6D:B2:FA:1A:59:16:B8:B4:6F:F8:E0
X509v3 Authority Key Identifier:
keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/D1FCB742514711ED92E3885EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.96.0/23
IPv6:
2001:df1:69c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:f3:e0:ad:1b:43:b7:14:ee:6b:aa:ca:a2:b9:8d:20:a2:7a:
e3:3d:a9:66:df:f7:b5:94:09:3e:7f:46:7d:f1:3a:4e:f9:5d:
69:af:42:34:f1:20:b1:25:02:cd:ee:58:74:12:a0:0d:40:c7:
e9:34:13:19:31:2c:5b:f9:45:e7:cf:05:1d:8e:65:2c:bc:e1:
06:5e:68:aa:42:cf:5a:e4:1e:c2:b5:d1:7c:27:9a:05:42:99:
d0:c2:a2:f5:90:fa:2e:cb:ab:95:fa:bd:da:61:48:f3:b0:ee:
91:34:9e:9e:10:a8:51:a9:aa:ba:b5:6f:89:f2:85:83:0e:14:
a0:d1:00:cf:c4:e5:6b:6f:d6:0e:f1:63:ab:0b:0a:8a:40:cd:
67:54:98:19:02:71:01:c7:1a:b0:f1:5a:26:65:18:55:78:5e:
fd:96:e2:d4:02:8f:df:e8:21:36:a1:11:08:82:87:97:6a:aa:
64:25:28:9a:90:20:ba:21:94:38:53:6d:99:b8:ce:e8:b9:ce:
00:34:c8:37:de:75:d4:2e:dd:cc:2e:66:20:cd:d6:53:46:cf:
63:d2:5f:fc:fe:ee:57:91:29:03:59:b9:e3:52:d5:37:49:ae:
a6:d4:26:75:53:ec:e1:7a:ba:a0:fc:b4:10:1c:73:8a:8a:a0:
3a:de:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:05 2026 by rpki-client