
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/457A00A8AF7A11E9AFF10782C4F9AE02.roa
File: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (raw, json)
Hash identifier: Arkrsyo5+ae+fzAV/8rJkRmaTl2oT1Ort1Y2T29kOdo=
Subject key identifier: DA:91:BA:7A:A0:E1:21:B0:6A:5F:8F:80:4E:9F:E8:32:E0:A4:CF:9E
Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6
Certificate serial: 0E91
Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/457A00A8AF7A11E9AFF10782C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:38:39 +0000
ROA not before: Tue 16 Sep 2025 17:57:29 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 24550
IP address blocks: 103.94.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl
rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:38:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3729 (0xe91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6
Validity
Not Before: Sep 16 17:57:29 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a44f6f-56a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:7a:f5:c4:87:4a:c9:ef:44:52:ec:38:a4:
70:d8:de:53:59:1f:fe:83:44:de:c0:61:55:c6:73:
9f:b6:68:7e:1e:9a:69:4d:ec:7d:0e:74:a0:51:27:
7c:de:f5:a0:14:31:41:c0:ea:38:ce:f6:18:9d:ba:
8f:00:cc:e9:32:51:2a:ca:78:0e:3e:8e:0e:e2:88:
79:bc:46:27:52:ba:7c:9d:e1:a5:fa:27:da:e9:e2:
a2:6b:04:11:ba:c9:9c:92:0c:1a:7a:04:8c:03:d6:
63:2f:8b:5b:ce:76:05:1c:cf:87:4f:1c:58:e3:50:
c1:12:83:9e:c9:07:ec:79:13:89:a8:4e:45:3d:5a:
55:3a:3f:60:b8:e6:27:04:3e:d1:68:84:4f:67:90:
f8:b6:a6:35:1f:12:30:a2:68:ab:53:93:9f:db:79:
da:71:3c:f4:f0:88:98:3a:76:51:20:b0:c4:93:fd:
83:be:73:94:ae:c9:52:b9:0b:89:75:62:7d:2e:a2:
32:77:72:91:b6:e8:6b:c9:3f:ad:e1:00:c2:14:bc:
c6:00:20:4c:0c:8e:99:71:a5:74:27:4c:6e:40:28:
7b:30:3b:4e:46:c0:a1:af:9c:d5:fb:80:ec:6a:40:
73:a5:b8:62:fd:bd:80:ee:e3:f8:e5:40:82:bd:fe:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:91:BA:7A:A0:E1:21:B0:6A:5F:8F:80:4E:9F:E8:32:E0:A4:CF:9E
X509v3 Authority Key Identifier:
keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/457A00A8AF7A11E9AFF10782C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:f8:9b:80:6c:05:69:33:cb:f0:9f:eb:c3:71:2c:eb:d1:30:
94:15:53:33:51:54:92:ea:5f:50:b9:0b:9c:e3:2c:33:cb:3a:
ea:fd:30:89:52:32:b6:63:14:83:93:2a:81:47:76:ea:20:8e:
fe:3c:6e:86:b4:95:a1:de:75:31:b5:b9:72:74:b3:8a:fd:78:
f0:70:27:c5:13:f4:12:d8:15:80:3f:d6:94:ba:62:cd:ec:71:
38:c5:1b:72:f2:4b:76:d9:65:b4:94:e8:ad:33:d6:9d:9c:ec:
88:a5:fb:65:27:b3:3c:fa:52:5d:0c:35:fe:47:62:a6:40:21:
17:bf:4f:06:40:92:bb:a3:d3:8a:aa:89:5a:2b:e1:17:f1:26:
c3:07:ad:43:9c:37:6e:e8:79:ee:a9:f6:37:c3:22:91:ec:95:
9a:ae:04:59:bb:79:2b:e6:98:b4:ce:46:9a:60:48:fb:da:4a:
c3:db:91:4b:ec:1a:08:19:4b:24:77:cd:ee:be:23:6d:a5:d2:
ca:63:b7:8e:7c:70:33:60:c9:8d:22:0a:ce:16:f3:9f:fc:0f:
45:2d:22:28:d6:ea:6d:44:c9:61:e7:a9:f9:5d:2e:1a:3d:58:
39:dc:b0:e1:9d:84:2f:d0:c8:30:34:44:80:d4:2e:09:fe:c9:
a2:df:c8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:14 2026 by rpki-client