
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/EF29C95E69C311EF82BCE77AC4F9AE02.roa
File: EF29C95E69C311EF82BCE77AC4F9AE02.roa (raw, json)
Hash identifier: wATgHFFEBhvghT6gMqTJTC0PonsBt+Ml1sqdhxwQAPg=
Subject key identifier: 50:B0:0D:1D:EE:FE:A2:7C:C1:17:BC:0B:D5:77:93:06:14:3E:B0:8F
Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Certificate serial: 0B79
Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/EF29C95E69C311EF82BCE77AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:30:32 +0000
ROA not before: Tue 04 Nov 2025 19:38:29 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 209242
IP address blocks: 103.143.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl
rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2937 (0xb79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Validity
Not Before: Nov 4 19:38:29 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a469a7-31d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:de:7f:08:5e:20:36:d4:18:0c:58:f8:7a:
04:8d:27:bb:52:ef:ed:76:3d:a1:60:f5:28:65:ec:
21:d6:6a:7e:6e:83:6b:39:06:5f:b4:95:45:df:8d:
3b:86:47:bf:10:57:38:75:b5:6d:e8:ef:45:a9:12:
99:84:69:68:13:51:11:26:92:a5:43:00:1b:6d:bb:
a9:b2:b5:10:90:50:00:61:ef:73:5f:e5:a3:6a:25:
e5:d8:a2:ab:61:5c:51:08:e7:5c:24:b5:99:52:20:
38:b8:18:fb:82:9d:6c:0b:d5:6f:84:30:01:89:18:
45:b1:86:e7:08:87:74:76:13:12:fd:59:ff:23:14:
39:ea:80:0f:08:2d:ea:e1:7e:82:fd:6e:c8:c8:dc:
5a:49:f9:5c:12:19:83:ae:5b:f8:4a:cd:43:1f:c1:
75:91:db:3c:c4:4c:c4:14:96:5a:7d:04:6d:9b:38:
65:ff:78:30:2f:8c:9b:90:fa:bc:06:5f:d6:ed:57:
d7:0b:50:f4:97:65:a5:f0:89:8c:13:d8:36:a9:59:
55:9f:c6:a9:ce:c2:6b:dd:0b:5d:71:d8:cf:3e:25:
28:f1:6d:c2:a4:5b:c2:e9:35:03:a5:8c:ed:35:7e:
76:ec:d6:4b:a7:0e:cf:b7:e4:ea:b2:52:e7:8e:32:
56:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B0:0D:1D:EE:FE:A2:7C:C1:17:BC:0B:D5:77:93:06:14:3E:B0:8F
X509v3 Authority Key Identifier:
keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/EF29C95E69C311EF82BCE77AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.32.0/23
Signature Algorithm: sha256WithRSAEncryption
44:cf:73:97:6f:9d:5e:86:49:6a:4f:47:75:f2:a8:3d:ad:d3:
0a:45:22:27:91:72:ac:7f:55:d5:d0:9e:0a:c5:bb:5d:17:da:
3e:70:1b:90:ef:cb:a6:e8:10:b3:af:a2:89:f5:09:51:bf:51:
1a:b4:89:c1:32:1f:2b:4d:6c:9c:a9:8f:07:9e:6a:ab:37:89:
f9:fc:93:c2:b1:2a:79:68:4e:c4:a9:06:3c:7c:cd:4d:56:16:
b0:8e:12:ab:b0:91:5e:da:83:ab:38:2d:18:bc:18:d6:e8:41:
f9:7b:84:0a:88:9a:4d:c1:9f:49:98:93:96:db:c6:78:9c:60:
e0:d2:3a:db:20:85:d7:f5:14:2a:d6:3d:32:0e:7d:cc:41:2f:
7e:00:73:f7:81:5a:eb:a3:67:48:fa:5f:3e:fc:24:d2:49:a2:
dd:c8:5d:61:e4:d5:b4:07:86:41:66:af:b3:48:e3:cc:f1:38:
ac:e0:a3:36:cd:14:6f:27:11:2c:5a:9c:1b:fc:c0:68:bc:c5:
c2:b0:03:d8:86:3f:2f:48:a8:85:c0:bb:86:8a:9f:c4:12:ac:
35:76:3d:6b:3e:80:82:27:b9:d8:00:02:51:61:57:e9:9d:1e:
ff:4d:e2:e5:27:7c:06:35:5d:4c:36:40:61:00:76:2f:81:16:
e2:85:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:23 2026 by rpki-client