
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/2C1F43848B5C11EFBFDAC30DC4F9AE02.roa
File: 2C1F43848B5C11EFBFDAC30DC4F9AE02.roa (raw, json)
Hash identifier: QNIHjHWUNqsiL/hSt5OfIvTQlLC3HuVRGoPLRDJ/ZTc=
Subject key identifier: 6B:AD:EE:1D:EF:5A:10:4D:3F:DE:31:69:55:02:05:70:AD:41:2F:4E
Certificate issuer: /CN=A9192A7F/serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Certificate serial: 056E
Authority key identifier: 67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/2C1F43848B5C11EFBFDAC30DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:47:45 +0000
ROA not before: Thu 04 Dec 2025 22:36:40 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 46997
IP address blocks: 103.175.98.0/23 maxlen: 23
103.175.98.0/24 maxlen: 24
103.175.99.0/24 maxlen: 24
2400:a6a0:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1390 (0x56e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A7F, serialNumber=67F37C50CA33CF4F508578D3ACCC6DAA4C518CB4
Validity
Not Before: Dec 4 22:36:40 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45fa1-e434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9d:48:8f:ac:5d:b5:f3:02:9d:db:21:6b:d1:
d5:8b:fa:b0:d4:59:79:8a:bf:68:fa:8e:6b:77:c3:
de:f7:f0:d4:f1:18:e8:ab:e5:1c:7a:ff:4d:a1:d7:
18:4e:fb:bb:e7:71:71:80:81:f7:9b:ea:bb:0f:97:
c3:78:6c:d0:a3:ec:63:e6:e8:a2:e1:f3:b8:2c:d2:
25:cc:53:2b:93:68:71:eb:6a:32:90:16:91:42:32:
bf:8a:b5:0f:5f:bf:d6:75:c9:35:f0:f5:28:3d:f2:
d5:2e:85:58:a5:c7:16:d4:fd:21:a5:e8:fa:61:dd:
28:2a:3a:c7:ef:bf:d3:3d:92:2c:43:6a:26:4c:8b:
1c:67:41:2c:05:56:b2:0f:c9:0d:49:c6:a7:9f:c7:
20:12:63:41:e4:6e:3d:1e:85:7f:0f:a9:63:3e:c1:
0d:3b:9a:8f:3c:a8:3f:53:c0:5b:89:c5:08:22:b3:
24:b6:c0:66:8e:44:37:fa:bc:54:e7:b8:9c:4a:19:
41:aa:0d:44:7a:60:ec:b8:26:6b:1b:a2:f6:43:e7:
6a:3b:88:ab:c7:5c:20:6c:3f:ed:5f:ae:0b:8e:f8:
71:56:67:ff:6b:e2:5c:7e:91:81:01:64:6a:2b:b5:
76:91:0e:c0:b5:6d:22:af:96:99:51:99:f2:80:9f:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:EE:1D:EF:5A:10:4D:3F:DE:31:69:55:02:05:70:AD:41:2F:4E
X509v3 Authority Key Identifier:
keyid:67:F3:7C:50:CA:33:CF:4F:50:85:78:D3:AC:CC:6D:AA:4C:51:8C:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/Z_N8UMozz09QhXjTrMxtqkxRjLQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_N8UMozz09QhXjTrMxtqkxRjLQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A7F/760E228E37DC11ECB5720A28C4F9AE02/2C1F43848B5C11EFBFDAC30DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.98.0/23
IPv6:
2400:a6a0:200::/40
Signature Algorithm: sha256WithRSAEncryption
7e:ee:6d:54:02:ae:f4:90:d4:89:07:84:5f:2a:c4:b6:77:6d:
81:11:38:44:81:0e:a6:2f:a6:3c:c4:d0:fb:db:c2:3a:ba:fb:
27:6c:2b:b6:02:f6:72:58:d6:04:e8:f8:15:c9:32:7e:f3:61:
71:71:43:13:2d:9a:86:a2:23:06:6c:5e:03:44:b3:18:0c:0a:
4a:22:f5:84:38:21:60:4a:5a:5a:81:3f:5c:02:56:ff:bb:75:
5f:67:df:1f:b3:07:00:c7:45:1d:c4:76:b8:d8:b4:05:89:e4:
ee:2c:03:38:ca:62:84:14:e9:ce:70:6e:d9:e0:be:02:bd:36:
c8:06:d8:39:91:33:70:4b:10:97:fe:c1:09:c8:be:95:95:c1:
f9:01:60:d4:cd:da:e9:5b:50:4e:1d:25:1e:4b:40:dc:b0:62:
fb:2d:6c:76:c2:b6:85:63:46:63:62:77:f8:d7:42:06:76:62:
53:51:4d:4e:30:5d:f3:f1:21:de:6e:aa:8a:a0:72:6c:1d:7f:
82:20:0a:e5:cd:06:08:20:18:e6:c1:46:85:74:9a:4a:ac:59:
20:95:25:c7:d0:87:b1:10:b7:28:e8:90:60:e6:d1:55:0a:08:
9a:be:69:93:21:73:d8:a2:94:2a:fc:ef:37:c6:c4:2c:63:8b:
61:7a:17:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:17 2026 by rpki-client