
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/5FC75DCC66A511EC9C199341C4F9AE02.roa
File: 5FC75DCC66A511EC9C199341C4F9AE02.roa (raw, json)
Hash identifier: Zm+lEfHr4vPGoSUZ0V7SJYJldqGmArQzT4Hfe0uWtGU=
Subject key identifier: 57:29:78:93:C2:A5:5E:84:34:57:1F:14:BA:FE:1D:21:EB:98:6B:69
Certificate issuer: /CN=A9195F49/serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Certificate serial: 04BD
Authority key identifier: A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/5FC75DCC66A511EC9C199341C4F9AE02.roa
Signing time: Sun 01 Mar 2026 01:20:57 +0000
ROA not before: Sun 01 Mar 2026 01:20:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149306
IP address blocks: 103.178.94.0/23 maxlen: 24
2001:df0:3840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1213 (0x4bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195F49, serialNumber=A871F4E6C372DB10B64DF3995FA151EFB39F998B
Validity
Not Before: Mar 1 01:20:57 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a39478-6e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:bc:eb:a3:9f:59:bb:85:69:fb:37:8a:73:
43:9a:7e:4a:98:1c:fa:eb:2f:d0:af:f4:02:b8:b3:
b0:ee:0c:37:64:f3:be:17:3f:e6:b6:f1:aa:82:d2:
3f:cd:72:96:3b:8d:01:10:3a:6a:1a:f6:d5:60:c8:
35:22:6f:c9:18:e6:3f:22:0d:12:b4:fb:13:ba:06:
e1:b0:4e:88:9a:27:89:74:6e:de:5f:18:d3:02:a0:
3b:f4:2a:5c:3c:ec:6c:c7:19:5a:7e:3d:52:06:36:
84:16:d1:07:54:a1:ee:e8:c5:27:89:c4:ef:96:db:
e0:c2:24:64:82:a5:3d:eb:91:9c:95:8c:0f:7a:66:
fd:35:b8:50:01:47:f8:e9:12:7a:c5:be:dc:01:de:
00:1a:65:5d:39:eb:6f:84:30:21:55:3f:00:14:97:
b7:11:0c:61:0b:e0:50:90:13:3b:9f:25:d0:ec:ff:
60:09:89:1e:40:aa:e2:8e:a2:ec:fc:3b:f9:75:23:
73:79:38:fe:2f:b7:73:94:27:a8:c1:0e:db:b4:5d:
76:d3:e4:49:87:b2:af:ae:93:de:b0:6c:69:67:9f:
d7:ed:f2:d5:b6:44:74:e0:87:8f:ee:78:e3:f5:08:
cf:c8:15:2f:a0:2e:90:57:49:cf:3e:fd:57:8f:5e:
4f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:29:78:93:C2:A5:5E:84:34:57:1F:14:BA:FE:1D:21:EB:98:6B:69
X509v3 Authority Key Identifier:
keyid:A8:71:F4:E6:C3:72:DB:10:B6:4D:F3:99:5F:A1:51:EF:B3:9F:99:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/qHH05sNy2xC2TfOZX6FR77OfmYs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qHH05sNy2xC2TfOZX6FR77OfmYs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F49/9D3C749266A211ECBB7A0A3CC4F9AE02/5FC75DCC66A511EC9C199341C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.178.94.0/23
IPv6:
2001:df0:3840::/48
Signature Algorithm: sha256WithRSAEncryption
06:2b:d8:74:75:f2:5b:21:bc:14:b4:b0:4b:42:ec:55:c1:46:
99:46:a4:c8:25:4e:e6:02:d9:fa:49:09:74:ec:ce:52:66:a1:
cc:16:0d:f7:5f:30:0b:01:57:86:49:a9:4e:f7:9f:4f:7f:56:
57:95:c2:2e:5c:64:da:2b:d8:ea:7a:5e:be:43:f5:b5:f2:7c:
2e:1b:fb:c6:e9:95:7c:61:6c:5b:cf:1e:43:a8:04:7e:ec:5b:
40:54:de:dc:39:47:96:82:ab:ef:f4:56:e7:a3:68:59:16:e6:
df:e2:54:23:02:54:7c:a9:0e:5e:df:9f:59:7d:d4:00:54:74:
e8:2d:b6:eb:40:ed:1c:0c:9a:2b:60:bb:5c:52:d0:97:26:e9:
24:cc:87:13:d8:b7:e7:f7:a0:9e:c1:02:59:4c:65:d7:81:d5:
45:29:5e:a2:64:f3:d2:de:05:eb:93:d9:e8:bf:3d:a0:20:e6:
e1:cc:21:e0:9b:00:7d:ae:d2:ae:57:38:55:a8:8f:bb:08:09:
37:c2:3a:71:3d:78:c6:8e:8d:d2:79:fa:ee:1a:d0:bf:15:6b:
19:9c:ca:77:ce:96:84:53:9f:b5:0b:44:b8:f3:0a:75:80:c8:
80:50:0a:26:fb:b5:95:5f:bc:95:15:a5:b3:7e:09:4e:19:90:
3d:8a:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:30 2026 by rpki-client