
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa
File: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (raw, json)
Hash identifier: RCg1Rl9BMePurgmT4FLJMdQ57mTRP5HppFNnGUt/YQk=
Subject key identifier: 79:A0:20:13:4C:F1:28:F7:A5:B1:A4:94:29:C2:52:6C:9E:5C:6B:A4
Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Certificate serial: 0AA8
Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa
Signing time: Sat 28 Mar 2026 19:27:10 +0000
ROA not before: Sat 28 Mar 2026 19:27:10 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 18109
IP address blocks: 103.86.196.0/22 maxlen: 24
119.148.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2728 (0xaa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Validity
Not Before: Mar 28 19:27:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c82b8e-07b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:51:55:34:e4:6e:a4:95:e2:5d:28:71:8b:
fd:09:13:27:50:9b:96:58:46:74:1e:05:af:e0:f5:
30:6c:3c:28:12:7a:26:ae:bd:d5:e1:d1:88:91:76:
fa:c1:b7:e3:4b:a1:30:c8:2e:0a:05:7c:10:e1:df:
d2:0b:f6:5b:7d:81:5f:8a:3d:f3:1c:ba:4a:58:1a:
5b:48:69:33:4d:09:70:4a:21:f0:8c:85:57:96:0b:
30:75:fb:98:b9:6c:c8:44:94:8e:06:5b:65:41:8d:
5f:cb:ea:04:b3:f1:32:8c:8e:22:d9:89:8f:52:e6:
84:fa:70:4e:fe:42:c4:ca:b9:17:3c:9e:90:1a:74:
46:89:14:98:72:d1:30:06:53:db:5a:5a:f0:d9:24:
7a:18:a6:69:1d:bd:49:46:67:66:d6:bb:75:73:ee:
87:83:aa:d7:75:7b:9f:e7:57:60:5f:fb:10:aa:83:
12:57:91:3f:ff:da:f6:ff:d8:57:8a:40:7c:35:f1:
5d:aa:d8:1f:df:96:ca:03:3a:aa:67:36:19:bd:95:
27:88:45:a7:5d:ae:98:7f:88:86:16:0e:f5:b4:fd:
b1:b2:99:b7:32:26:78:d2:cd:a5:16:02:a7:74:6a:
c3:f2:7b:96:84:7a:15:e6:40:8c:f9:a6:88:44:85:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A0:20:13:4C:F1:28:F7:A5:B1:A4:94:29:C2:52:6C:9E:5C:6B:A4
X509v3 Authority Key Identifier:
keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.196.0/22
119.148.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:de:e3:f0:d6:66:91:1c:81:51:c4:b4:1a:63:82:cd:53:5f:
47:73:b7:66:7b:9c:7b:3f:27:f9:0f:00:f8:82:8b:12:e2:4f:
79:8d:ae:0e:a3:83:cf:c0:ba:4a:4b:a1:eb:7d:97:b8:74:37:
de:ff:43:6d:0c:ef:24:78:86:d1:23:3d:39:00:a0:e7:9e:1f:
4d:25:6c:07:80:5f:e3:01:39:be:d5:d5:f3:38:80:11:24:93:
84:f4:0f:93:2c:88:3d:9c:f9:55:ef:03:2e:61:7f:bb:53:64:
c3:37:47:e0:0d:1e:1e:8d:49:1f:8f:8f:97:fa:24:31:df:7d:
fd:d1:7a:71:89:26:ad:17:3d:90:da:f8:9d:b8:0c:12:5d:75:
35:0e:95:57:93:88:02:36:af:8e:56:d4:41:f5:22:a5:cf:66:
97:94:93:97:3e:26:46:f7:8d:e5:cd:02:13:34:07:cf:43:f9:
87:85:c7:21:89:33:04:84:84:1b:2d:b2:fa:de:c1:03:0e:04:
d2:14:f3:39:a7:ff:69:5a:b4:b0:68:16:8f:0f:0f:92:4a:68:
74:23:b4:ff:3e:aa:07:bf:2a:7c:7f:06:29:ce:2d:71:20:86:
78:e8:8f:a5:01:df:10:51:39:36:00:04:f2:e8:56:17:b7:10:
0c:20:fa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:24 2026 by rpki-client