
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa
File: 2F43EE7278CC11EAB69DAC75C4F9AE02.roa (raw, json)
Hash identifier: MAXacxJ/RMDMxYMvqaQnbiqd4rfD3qFy66FNBQszakU=
Subject key identifier: 81:F5:FE:E1:5A:AE:D5:75:D1:B7:04:BF:EB:5E:73:6B:7F:C5:C6:F4
Certificate issuer: /CN=A9198267/serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Certificate serial: 0A96
Authority key identifier: 38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:29:53 +0000
ROA not before: Sun 30 Mar 2025 19:50:12 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 18109
IP address blocks: 103.86.196.0/22 maxlen: 24
119.148.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2710 (0xa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198267, serialNumber=38FB06AF649F400F513994935BEDF7E49270C8AA
Validity
Not Before: Mar 30 19:50:12 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40711-8274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:2b:8c:e7:aa:01:69:a4:78:79:4d:a8:f0:
45:aa:81:7e:69:33:5f:9d:fb:87:0d:87:ae:84:c2:
07:0a:34:93:1c:f6:c2:07:b3:0a:d7:ec:9f:a4:00:
d5:b6:b6:77:6f:7b:0b:e0:0c:53:83:7f:f1:5c:df:
96:77:f9:f6:56:f5:8f:e4:78:94:27:03:d2:77:3e:
cf:e1:89:24:e2:52:22:95:5f:08:2d:7f:6c:9f:5e:
32:aa:08:ba:eb:f1:56:7d:a2:f4:cc:04:a7:82:f0:
3f:88:3e:ad:e3:93:fd:6d:ed:19:48:ea:77:5d:ba:
6d:ec:50:cc:c6:fa:e9:3e:e5:2f:bb:b7:31:a9:ea:
3a:f9:ac:62:c5:2c:f4:2e:67:a6:d9:54:09:46:27:
88:d0:da:ec:b6:6c:98:ac:c0:8d:9b:2b:6c:2a:12:
5f:9a:7b:de:56:5b:fd:8c:e6:36:fe:b6:b0:78:cf:
7f:9f:68:6e:17:af:68:e1:bf:0d:c0:c2:0c:c1:b8:
fe:87:be:9e:ac:29:e9:51:71:cb:a3:f2:63:36:1a:
f6:76:c8:1d:3a:50:98:ee:29:a2:6a:4b:a3:2d:cf:
5c:38:f6:44:c8:53:e3:72:e2:c0:cc:87:42:ad:e7:
b3:d8:e9:a5:ac:25:14:ea:98:9a:0a:21:57:40:2b:
d6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F5:FE:E1:5A:AE:D5:75:D1:B7:04:BF:EB:5E:73:6B:7F:C5:C6:F4
X509v3 Authority Key Identifier:
keyid:38:FB:06:AF:64:9F:40:0F:51:39:94:93:5B:ED:F7:E4:92:70:C8:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/OPsGr2SfQA9ROZSTW-335JJwyKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OPsGr2SfQA9ROZSTW-335JJwyKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198267/02C86EAA78CB11EA820D7274C4F9AE02/2F43EE7278CC11EAB69DAC75C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.196.0/22
119.148.100.0/22
Signature Algorithm: sha256WithRSAEncryption
76:b8:9b:d0:e7:02:b1:cb:01:86:82:31:f6:14:21:7c:b7:a6:
f6:ef:c8:57:28:27:30:94:aa:f7:8d:d9:b7:f9:c1:b4:56:2f:
ba:c6:45:b7:fd:3b:de:d4:87:02:fc:9f:89:aa:f6:0a:d0:1d:
13:a8:51:20:ac:d4:49:ac:14:9d:7e:4a:11:50:e6:0c:db:be:
96:05:02:69:4e:43:d0:a0:4d:26:25:2b:c3:5f:08:ef:35:f6:
cc:50:5c:a3:6d:a3:a4:95:bb:51:7b:2a:3a:42:c4:de:91:e0:
f4:fa:0b:62:13:7f:f5:35:a5:e4:22:6e:c7:46:33:27:42:51:
6c:4f:3d:78:2a:7d:d3:ca:00:19:63:47:f5:9c:75:c5:8d:29:
ee:29:2e:af:69:9d:38:0a:92:04:a6:f8:ca:e8:82:12:60:ad:
6c:b9:e1:d3:9f:2e:f2:ad:68:ef:f3:11:5a:3c:53:eb:8c:b8:
85:12:e6:0b:61:5a:ac:07:f8:ff:3e:42:68:c3:53:29:40:0e:
9a:14:eb:16:52:97:7a:36:2c:9d:48:29:29:2c:df:dd:a6:46:
78:1d:0b:58:aa:bb:fb:28:54:6a:ee:35:c2:a0:5b:0c:94:48:
56:99:11:0c:84:78:ce:e3:0c:f6:4c:67:1e:33:30:41:e7:6f:
f4:af:23:b2
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyNjcxMTAvBgNVBAUTKDM4RkIwNkFGNjQ5RjQwMEY1MTM5OTQ5MzVCRURGN0U0
OTI3MEM4QUEwHhcNMjUwMzMwMTk1MDEyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDcxMS04Mjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6ZorjOeqAWmkeHlNqPBFqoF+aTNfnfuHDYeuhMIHCjSTHPbCB7MK1+yfpADV
trZ3b3sL4AxTg3/xXN+Wd/n2VvWP5HiUJwPSdz7P4Ykk4lIilV8ILX9sn14yqgi6
6/FWfaL0zASngvA/iD6t45P9be0ZSOp3Xbpt7FDMxvrpPuUvu7cxqeo6+axixSz0
Lmem2VQJRieI0NrstmyYrMCNmytsKhJfmnveVlv9jOY2/raweM9/n2huF69o4b8N
wMIMwbj+h76erCnpUXHLo/JjNhr2dsgdOlCY7imiakujLc9cOPZEyFPjcuLAzIdC
reez2OmlrCUU6piaCiFXQCvWhwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFIH1/uFa
rtV10bcEv+tec2t/xcb0MB8GA1UdIwQYMBaAFDj7Bq9kn0APUTmUk1vt9+SScMiq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODI2Ny8wMkM4NkVBQTc4
Q0IxMUVBODIwRDcyNzRDNEY5QUUwMi9PUHNHcjJTZlFBOVJPWlNUVy0zMzVKSnd5
S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09Qc0dyMlNmUUE5Uk9aU1RXLTMzNUpKd3lLby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgyNjcvMDJDODZFQUE3OENCMTFFQTgyMEQ3Mjc0QzRGOUFFMDIvMkY0M0VFNzI3
OENDMTFFQUI2OURBQzc1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCZ1bEAwQCd5RkMA0GCSqGSIb3DQEBCwUAA4IBAQB2uJvQ5wKxywGG
gjH2FCF8t6b278hXKCcwlKr3jdm3+cG0Vi+6xkW3/Tve1IcC/J+JqvYK0B0TqFEg
rNRJrBSdfkoRUOYM276WBQJpTkPQoE0mJSvDXwjvNfbMUFyjbaOklbtReyo6QsTe
keD0+gtiE3/1NaXkIm7HRjMnQlFsTz14Kn3TygAZY0f1nHXFjSnuKS6vaZ04CpIE
pvjK6IISYK1sueHTny7yrWjv8xFaPFPrjLiFEuYLYVqsB/j/PkJow1MpQA6aFOsW
Upd6NiydSCkpLN/dpkZ4HQtYqrv7KFRq7jXCoFsMlEhWmREMhHjO4wz2TGceMzBB
52/0ryOy
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:55 2026 by rpki-client