
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/7C2C8232C5BF11E9B616CF1FC4F9AE02.roa
File: 7C2C8232C5BF11E9B616CF1FC4F9AE02.roa (raw, json)
Hash identifier: 8JPXp5WISBveROwqK9zEgt1PiLDz7baPDU+JyNOJ6Uc=
Subject key identifier: 71:1C:12:A6:21:C5:A8:9A:92:13:3F:54:7B:2F:BF:79:9F:1A:09:B6
Certificate issuer: /CN=A9199E9B/serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE
Certificate serial: 0E24
Authority key identifier: C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/7C2C8232C5BF11E9B616CF1FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:37:50 +0000
ROA not before: Thu 28 Aug 2025 18:08:47 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139595
IP address blocks: 103.142.39.0/24 maxlen: 24
103.171.14.0/24 maxlen: 24
2001:df7:3080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl
rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3620 (0xe24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199E9B, serialNumber=C16EEC077D338C423AAF1DEB797640671B7FC9BE
Validity
Not Before: Aug 28 18:08:47 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4250e-ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:0b:64:b8:27:5a:ba:92:60:95:73:95:f3:
0f:cf:73:67:f0:81:8c:e3:bc:5a:3b:09:61:d0:18:
2e:f2:2e:33:2f:58:ba:60:92:36:4c:ae:9f:55:96:
fd:f5:b5:49:65:f1:b7:9f:11:da:64:b5:c4:2a:3c:
bd:f8:5d:18:cd:ce:23:e1:6d:99:94:49:78:cc:43:
84:b3:04:23:d8:dc:03:ec:89:ee:1b:94:06:af:fe:
fa:e5:6a:0d:29:85:b9:6d:ce:39:15:1a:49:20:aa:
7f:35:8b:7b:8e:5e:81:cb:c2:9b:48:bc:16:1a:12:
4e:61:ee:43:2a:d0:94:cf:cc:f3:c9:92:78:90:04:
01:00:1e:12:8a:7a:7a:da:46:53:64:94:a1:d4:36:
73:a3:5e:28:cb:8f:c5:a2:99:dc:62:c8:d1:47:fc:
d1:1f:2d:ce:2f:43:c1:a7:fc:e0:42:5f:b0:84:a0:
63:e1:59:df:17:91:a1:63:d9:7d:f1:65:ad:d0:bd:
00:2f:11:5b:89:f3:91:8c:c3:28:c5:46:0b:f3:59:
cc:9c:10:7c:69:f9:60:1a:93:46:ed:e7:a4:5a:17:
01:ee:b0:bf:bb:4d:ad:75:b7:87:9d:2e:7a:8e:10:
d5:d6:a3:ad:0f:c2:c9:6b:28:99:50:df:e1:a9:3d:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:12:A6:21:C5:A8:9A:92:13:3F:54:7B:2F:BF:79:9F:1A:09:B6
X509v3 Authority Key Identifier:
keyid:C1:6E:EC:07:7D:33:8C:42:3A:AF:1D:EB:79:76:40:67:1B:7F:C9:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/wW7sB30zjEI6rx3reXZAZxt_yb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wW7sB30zjEI6rx3reXZAZxt_yb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E9B/B07E4B26C5BD11E9B1913C1CC4F9AE02/7C2C8232C5BF11E9B616CF1FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.39.0/24
103.171.14.0/24
IPv6:
2001:df7:3080::/48
Signature Algorithm: sha256WithRSAEncryption
72:12:5b:15:95:27:b1:3e:aa:f5:1d:26:cf:f3:3d:02:7a:1a:
a0:c4:65:3d:cb:aa:2a:ce:44:c1:31:d5:68:5f:7a:66:73:0d:
7e:ac:c6:9e:69:bd:f2:8a:b7:c6:6b:5a:24:bf:c1:02:85:73:
ef:05:63:12:de:85:33:8b:68:92:49:e4:7d:af:0e:78:04:b2:
cb:41:2d:6b:97:c2:2e:d3:1a:81:77:9c:ee:89:cf:00:3f:a2:
a0:c1:85:ed:ee:11:e4:d1:7e:7a:26:96:96:7e:b7:bd:03:4f:
7a:6f:8d:5d:db:9f:aa:d6:6c:0e:4a:4d:53:ac:e9:d1:fc:a6:
78:d9:61:c7:50:39:50:e3:b5:39:1d:ab:f7:bd:bd:49:ef:c5:
d1:26:35:e8:3c:80:63:70:5e:7f:32:f0:b7:5d:49:cf:25:cf:
f8:df:68:29:db:0e:ea:28:c1:2a:a4:c1:a5:c0:a4:05:c8:a6:
4d:74:6c:db:8f:f9:34:35:8e:fc:e5:a4:12:6f:4d:0a:2d:c6:
4c:c4:bd:47:4b:f6:b1:2a:f3:1c:a9:bd:a8:49:3b:92:11:07:
ea:08:6e:82:49:fd:c9:d8:dc:df:45:1a:bf:2c:88:9b:81:57:
44:3b:55:e5:73:47:c7:36:35:46:f5:6a:9f:a7:53:97:7f:25:
c0:7f:80:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:47 2026 by rpki-client