
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa
File: 12F0D72E7BC111EA8503D815C4F9AE02.roa (raw, json)
Hash identifier: B2aPwnCTxCtKmkTz0kgNmn1+iaO+XM4B+/YtNmN756U=
Subject key identifier: 9E:0A:FC:85:57:B4:17:C3:AF:AB:53:BC:05:B3:2E:39:41:8E:14:44
Certificate issuer: /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial: 0F23
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:38:34 +0000
ROA not before: Tue 02 Sep 2025 18:38:00 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 2914
IP address blocks: 103.142.140.0/23 maxlen: 23
103.142.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:56:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3875 (0xf23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Validity
Not Before: Sep 2 18:38:00 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a487aa-aa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:29:95:4c:17:15:7a:0b:31:3e:70:8f:61:
18:33:5e:05:08:a9:46:c4:f9:25:37:b2:05:71:e3:
10:14:67:e3:cb:9b:d5:2b:48:d2:f9:c4:bc:92:d2:
90:a8:d3:63:ba:df:36:b4:c7:db:ec:bb:f7:b3:7a:
ed:5c:c2:cb:3d:7c:9c:55:0b:cc:5d:a3:e3:ee:91:
5e:73:a0:ed:32:39:81:ec:2c:0c:5b:2b:3b:60:51:
4e:02:59:5a:61:e2:ca:69:09:e6:c1:fe:62:30:f5:
f4:3a:5c:2f:6e:45:a4:73:0f:77:8b:4b:f1:5e:55:
f9:3c:43:ce:05:e5:5d:6f:bf:1b:36:bf:f4:78:20:
d4:fe:ef:19:4f:c6:a0:13:60:68:99:1b:43:ea:0f:
5c:61:15:b4:cd:0e:a9:77:49:4c:b2:a2:dc:01:50:
35:9c:f3:43:7c:54:83:fc:40:d9:fb:0e:dd:ad:a6:
54:c7:57:c8:ca:39:79:86:89:06:9a:ab:41:5e:51:
db:db:1c:60:23:ca:8a:87:2e:ce:ff:9b:eb:91:07:
3b:61:d6:7a:8a:44:81:5e:39:0f:8b:77:49:b3:7c:
00:fc:5f:f4:62:7e:ba:3a:96:dc:99:53:95:d8:a8:
41:7e:a5:03:61:62:2e:5d:b3:1e:11:f1:9d:16:bd:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:FC:85:57:B4:17:C3:AF:AB:53:BC:05:B3:2E:39:41:8E:14:44
X509v3 Authority Key Identifier:
keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/12F0D72E7BC111EA8503D815C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.142.140.0/23
Signature Algorithm: sha256WithRSAEncryption
26:9f:6b:c0:b7:dd:f2:0c:c6:a7:b6:b6:c4:65:95:a0:38:db:
02:ce:79:84:7a:d4:3e:09:a5:ca:c5:4d:e9:65:37:a6:c6:e3:
16:1b:61:a6:2d:48:9a:cc:38:50:f0:d4:5b:d5:36:5a:d0:0f:
f8:8c:9c:0a:49:1c:fa:31:35:27:64:31:da:d1:d9:a8:04:93:
f2:ce:b9:d6:a9:17:59:b9:f2:74:d5:04:cb:14:d4:24:f6:b0:
63:af:9e:32:20:3b:94:6d:e5:4d:e8:c9:36:a9:b0:73:1c:c3:
14:bb:34:7a:44:34:bd:80:0e:aa:f2:8a:fc:f0:59:2b:4b:9d:
37:e9:84:04:cf:dc:33:34:27:7d:8a:38:f7:b5:40:ea:71:b2:
48:20:4b:d8:99:43:24:1a:e3:c7:26:0c:34:f3:14:0d:82:20:
f3:5f:4d:a8:a5:c6:a9:cb:d6:ae:23:f9:75:7b:c9:9b:e2:5d:
93:50:3b:d8:ce:be:55:c4:be:85:4b:fd:d9:06:f1:e3:ea:ec:
54:e2:74:ad:4b:a0:ec:7d:55:b0:39:ac:94:e6:e6:da:26:01:
ab:0f:a9:b1:94:78:99:81:20:07:c4:a2:40:fe:87:5d:bd:1a:
c2:70:73:79:f0:60:b5:db:53:1a:8b:6c:0a:8c:86:29:50:77:
43:55:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:13 2026 by rpki-client