
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa
File: AF6A12881EBB11EDB35A2561C4F9AE02.roa (raw, json)
Hash identifier: xggHUqhGoBU2THPCHBd7SfkVooQu9NCISC2XN1yhp3M=
Subject key identifier: 66:77:6C:14:91:B4:DB:C7:63:F1:70:DE:0A:C3:4A:4F:02:3F:76:4E
Certificate issuer: /CN=A9110F1F/serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Certificate serial: 02E3
Authority key identifier: 95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa
Signing time: Sat 07 Mar 2026 01:34:46 +0000
ROA not before: Sat 07 Mar 2026 01:34:46 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133947
IP address blocks: 103.49.148.0/24 maxlen: 24
103.49.149.0/24 maxlen: 24
103.78.102.0/24 maxlen: 24
103.78.103.0/24 maxlen: 24
2001:df2:5c00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl
rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:04:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110F1F, serialNumber=952F712DF11841208A3B4A874620C59FEED770B0
Validity
Not Before: Mar 7 01:34:46 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69ab80b6-8cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:fc:09:c4:81:43:a4:0e:43:42:43:32:e8:
24:18:3b:3a:e4:03:2e:1d:14:4e:e7:c6:2b:69:5e:
e5:45:2c:23:d7:84:41:5b:cc:16:1d:fa:e8:06:ab:
a2:78:c9:1e:22:df:3f:be:47:ae:89:52:f0:1a:98:
f7:45:2e:e2:62:25:d7:53:35:3d:8f:4c:a1:d6:27:
3d:24:f6:61:1f:1a:1b:a5:89:fa:73:5d:59:83:fe:
94:7f:16:d9:3b:94:b8:13:ea:1b:93:53:11:a4:c4:
af:4d:45:dd:32:19:21:24:cb:99:0e:03:cd:ba:20:
4d:b5:95:9d:a7:2b:a4:b6:65:60:53:75:44:84:b8:
0f:aa:ab:e5:f3:2c:6d:73:2f:4e:ae:b7:06:12:77:
c9:86:2e:4a:45:d8:cc:70:91:05:49:eb:f5:94:25:
aa:63:f3:23:d9:09:aa:36:71:b6:72:51:7c:b7:50:
57:56:82:39:56:55:30:e7:00:6d:49:f2:ca:2f:1b:
37:4d:b2:33:0d:b5:e8:73:9b:5c:a6:af:66:0d:96:
73:41:25:12:7f:c6:ca:07:d9:97:39:10:e7:49:db:
cf:d1:d8:0c:3e:da:d0:41:df:44:12:ad:ae:cd:11:
f5:6c:be:2a:4a:37:07:41:6a:4c:bd:ef:1b:4a:d9:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:77:6C:14:91:B4:DB:C7:63:F1:70:DE:0A:C3:4A:4F:02:3F:76:4E
X509v3 Authority Key Identifier:
keyid:95:2F:71:2D:F1:18:41:20:8A:3B:4A:87:46:20:C5:9F:EE:D7:70:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/lS9xLfEYQSCKO0qHRiDFn-7XcLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lS9xLfEYQSCKO0qHRiDFn-7XcLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110F1F/6C0FEF5A1EB911ED9FC68760C4F9AE02/AF6A12881EBB11EDB35A2561C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.148.0/23
103.78.102.0/23
IPv6:
2001:df2:5c00::/48
Signature Algorithm: sha256WithRSAEncryption
0e:5a:b4:ba:86:81:99:a4:01:dd:c0:81:3b:82:65:64:4e:f6:
f2:04:9f:8d:e6:69:55:cd:eb:99:8b:62:de:2c:32:f7:94:00:
96:cb:e3:74:9c:5b:c9:e2:30:56:1f:2d:93:39:fe:15:c1:d0:
73:4b:91:77:b1:ae:e5:ca:be:b3:c7:88:b9:9f:e8:52:b3:18:
d2:80:9d:eb:de:87:10:9e:73:87:51:19:ae:56:f5:00:fd:11:
5e:6f:d3:e0:ab:1e:a7:5a:41:4a:e7:35:42:86:4d:76:e9:09:
8f:6d:5b:81:2a:9d:63:bf:36:43:25:f1:69:39:56:4e:ee:71:
6f:1b:99:80:56:8c:11:40:6e:21:cc:2d:d3:34:7f:4c:22:3f:
1c:7b:b9:72:cf:23:f2:c3:8a:94:6e:ff:32:e3:bf:00:1d:8d:
c4:ec:3f:82:48:67:99:90:95:2d:54:b9:a7:ee:8c:6e:06:b8:
d1:56:53:3d:58:f0:29:5b:f3:ef:bd:44:8a:4e:2d:9d:6d:83:
98:f0:7b:2f:c4:47:cc:13:70:d5:99:53:ff:67:13:20:8b:93:
3a:54:a9:da:b0:14:1a:be:10:54:9c:52:f7:72:a2:fc:06:71:
8d:1b:5a:c0:e8:68:ee:91:f3:10:9a:88:e5:69:d2:45:bf:e5:
30:cc:f2:1b
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBGMUYxMTAvBgNVBAUTKDk1MkY3MTJERjExODQxMjA4QTNCNEE4NzQ2MjBDNTlG
RUVENzcwQjAwHhcNMjYwMzA3MDEzNDQ2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFiODBiNi04Y2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt638CcSBQ6QOQ0JDMugkGDs65AMuHRRO58YraV7lRSwj14RBW8wWHfroBqui
eMkeIt8/vkeuiVLwGpj3RS7iYiXXUzU9j0yh1ic9JPZhHxobpYn6c11Zg/6UfxbZ
O5S4E+obk1MRpMSvTUXdMhkhJMuZDgPNuiBNtZWdpyuktmVgU3VEhLgPqqvl8yxt
cy9OrrcGEnfJhi5KRdjMcJEFSev1lCWqY/Mj2QmqNnG2clF8t1BXVoI5VlUw5wBt
SfLKLxs3TbIzDbXoc5tcpq9mDZZzQSUSf8bKB9mXORDnSdvP0dgMPtrQQd9EEq2u
zRH1bL4qSjcHQWpMve8bStl8fQIDAQABo4ICdzCCAnMwHQYDVR0OBBYEFGZ3bBSR
tNvHY/Fw3grDSk8CP3ZOMB8GA1UdIwQYMBaAFJUvcS3xGEEgijtKh0YgxZ/u13Cw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEYxRi82QzBGRUY1QTFF
QjkxMUVEOUZDNjg3NjBDNEY5QUUwMi9sUzl4TGZFWVFTQ0tPMHFIUmlERm4tN1hj
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xTOXhMZkVZUVNDS08wcUhSaURGbi03WGNMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTBGMUYvNkMwRkVGNUExRUI5MTFFRDlGQzY4NzYwQzRGOUFFMDIvQUY2QTEyODgx
RUJCMTFFREIzNUEyNTYxQzRGOUFFMDIucm9hMDYGCCsGAQUFBwEHAQH/BCcwJTAS
BAIAATAMAwQBZzGUAwQBZ05mMA8EAgACMAkDBwAgAQ3yXAAwDQYJKoZIhvcNAQEL
BQADggEBAA5atLqGgZmkAd3AgTuCZWRO9vIEn43maVXN65mLYt4sMveUAJbL43Sc
W8niMFYfLZM5/hXB0HNLkXexruXKvrPHiLmf6FKzGNKAnevehxCec4dRGa5W9QD9
EV5v0+CrHqdaQUrnNUKGTXbpCY9tW4EqnWO/NkMl8Wk5Vk7ucW8bmYBWjBFAbiHM
LdM0f0wiPxx7uXLPI/LDipRu/zLjvwAdjcTsP4JIZ5mQlS1UuafujG4GuNFWUz1Y
8Clb8++9RIpOLZ1tg5jwey/ER8wTcNWZU/9nEyCLkzpUqdqwFBq+EFScUvdyovwG
cY0bWsDoaO6R8xCaiOVp0kW/5TDM8hs=
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:06 2026 by rpki-client