
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/39932724578611EA8CC3B124C4F9AE02.roa
File: 39932724578611EA8CC3B124C4F9AE02.roa (raw, json)
Hash identifier: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=
Subject key identifier: B9:EC:3B:D0:2E:F8:77:E5:A9:6D:3D:C8:E7:1B:01:B1:F1:B9:A1:9F
Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial: 29A0
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/39932724578611EA8CC3B124C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:41:09 +0000
ROA not before: Sat 20 Dec 2025 16:12:53 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 14618
IP address blocks: 103.43.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10656 (0x29a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Validity
Not Before: Dec 20 16:12:53 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46c25-3aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:11:14:5e:f7:3b:8a:c1:2a:e7:ac:06:c2:c6:
45:d1:c3:b6:89:a1:14:00:24:c6:c4:4e:24:35:1b:
c5:60:1b:a9:90:99:a7:fa:95:7e:35:4f:63:61:5c:
94:b9:b5:b3:a4:39:ee:14:68:4e:6d:97:1b:25:1f:
69:58:61:5e:43:15:dd:f5:8e:c9:8b:79:17:20:d7:
8e:35:af:d3:c5:9a:cc:5b:d8:c0:97:b1:c3:30:7d:
71:f4:80:de:bd:02:87:e7:5b:c7:54:88:b8:2a:7d:
4b:c0:02:95:f3:88:33:96:26:ff:ac:33:d8:03:c0:
0d:f2:10:29:fd:1e:4c:f0:38:a3:c7:f1:23:93:e2:
06:2a:38:d6:a9:5f:c8:0b:e5:36:53:9a:cd:e5:4d:
05:a6:a4:e0:90:47:65:96:82:5e:49:24:24:35:c3:
1e:cf:b8:90:71:3a:88:69:5b:2f:3c:35:a5:33:4b:
1d:98:35:97:19:b1:6b:6f:0c:3f:1f:8d:93:76:02:
76:f7:ec:eb:f8:c1:85:8c:5c:48:25:8c:1c:de:48:
bd:0f:52:f0:ab:fe:ef:69:54:0c:19:c9:7f:0e:02:
43:75:aa:37:19:3c:e3:44:cc:b8:e2:a6:7c:de:d5:
fe:11:32:9b:fa:62:44:fe:46:99:03:f1:2c:7b:53:
3f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EC:3B:D0:2E:F8:77:E5:A9:6D:3D:C8:E7:1B:01:B1:F1:B9:A1:9F
X509v3 Authority Key Identifier:
keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/39932724578611EA8CC3B124C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.43.38.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ec:97:b8:35:a3:d5:b4:91:9f:42:5d:7f:95:a4:cf:4c:4a:
56:7e:02:30:66:3d:f2:01:b6:bb:df:27:e7:0e:0d:01:f9:73:
e7:3f:f4:9d:b4:a8:62:1e:7c:c7:67:5f:96:ed:70:83:91:00:
5e:2f:c6:47:97:97:97:42:fb:70:4f:8b:97:e9:3d:7c:4e:c1:
92:09:d5:ec:95:a0:3e:d6:50:03:4e:20:13:ec:85:b3:31:f3:
c2:72:37:ea:df:87:c3:e3:c0:b0:e0:b9:f1:90:b5:b1:64:2c:
88:4d:e4:ed:be:7a:8b:95:59:02:f7:d8:34:37:e9:69:06:9b:
6e:6d:ff:fd:a1:36:9c:7d:54:ec:54:eb:fe:bd:9d:ba:49:13:
a4:f0:7b:eb:ce:ad:37:1d:d6:b2:cd:ee:4e:2c:b4:b9:6b:67:
d9:69:43:7c:05:68:fb:42:17:34:c0:d6:73:74:62:e5:24:4a:
54:61:ca:e5:42:34:43:91:e6:9b:ed:d7:8c:49:4c:67:e5:29:
5a:53:65:a8:c5:f2:3c:c5:4e:2c:d6:a5:67:98:db:67:be:04:
04:ce:dd:b2:14:ce:64:f9:be:0a:7b:b6:2d:e5:14:d0:f6:d3:
22:40:45:e8:d3:59:3f:e7:ec:ac:5e:ee:d3:75:3a:d9:30:ca:
b0:75:35:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:31:56 2026 by rpki-client