
$ rpki-client -vvf rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/D1B29B22765011F0BCBD414BC4F9AE02.roa
File: D1B29B22765011F0BCBD414BC4F9AE02.roa (raw, json)
Hash identifier: 3KENrC5WrRZRPFGx9/gzXu8N7uPLfOfzWj8eTs8V+0A=
Subject key identifier: 20:9E:E9:0E:BD:E5:0E:8B:DF:A0:19:C4:5D:1D:D0:AF:3F:88:59:16
Certificate issuer: /CN=A9117836/serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Certificate serial: 01F3
Authority key identifier: 6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/D1B29B22765011F0BCBD414BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:53:38 +0000
ROA not before: Sat 27 Sep 2025 04:02:11 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 64289
IP address blocks: 103.20.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:43:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 499 (0x1f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117836, serialNumber=6F67581038534D4DBCE3C81B5F2D8861C536B67C
Validity
Not Before: Sep 27 04:02:11 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a5a472-1407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:7c:94:e0:c3:46:5a:6e:c6:4f:dc:b5:06:
b7:c5:39:5e:5c:bf:13:33:21:77:6b:0e:2b:0f:1c:
ff:2b:2c:29:ff:56:97:aa:3c:ec:05:81:2e:c6:d9:
02:b8:5d:e8:a5:2c:05:fd:8b:dd:63:91:f2:16:49:
03:9a:6a:f9:04:db:3a:b4:5f:02:64:66:45:54:9a:
02:f8:64:76:9e:0a:88:a7:10:41:7b:83:21:c7:83:
1d:97:d1:e8:33:86:02:ba:61:de:20:c7:e0:4d:74:
86:52:75:ad:85:d8:7c:16:a7:0a:c1:72:e4:25:8b:
46:88:ba:16:ac:f7:63:fe:89:6d:ce:cf:19:78:4a:
93:d7:f0:da:d0:59:bb:c8:2f:58:ea:a3:ec:dc:17:
8a:8c:66:c9:3a:3a:8f:e1:24:ed:3d:7c:27:6c:7f:
5e:b6:76:e8:63:f8:62:d0:c8:ae:12:7f:18:10:4d:
3a:de:bb:95:30:f0:30:4a:c2:01:54:65:41:90:49:
e1:e7:0d:9c:52:98:ad:85:91:66:2d:b4:fc:90:6d:
37:5b:e9:e3:92:f8:a6:f7:5a:9e:51:95:39:99:68:
59:e3:4b:63:05:ed:01:8a:ef:b8:9e:89:dd:52:45:
96:d5:0d:35:50:01:6d:7e:70:22:7e:79:61:95:07:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9E:E9:0E:BD:E5:0E:8B:DF:A0:19:C4:5D:1D:D0:AF:3F:88:59:16
X509v3 Authority Key Identifier:
keyid:6F:67:58:10:38:53:4D:4D:BC:E3:C8:1B:5F:2D:88:61:C5:36:B6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/b2dYEDhTTU2848gbXy2IYcU2tnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2dYEDhTTU2848gbXy2IYcU2tnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117836/FA25EDE2431D11EE868CA40FC4F9AE02/D1B29B22765011F0BCBD414BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bf:d6:4b:68:0e:91:14:8a:ca:7d:b5:3c:d4:cb:17:37:2a:
20:40:56:41:94:a0:e1:fc:32:81:e8:21:cf:c8:a0:08:f1:50:
81:bc:1b:ca:44:36:9b:dd:c6:a2:73:18:3e:b9:85:76:de:83:
ab:d6:43:f9:fe:ba:5f:c1:45:31:a8:d7:04:07:46:a2:e5:cc:
89:af:57:27:85:3c:28:98:99:76:4f:c6:d2:7a:2c:24:8f:00:
2a:0b:bc:d3:85:4c:eb:3e:9e:fc:b5:c5:ef:6e:d6:4a:41:e2:
94:0a:37:fa:09:a3:24:cb:fe:70:7c:86:22:ac:2b:85:91:63:
23:f5:f1:e3:8e:3c:e8:0b:d5:df:9b:0e:c8:91:95:77:35:2f:
86:62:20:a4:52:41:ec:31:9a:67:ab:55:43:80:e6:a8:33:72:
6d:b7:2d:cd:50:9b:ec:85:fd:c8:28:4e:c8:75:bf:91:76:d9:
e0:9e:3c:2b:b7:d1:3f:6f:0b:2a:7b:6c:3a:89:0c:5d:79:21:
42:d7:eb:02:67:c8:9e:2e:2d:ed:09:66:1e:50:c1:24:29:5e:
48:0c:66:f0:47:24:70:52:46:1a:5d:5d:e5:f9:c0:a7:98:29:
e1:e4:df:85:34:15:aa:ae:74:26:85:8d:2c:81:05:88:0d:04:
c8:35:01:0b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4MzYxMTAvBgNVBAUTKDZGNjc1ODEwMzg1MzRENERCQ0UzQzgxQjVGMkQ4ODYx
QzUzNkI2N0MwHhcNMjUwOTI3MDQwMjExWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTQ3Mi0xNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlIZ8lODDRlpuxk/ctQa3xTleXL8TMyF3aw4rDxz/Kywp/1aXqjzsBYEuxtkC
uF3opSwF/YvdY5HyFkkDmmr5BNs6tF8CZGZFVJoC+GR2ngqIpxBBe4Mhx4Mdl9Ho
M4YCumHeIMfgTXSGUnWthdh8FqcKwXLkJYtGiLoWrPdj/oltzs8ZeEqT1/Da0Fm7
yC9Y6qPs3BeKjGbJOjqP4STtPXwnbH9etnboY/hi0MiuEn8YEE063ruVMPAwSsIB
VGVBkEnh5w2cUpithZFmLbT8kG03W+njkvim91qeUZU5mWhZ40tjBe0Biu+4nond
UkWW1Q01UAFtfnAifnlhlQf0DQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCCe6Q69
5Q6L36AZxF0d0K8/iFkWMB8GA1UdIwQYMBaAFG9nWBA4U01NvOPIG18tiGHFNrZ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgzNi9GQTI1RURFMjQz
MUQxMUVFODY4Q0E0MEZDNEY5QUUwMi9iMmRZRURoVFRVMjg0OGdiWHkySVljVTJ0
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2IyZFlFRGhUVFUyODQ4Z2JYeTJJWWNVMnRudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTc4MzYvRkEyNUVERTI0MzFEMTFFRTg2OENBNDBGQzRGOUFFMDIvRDFCMjlCMjI3
NjUwMTFGMEJDQkQ0MTRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZxRlMA0GCSqGSIb3DQEBCwUAA4IBAQCOv9ZLaA6RFIrKfbU81MsX
NyogQFZBlKDh/DKB6CHPyKAI8VCBvBvKRDab3caicxg+uYV23oOr1kP5/rpfwUUx
qNcEB0ai5cyJr1cnhTwomJl2T8bSeiwkjwAqC7zThUzrPp78tcXvbtZKQeKUCjf6
CaMky/5wfIYirCuFkWMj9fHjjjzoC9Xfmw7IkZV3NS+GYiCkUkHsMZpnq1VDgOao
M3Jtty3NUJvshf3IKE7Idb+Rdtngnjwrt9E/bwsqe2w6iQxdeSFC1+sCZ8ieLi3t
CWYeUMEkKV5IDGbwRyRwUkYaXV3l+cCnmCnh5N+FNBWqrnQmhY0sgQWIDQTINQEL
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:40:56 2026 by rpki-client