
$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/2FA91770D61A11EE9BDDD627C4F9AE02.roa
File: 2FA91770D61A11EE9BDDD627C4F9AE02.roa (raw, json)
Hash identifier: 33xsa1I7dTsH1mG4g4Z5bezPgV/Y0HHBZjYGiwsfW78=
Subject key identifier: 00:4C:89:B5:9A:C5:2F:81:E9:17:9C:5F:12:FE:A2:CF:14:1B:16:B6
Certificate issuer: /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial: 0182
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/2FA91770D61A11EE9BDDD627C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:24:08 +0000
ROA not before: Thu 15 Jan 2026 04:22:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 13335
IP address blocks: 103.160.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9122010, serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Validity
Not Before: Jan 15 04:22:40 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43df7-c89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:f7:c5:01:46:0f:77:07:bb:24:08:b6:97:
4a:b5:0f:a5:e0:fc:7b:3e:da:d3:d9:3d:e2:c7:f2:
47:b6:4f:11:79:36:7d:e0:5c:ec:46:69:2a:bd:69:
16:bc:33:be:c0:05:96:af:ae:39:69:47:79:11:7b:
de:20:ff:7c:62:f9:a6:14:2b:a3:4f:e7:d0:ce:6e:
70:ba:04:8e:91:b5:d6:f3:6b:64:db:8f:78:09:77:
70:52:15:4a:06:70:a2:01:45:6a:37:a9:56:0e:53:
d0:7c:ec:93:8b:03:d6:8b:bc:f7:f0:7a:8c:5e:cd:
8d:f6:46:76:d1:ff:42:1d:11:3a:29:19:9b:b0:4b:
ae:49:5b:10:8a:12:95:f1:24:a9:12:24:0c:c2:47:
6b:5b:57:d0:7c:e6:8c:11:e6:ba:22:65:1b:37:95:
40:6c:7b:f6:68:ad:78:a7:b6:c2:04:46:3d:e8:3f:
f9:51:52:a7:8d:56:bd:74:f0:e7:fe:b6:b7:52:16:
de:8a:54:d3:3a:d3:2e:c3:fa:08:d4:27:ac:d0:26:
68:4a:bd:df:9f:ad:45:2c:2c:d9:de:6a:40:78:74:
4d:25:2c:0c:54:4c:aa:32:91:d9:ab:c6:88:81:1b:
5c:b2:e2:83:a5:4b:d7:c4:98:18:18:45:35:1e:e4:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4C:89:B5:9A:C5:2F:81:E9:17:9C:5F:12:FE:A2:CF:14:1B:16:B6
X509v3 Authority Key Identifier:
keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/2FA91770D61A11EE9BDDD627C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.141.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:bf:d0:53:8d:fa:3f:47:7f:b5:4d:ae:dc:2c:5f:e3:2d:66:
d3:ae:b4:98:3b:93:6c:b1:52:2c:d2:65:a9:88:61:29:0c:ad:
03:fc:70:45:36:9e:4b:73:2f:8c:81:71:06:5d:72:46:70:2f:
d7:aa:b9:f2:c5:23:81:9a:46:bc:ee:0e:4c:c3:5b:e4:56:eb:
f4:50:60:bb:92:50:41:9a:c9:5b:d2:10:08:7d:df:56:20:38:
3c:b9:04:92:60:d3:f5:3e:ad:94:aa:23:dc:5e:4e:44:40:2a:
a7:bd:4d:e2:b0:25:4d:b2:b9:a8:a6:d5:7d:e0:a9:b0:50:b7:
0f:7e:b1:73:22:4e:51:c3:9f:11:2c:70:b2:ab:d4:74:dd:fe:
4b:24:c7:5d:4b:3e:6c:5d:ce:77:b9:cd:f9:84:09:c8:99:a0:
5d:ba:d1:bd:80:6b:2a:ac:8d:2d:c1:0d:c8:ca:77:84:c9:9e:
d0:5c:c9:84:c0:f6:09:f5:a9:5d:0d:c2:55:38:16:00:42:03:
59:5c:bf:d2:44:15:d5:c6:c6:dc:b4:e6:06:88:f6:3a:f6:3d:
64:f2:d7:ea:01:be:24:86:94:93:05:05:0c:69:32:67:14:1d:
fd:51:49:c9:70:70:47:e6:d1:4e:22:f7:ea:d8:5f:ee:dd:3e:
a7:3f:ba:12
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIwMTAxMTAvBgNVBAUTKEE2MDlBOTRFNkEyMTAxQkFGOTVDOEMyRjU1Q0VDNDE3
OTI1QkVGQ0YwHhcNMjYwMTE1MDQyMjQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2RmNy1jODlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8j3xQFGD3cHuyQItpdKtQ+l4Px7PtrT2T3ix/JHtk8ReTZ94FzsRmkqvWkW
vDO+wAWWr645aUd5EXveIP98YvmmFCujT+fQzm5wugSOkbXW82tk2494CXdwUhVK
BnCiAUVqN6lWDlPQfOyTiwPWi7z38HqMXs2N9kZ20f9CHRE6KRmbsEuuSVsQihKV
8SSpEiQMwkdrW1fQfOaMEea6ImUbN5VAbHv2aK14p7bCBEY96D/5UVKnjVa9dPDn
/ra3UhbeilTTOtMuw/oI1Ces0CZoSr3fn61FLCzZ3mpAeHRNJSwMVEyqMpHZq8aI
gRtcsuKDpUvXxJgYGEU1HuQ+jQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFABMibWa
xS+B6RecXxL+os8UGxa2MB8GA1UdIwQYMBaAFKYJqU5qIQG6+VyML1XOxBeSW+/P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjAxMC9FQTAyMUE5NEQ1
M0YxMUVFQThENjI0MEZDNEY5QUUwMi9wZ21wVG1vaEFicjVYSXd2VmM3RUY1SmI3
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BnbXBUbW9oQWJyNVhJd3ZWYzdFRjVKYjc4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjIwMTAvRUEwMjFBOTRENTNGMTFFRUE4RDYyNDBGQzRGOUFFMDIvMkZBOTE3NzBE
NjFBMTFFRTlCRERENjI3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ6CNMA0GCSqGSIb3DQEBCwUAA4IBAQCxv9BTjfo/R3+1Ta7cLF/j
LWbTrrSYO5NssVIs0mWpiGEpDK0D/HBFNp5Lcy+MgXEGXXJGcC/XqrnyxSOBmka8
7g5Mw1vkVuv0UGC7klBBmslb0hAIfd9WIDg8uQSSYNP1Pq2UqiPcXk5EQCqnvU3i
sCVNsrmoptV94KmwULcPfrFzIk5Rw58RLHCyq9R03f5LJMddSz5sXc53uc35hAnI
maBdutG9gGsqrI0twQ3IyneEyZ7QXMmEwPYJ9aldDcJVOBYAQgNZXL/SRBXVxsbc
tOYGiPY69j1k8tfqAb4khpSTBQUMaTJnFB39UUnJcHBH5tFOIvfq2F/u3T6nP7oS
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:28 2026 by rpki-client