
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa
File: 962B0D98B14111E5A3B46B15C4F9AE02.roa (raw, json)
Hash identifier: 1eaCUQ4ZgJv1LxUmp7oWUwrdtSU/ikDVBBf5z5MewPc=
Subject key identifier: F1:1E:FC:24:60:BE:72:51:CC:C3:E0:02:4D:9E:EA:D7:C5:43:C4:D3
Certificate issuer: /CN=A9126285/serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310
Certificate serial: 27C7
Authority key identifier: BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:13:05 +0000
ROA not before: Mon 14 Apr 2025 15:52:34 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 133950
IP address blocks: 103.49.205.0/24 maxlen: 24
103.55.179.0/24 maxlen: 24
103.87.121.0/24 maxlen: 24
103.96.117.0/24 maxlen: 24
2001:df2:8400::/48 maxlen: 48
2001:df2:8401::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl
rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10183 (0x27c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126285, serialNumber=BCDBD71D7BA28DEBC5939F5CCA766ECA9F756310
Validity
Not Before: Apr 14 15:52:34 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a40320-7753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:06:72:74:5e:54:c7:a4:0e:5f:dc:d8:7a:
d2:22:3a:22:e5:e6:bc:7b:4a:b8:a8:93:bf:4e:54:
05:d1:19:e3:a2:51:5c:e2:4a:fb:91:d3:e2:3e:18:
42:17:d0:05:6e:99:61:e5:6c:1f:46:8a:18:5c:d8:
f2:3d:08:06:67:aa:32:d6:8b:40:b8:ef:68:78:79:
e2:be:22:ab:93:b2:5c:a9:d9:0f:fa:94:5a:9e:4a:
1a:a0:a0:db:aa:7b:4f:45:91:07:f6:8d:c7:fa:6a:
39:79:a5:c3:d2:4e:df:2f:63:40:6a:60:58:a8:32:
e3:33:57:01:15:31:bc:84:44:7f:83:48:88:d0:95:
cc:58:fa:20:83:d6:30:38:1f:a3:f8:1e:0d:d6:44:
76:4c:e2:f0:91:d5:1e:2d:7e:20:09:2e:2a:6f:b1:
15:a6:dc:3f:64:af:cb:a0:6d:82:80:03:97:6a:4f:
75:8e:82:b4:37:75:b6:e2:65:e7:8f:33:3a:81:84:
e7:3e:60:86:c8:2e:33:7c:0c:e3:b0:66:db:6d:4b:
dd:d5:c3:a4:12:b3:1d:b7:52:96:7a:28:49:dc:d4:
4d:1d:0d:ed:00:f7:d8:3e:c6:21:c9:c8:80:f0:29:
5d:1f:1b:91:69:b5:e4:af:a1:7b:eb:4d:f6:5a:9a:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:FC:24:60:BE:72:51:CC:C3:E0:02:4D:9E:EA:D7:C5:43:C4:D3
X509v3 Authority Key Identifier:
keyid:BC:DB:D7:1D:7B:A2:8D:EB:C5:93:9F:5C:CA:76:6E:CA:9F:75:63:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/vNvXHXuijevFk59cynZuyp91YxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNvXHXuijevFk59cynZuyp91YxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126285/B2610B58C3F211E4B9657514C4F9AE02/962B0D98B14111E5A3B46B15C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.49.205.0/24
103.55.179.0/24
103.87.121.0/24
103.96.117.0/24
IPv6:
2001:df2:8400::/47
Signature Algorithm: sha256WithRSAEncryption
8a:c5:c9:22:7f:45:ea:97:89:ea:a9:20:74:3e:84:21:5d:63:
b8:17:9b:07:70:62:1f:0a:cf:59:29:e6:48:f2:31:1c:ad:43:
7f:d7:e7:be:ea:2b:c9:5e:e4:27:6d:74:a0:52:6e:22:a4:5e:
fa:0a:78:2e:30:70:da:a9:34:0c:32:28:6d:d1:48:a3:94:6a:
b1:c9:5b:45:1f:00:6e:af:21:e5:c4:bc:e6:78:76:38:7d:2f:
ad:a6:14:0a:6e:d8:6c:df:86:c3:51:a3:47:01:54:92:65:ac:
03:9a:8b:a1:05:c5:70:28:ed:39:37:63:71:11:5f:2b:f0:3c:
05:16:6e:c4:b9:75:10:69:ec:a8:8c:56:98:82:fd:00:8e:5d:
48:bd:3b:a9:db:8a:44:62:cc:ef:fc:e2:43:b7:dd:2b:d7:64:
a3:66:71:a8:91:60:db:6f:b3:d2:bd:9e:c3:a8:60:38:ec:5c:
23:c2:7d:bc:3f:1a:b1:da:97:dd:b3:9b:e7:62:fa:ea:0c:6d:
58:a0:b6:67:60:7e:57:d0:27:8a:cd:f7:1c:19:43:e1:53:71:
1e:74:e6:46:b1:80:c8:b3:3a:87:90:f0:52:e8:a0:90:42:37:
f5:c6:33:c2:18:32:aa:a9:af:d9:25:69:27:94:29:f0:70:13:
d9:f6:7c:ac
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgICJ8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyODUxMTAvBgNVBAUTKEJDREJENzFEN0JBMjhERUJDNTkzOUY1Q0NBNzY2RUNB
OUY3NTYzMTAwHhcNMjUwNDE0MTU1MjM0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDMyMC03NzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3JMGcnReVMekDl/c2HrSIjoi5ea8e0q4qJO/TlQF0RnjolFc4kr7kdPiPhhC
F9AFbplh5WwfRooYXNjyPQgGZ6oy1otAuO9oeHniviKrk7JcqdkP+pRankoaoKDb
qntPRZEH9o3H+mo5eaXD0k7fL2NAamBYqDLjM1cBFTG8hER/g0iI0JXMWPogg9Yw
OB+j+B4N1kR2TOLwkdUeLX4gCS4qb7EVptw/ZK/LoG2CgAOXak91joK0N3W24mXn
jzM6gYTnPmCGyC4zfAzjsGbbbUvd1cOkErMdt1KWeihJ3NRNHQ3tAPfYPsYhyciA
8CldHxuRabXkr6F76032Wpre6QIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFPEe/CRg
vnJRzMPgAk2e6tfFQ8TTMB8GA1UdIwQYMBaAFLzb1x17oo3rxZOfXMp2bsqfdWMQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjI4NS9CMjYxMEI1OEMz
RjIxMUU0Qjk2NTc1MTRDNEY5QUUwMi92TnZYSFh1aWpldkZrNTljeW5adXlwOTFZ
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZOdlhIWHVpamV2Rms1OWN5blp1eXA5MVl4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYyODUvQjI2MTBCNThDM0YyMTFFNEI5NjU3NTE0QzRGOUFFMDIvOTYyQjBEOThC
MTQxMTFFNUEzQjQ2QjE1QzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAe
BAIAATAYAwQAZzHNAwQAZzezAwQAZ1d5AwQAZ2B1MA8EAgACMAkDBwEgAQ3yhAAw
DQYJKoZIhvcNAQELBQADggEBAIrFySJ/ReqXieqpIHQ+hCFdY7gXmwdwYh8Kz1kp
5kjyMRytQ3/X577qK8le5CdtdKBSbiKkXvoKeC4wcNqpNAwyKG3RSKOUarHJW0Uf
AG6vIeXEvOZ4djh9L62mFApu2GzfhsNRo0cBVJJlrAOai6EFxXAo7Tk3Y3ERXyvw
PAUWbsS5dRBp7KiMVpiC/QCOXUi9O6nbikRizO/84kO33SvXZKNmcaiRYNtvs9K9
nsOoYDjsXCPCfbw/GrHal92zm+di+uoMbVigtmdgflfQJ4rN9xwZQ+FTcR505kax
gMizOoeQ8FLooJBCN/XGM8IYMqqpr9klaSeUKfBwE9n2fKw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:32 2026 by rpki-client