
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa
File: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (raw, json)
Hash identifier: yifIUTqbn7Wd/uULyvr6BJeOjGF176Fhn2BVhJf8YA0=
Subject key identifier: DE:0B:7F:18:29:92:D9:49:A2:DD:C7:15:5E:ED:4D:09:B9:92:06:86
Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Certificate serial: 0223
Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:59:37 +0000
ROA not before: Wed 29 Oct 2025 02:47:01 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 3320
IP address blocks: 103.140.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 547 (0x223)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6
Validity
Not Before: Oct 29 02:47:01 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a43839-74b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:53:86:aa:df:58:50:86:de:6b:4a:0b:e4:
3a:c6:2b:16:25:51:97:4a:08:58:04:59:f0:b9:9d:
f3:98:62:d6:b5:12:77:0a:57:f8:a0:67:fe:94:ba:
3e:d5:bc:cc:37:bb:0b:77:d2:5a:45:35:f7:b6:45:
a8:29:26:bf:61:92:fc:26:9c:e9:cd:2a:00:83:9e:
fe:69:c7:e8:e5:0a:cb:e4:42:8a:a5:75:60:57:e7:
e0:50:c5:e2:a2:57:50:11:90:81:c8:db:8a:10:9e:
ee:29:e2:1e:03:d5:24:15:01:87:83:13:2c:0f:0c:
45:42:10:2f:f3:4f:11:63:99:70:8a:7f:b2:25:f5:
2a:6e:c9:60:d6:7f:30:c3:33:cd:4c:d2:a9:56:54:
ca:bf:6b:28:d0:ce:9f:a3:5d:66:bc:9c:f4:44:88:
44:3e:eb:83:7e:72:c2:e8:7a:c0:a5:25:7a:3c:77:
05:1e:32:41:8a:cc:23:b6:35:00:3a:f9:a4:64:71:
a4:be:be:09:26:ed:95:e8:b4:98:bc:42:2f:41:5e:
de:88:03:31:fa:53:02:70:9f:dc:75:0c:0f:78:bf:
b4:58:a8:91:f5:06:15:0b:cd:79:48:2f:e2:7f:e0:
49:3e:f7:45:6d:9a:e4:5f:9e:0e:ef:1d:97:c0:6b:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:7F:18:29:92:D9:49:A2:DD:C7:15:5E:ED:4D:09:B9:92:06:86
X509v3 Authority Key Identifier:
keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.114.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:55:a7:e4:5e:f5:16:7a:5c:4e:cf:bb:f7:2e:d3:f9:34:10:
a4:c4:17:bd:da:8e:9f:b1:04:10:98:9c:b6:10:56:a5:d1:06:
9f:1f:f3:a7:b6:9d:d4:cb:80:1c:ad:3c:6a:59:8d:b1:f2:74:
58:fc:05:03:fa:e6:6f:fb:b7:45:30:b3:ae:2e:2a:e4:70:8d:
d2:ad:12:4e:42:b3:c3:48:60:df:a2:97:20:1e:0c:7b:2b:54:
09:ce:f9:41:cb:1e:26:25:90:ce:e8:b0:83:9d:72:a8:70:af:
54:8b:e0:7e:2a:3e:7e:dc:10:ab:48:2b:41:2c:33:11:8a:5f:
4a:e3:f8:d4:26:e1:47:eb:5b:68:84:41:00:88:29:5c:23:3c:
da:d7:cd:28:db:4d:fd:5e:e7:5b:e6:59:f7:5a:9d:cf:a1:6e:
81:80:3f:5a:59:23:e6:22:99:48:5e:76:47:1e:b4:f2:8e:42:
39:8a:d1:5f:d4:e6:36:43:98:1e:14:c5:88:43:10:a8:a5:a7:
a7:7a:9f:ba:3b:3f:5e:f5:17:46:20:56:a2:d4:3d:40:42:ed:
72:4e:38:2b:0d:f1:c8:97:e8:8f:d2:12:6a:14:70:2b:e4:fb:
6e:d3:2e:92:e4:ac:87:7d:67:42:5b:3d:78:9b:de:ed:77:06:
28:bf:b2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:48 2026 by rpki-client