
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/2F902D58953E11EFA996495BC4F9AE02.roa
File: 2F902D58953E11EFA996495BC4F9AE02.roa (raw, json)
Hash identifier: 2Jv9MG7xi06P5kcDDPgdjuTC+iMwAJuA2IsIX/ADqHI=
Subject key identifier: D0:7D:12:62:CC:C7:8F:05:6C:4E:82:7D:00:90:93:7A:D1:DB:E8:84
Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Certificate serial: 02BB
Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/2F902D58953E11EFA996495BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:40:12 +0000
ROA not before: Thu 31 Jul 2025 02:39:02 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 135587
IP address blocks: 103.7.122.0/24 maxlen: 24
2001:df1:49c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 699 (0x2bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65
Validity
Not Before: Jul 31 02:39:02 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46bec-4b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:36:5a:3b:07:df:df:87:68:e3:29:78:37:
58:da:eb:65:9d:5c:c6:d0:c7:e1:13:fa:0a:80:62:
77:94:74:fc:5e:e5:85:aa:c4:e7:5f:5c:8e:96:44:
92:3d:2c:38:bf:ef:42:ac:c4:4c:7e:e4:b3:10:26:
f7:eb:c0:3e:c4:1b:a9:f1:3b:00:34:47:4f:61:23:
a3:53:8a:e1:33:b4:21:6a:3e:49:dc:c0:d3:2d:40:
ec:d8:55:fd:c6:b0:79:e1:e1:78:55:5b:c0:89:c3:
00:c0:74:ba:f2:ff:b6:37:05:e3:92:39:c9:39:32:
63:2a:3b:f7:f6:ca:9f:46:78:82:d4:91:e0:26:cd:
83:a7:36:c2:38:07:8e:b6:29:8b:60:e8:60:0c:59:
b2:a7:d1:51:ab:b6:23:0b:1f:cf:d0:b0:89:2b:f6:
49:53:a6:65:33:08:e0:c9:39:6e:29:f6:bc:d5:fc:
b8:04:59:ec:24:b5:d3:40:e1:1f:a6:73:bf:48:5c:
52:74:5f:52:4a:31:09:dc:e3:6b:9c:f3:29:44:4f:
87:f7:48:29:be:d9:10:a7:d7:9e:47:63:1e:5f:49:
9e:a6:10:69:94:61:df:80:67:31:eb:3c:f5:54:f2:
16:82:e7:69:80:4b:da:90:62:f7:04:0a:94:fc:be:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7D:12:62:CC:C7:8F:05:6C:4E:82:7D:00:90:93:7A:D1:DB:E8:84
X509v3 Authority Key Identifier:
keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/2F902D58953E11EFA996495BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.7.122.0/24
IPv6:
2001:df1:49c0::/48
Signature Algorithm: sha256WithRSAEncryption
27:45:ac:c9:4d:1c:60:01:25:7b:86:c2:40:00:ef:be:43:a4:
09:e3:a0:e0:8d:7f:1a:92:47:bf:63:a4:97:73:dc:e4:ee:9c:
d3:1c:23:8b:cf:73:75:22:14:2b:62:5f:c9:67:bc:fa:5f:6a:
d4:cf:14:4f:e5:14:43:70:81:b7:50:63:96:34:c3:b4:3a:cf:
17:47:b5:fc:fd:f7:55:63:99:e2:fc:ed:7b:a3:a3:76:c9:87:
8e:1e:d4:44:77:eb:b3:a0:e6:03:49:02:3c:e8:70:38:c8:dd:
69:57:10:f0:3d:22:50:77:1d:27:53:d8:29:ee:b2:8a:2a:3c:
2a:fd:1e:d2:81:b4:4d:f2:3b:db:1f:90:a8:0d:95:70:d4:1d:
d6:1b:04:a2:db:ee:04:0c:9e:2a:ca:4d:17:d3:5b:fd:1c:13:
8d:67:01:37:54:63:75:c5:80:ae:21:90:fe:f3:7f:be:d7:9a:
d5:2b:1d:5e:6e:7f:bc:e8:f4:98:3d:66:43:57:62:cb:7d:60:
e3:0e:1c:c4:ff:26:86:fb:2c:3c:50:21:9a:73:8c:0d:3d:a7:
42:fe:f9:08:c0:92:bc:5a:48:31:5c:bf:3e:48:5b:86:23:99:
33:d9:e6:04:94:d0:cd:79:bb:70:4f:ed:a7:a2:18:df:41:8b:
93:37:3f:63
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy
OUNDNzZCNjUwHhcNMjUwNzMxMDIzOTAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmJlYy00YjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn3Q2WjsH39+HaOMpeDdY2utlnVzG0MfhE/oKgGJ3lHT8XuWFqsTnX1yOlkSS
PSw4v+9CrMRMfuSzECb368A+xBup8TsANEdPYSOjU4rhM7Qhaj5J3MDTLUDs2FX9
xrB54eF4VVvAicMAwHS68v+2NwXjkjnJOTJjKjv39sqfRniC1JHgJs2DpzbCOAeO
timLYOhgDFmyp9FRq7YjCx/P0LCJK/ZJU6ZlMwjgyTluKfa81fy4BFnsJLXTQOEf
pnO/SFxSdF9SSjEJ3ONrnPMpRE+H90gpvtkQp9eeR2MeX0mephBplGHfgGcx6zz1
VPIWgudpgEvakGL3BAqU/L6EyQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNB9EmLM
x48FbE6CfQCQk3rR2+iEMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4
M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjcxNDIvOTY2MTg1QkEzODNDMTFFREIwOUYwMjE0QzRGOUFFMDIvMkY5MDJENTg5
NTNFMTFFRkE5OTY0OTVCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZwd6MA8EAgACMAkDBwAgAQ3xScAwDQYJKoZIhvcNAQELBQADggEB
ACdFrMlNHGABJXuGwkAA775DpAnjoOCNfxqSR79jpJdz3OTunNMcI4vPc3UiFCti
X8lnvPpfatTPFE/lFENwgbdQY5Y0w7Q6zxdHtfz991VjmeL87Xujo3bJh44e1ER3
67Og5gNJAjzocDjI3WlXEPA9IlB3HSdT2CnusooqPCr9HtKBtE3yO9sfkKgNlXDU
HdYbBKLb7gQMnirKTRfTW/0cE41nATdUY3XFgK4hkP7zf77XmtUrHV5uf7zo9Jg9
ZkNXYst9YOMOHMT/Job7LDxQIZpzjA09p0L++QjAkrxaSDFcvz5IW4YjmTPZ5gSU
0M15u3BP7aeiGN9Bi5M3P2M=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:40:04 2026 by rpki-client