
$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/BAD49C82AA9611F098799D0CC4F9AE02.roa
File: BAD49C82AA9611F098799D0CC4F9AE02.roa (raw, json)
Hash identifier: 8315NWB7T+r8so9TLjxJjLLffNl/KqUTxd1+v/47CtA=
Subject key identifier: 4B:C4:8C:66:E1:08:1B:5E:B1:90:6A:28:1E:3B:78:24:92:17:31:AB
Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial: 35B5
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/BAD49C82AA9611F098799D0CC4F9AE02.roa
Signing time: Mon 22 Jun 2026 16:13:16 +0000
ROA not before: Mon 22 Jun 2026 16:13:16 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 58599
IP address blocks: 103.9.104.0/23 maxlen: 24
2403:dd00::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13749 (0x35b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Validity
Not Before: Jun 22 16:13:16 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a395f1b-c970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:c1:5f:8d:f2:25:c9:53:8e:88:69:01:e0:
ed:f6:e4:5b:a9:97:b2:51:63:e7:dd:9a:e6:62:fa:
ab:be:6d:8c:34:a9:33:cd:aa:a4:b6:ae:fd:94:46:
f9:5f:9a:a6:cc:57:e9:aa:c1:11:2e:ef:ac:0a:0e:
0d:10:e9:0a:87:50:62:a1:4a:88:96:8a:d6:00:ce:
77:a5:fb:dc:12:d3:9c:02:1d:e2:16:d0:a5:ff:b6:
bd:07:2f:eb:f2:c4:3d:7e:a7:05:dd:22:5c:2f:c9:
47:fb:4f:db:6f:cf:3e:d1:ee:39:1b:9a:81:72:97:
52:ca:15:9b:c1:e9:8d:b5:b5:ac:12:3f:25:1a:fd:
f4:e2:bb:40:f0:2c:97:41:bb:f4:e7:e9:3d:92:1e:
42:dd:f2:f0:f9:16:01:7c:29:fe:0a:10:fc:04:f6:
9d:03:ec:66:39:d3:70:e2:47:be:7a:6e:fe:cc:87:
45:d8:4f:3e:fb:4c:8e:be:22:83:25:f7:3c:4b:46:
77:91:de:85:49:5e:55:40:21:e8:a3:e2:29:e9:b3:
cd:dd:ac:68:76:6b:cf:92:9f:87:b1:dd:5b:65:de:
1f:e3:51:3f:aa:45:6f:b3:a3:1a:a4:09:f9:39:ea:
a4:bb:73:60:14:39:da:4b:96:5b:bf:e0:0d:15:fe:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C4:8C:66:E1:08:1B:5E:B1:90:6A:28:1E:3B:78:24:92:17:31:AB
X509v3 Authority Key Identifier:
keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/BAD49C82AA9611F098799D0CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.9.104.0/23
IPv6:
2403:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
80:0e:71:fd:22:89:35:ce:01:84:0a:13:25:6a:e5:9b:d5:73:
56:b4:16:92:06:cf:5f:af:fd:ce:cb:a6:9b:9a:ac:10:a0:95:
0d:85:f4:dd:97:d5:f6:e6:38:05:d3:bc:63:12:e7:0c:1d:00:
6f:4c:7b:5b:4d:53:77:fc:79:76:67:4a:c2:ae:35:42:95:98:
aa:fe:4f:c5:cb:3e:6f:b0:f0:94:71:48:5a:46:42:8e:8a:9b:
b5:65:36:04:84:44:8b:3c:9d:a0:99:02:b0:9e:a9:15:87:ba:
77:b5:46:c5:03:33:b9:2a:48:06:7c:b1:81:7b:41:42:0e:88:
2c:63:93:17:4f:e9:ba:9b:df:13:19:61:1b:0b:4e:f9:2c:c5:
fc:a0:d1:92:3c:7c:29:ef:92:56:5b:70:1d:e6:ce:69:af:a3:
ac:93:b4:8d:71:62:90:aa:88:62:8b:bf:20:a3:b3:72:48:76:
29:9c:e8:cd:0b:23:eb:93:b8:d5:4e:07:32:ca:9b:b2:31:c6:
bd:48:32:c9:ba:fa:a9:14:19:b0:dc:5f:39:d9:67:11:de:5a:
08:2d:21:ee:ae:3c:72:73:83:f2:25:5c:b9:ad:02:b5:36:63:
80:37:60:5d:6f:32:ea:a9:cf:0b:50:23:f9:b9:71:45:0b:a9:
73:2c:ed:6f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICNbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk5NEYxMTAvBgNVBAUTKDRCRUQ1OEJDNDU0NEU3RTNCNUU5Nzg5QzY3QzYzQkVD
OTFDMjdDREQwHhcNMjYwNjIyMTYxMzE2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM5NWYxYi1jOTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnrnBX43yJclTjohpAeDt9uRbqZeyUWPn3ZrmYvqrvm2MNKkzzaqktq79lEb5
X5qmzFfpqsERLu+sCg4NEOkKh1BioUqIlorWAM53pfvcEtOcAh3iFtCl/7a9By/r
8sQ9fqcF3SJcL8lH+0/bb88+0e45G5qBcpdSyhWbwemNtbWsEj8lGv304rtA8CyX
Qbv05+k9kh5C3fLw+RYBfCn+ChD8BPadA+xmOdNw4ke+em7+zIdF2E8++0yOviKD
Jfc8S0Z3kd6FSV5VQCHoo+Ip6bPN3axodmvPkp+Hsd1bZd4f41E/qkVvs6MapAn5
Oeqku3NgFDnaS5Zbv+ANFf4leQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEvEjGbh
CBtesZBqKB47eCSSFzGrMB8GA1UdIwQYMBaAFEvtWLxFROfjtel4nGfGO+yRwnzd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk0Ri9BMDI5QTUyNjFE
QUExMUUyOUJGQzY3QTYwOEIwMkNEMi9TLTFZdkVWRTUtTzE2WGljWjhZNzdKSENm
TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MtMVl2RVZFNS1PMTZYaWNaOFk3N0pIQ2ZOMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjk5NEYvQTAyOUE1MjYxREFBMTFFMjlCRkM2N0E2MDhCMDJDRDIvQkFENDlDODJB
QTk2MTFGMDk4Nzk5RDBDQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZwloMA0EAgACMAcDBQAkA90AMA0GCSqGSIb3DQEBCwUAA4IBAQCA
DnH9Iok1zgGEChMlauWb1XNWtBaSBs9fr/3Oy6abmqwQoJUNhfTdl9X25jgF07xj
EucMHQBvTHtbTVN3/Hl2Z0rCrjVClZiq/k/Fyz5vsPCUcUhaRkKOipu1ZTYEhESL
PJ2gmQKwnqkVh7p3tUbFAzO5KkgGfLGBe0FCDogsY5MXT+m6m98TGWEbC075LMX8
oNGSPHwp75JWW3Ad5s5pr6Osk7SNcWKQqohii78go7NySHYpnOjNCyPrk7jVTgcy
ypuyMca9SDLJuvqpFBmw3F852WcR3loILSHurjxyc4PyJVy5rQK1NmOAN2BdbzLq
qc8LUCP5uXFFC6lzLO1v
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:47 2026 by rpki-client