
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
File: 9E173D98C3A011F09FB4B135C4F9AE02.roa (raw, json)
Hash identifier: A1LiC6So+TzcJWUeMDWyW1pFnCl8fPM6A2gvVs6e3Ts=
Subject key identifier: F5:E7:63:66:4A:22:5B:B9:F7:5F:DB:11:D5:45:35:CE:5D:1E:E8:38
Certificate issuer: /CN=A912C8AF/serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Certificate serial: 0C3C
Authority key identifier: 76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:44:43 +0000
ROA not before: Thu 08 Jan 2026 10:13:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140666
IP address blocks: 103.198.203.0/24 maxlen: 24
2404:a140:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C8AF, serialNumber=763F7FBD964A1C3668308C9A29E15025C0DDF9D4
Validity
Not Before: Jan 8 10:13:57 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4891b-dffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1d:12:5d:83:a1:c5:60:da:eb:b6:89:bc:1f:
8e:ad:b5:42:30:6e:0c:c9:69:0d:46:7e:e5:3f:95:
c1:88:c4:0f:ed:42:ca:b9:b5:18:47:16:ec:4f:d1:
74:a3:7a:c7:66:d7:f5:bc:38:e0:79:eb:47:24:c8:
58:81:72:81:1d:bd:26:1f:4e:50:63:67:e9:5b:10:
4d:00:67:44:d1:71:9e:4c:7a:53:47:38:89:6f:a7:
91:60:51:46:93:93:dd:82:83:72:54:c7:26:b4:da:
a0:e1:3a:ae:87:1f:9a:c8:ad:4b:d5:d3:2c:f9:b5:
8a:cc:d7:3a:49:a9:f2:20:92:54:ad:90:32:e8:76:
5d:31:df:cb:cb:66:1e:b7:b4:cc:31:74:4f:e3:00:
cb:59:65:76:b6:a4:3b:4a:f1:60:77:02:bf:57:24:
d9:11:85:ea:4a:77:91:c0:5d:00:b3:58:8d:e0:e8:
8f:21:5a:1d:32:9f:7d:13:30:b4:2c:95:96:24:50:
ac:9a:b2:0f:fa:fd:8a:54:78:f4:46:c2:65:e4:11:
3b:32:5b:14:ec:de:58:8b:4c:bc:aa:2a:08:4d:5c:
45:8c:5f:6a:bd:ce:20:e9:7e:f6:64:d6:0c:5b:08:
11:3a:6d:45:18:d0:a8:8a:71:70:c9:b7:d9:f3:41:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:63:66:4A:22:5B:B9:F7:5F:DB:11:D5:45:35:CE:5D:1E:E8:38
X509v3 Authority Key Identifier:
keyid:76:3F:7F:BD:96:4A:1C:36:68:30:8C:9A:29:E1:50:25:C0:DD:F9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dj9_vZZKHDZoMIyaKeFQJcDd-dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/D1F64E725EEF11EAA54E6C6CC4F9AE02/9E173D98C3A011F09FB4B135C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.198.203.0/24
IPv6:
2404:a140:50::/48
Signature Algorithm: sha256WithRSAEncryption
24:ef:b6:b8:d7:a6:8a:6a:1d:f5:2b:a8:ad:60:6b:cc:b9:45:
5b:e8:2f:a2:a1:be:9b:36:3d:f2:a1:32:db:bc:5a:3e:3e:ab:
e8:28:5a:49:cd:0f:5b:f4:c2:95:66:19:30:97:62:4e:26:36:
73:1f:d3:31:c9:14:bf:e1:5d:b5:9b:6f:bf:d1:6d:08:13:67:
4f:e5:9e:8b:a6:8f:98:9a:e5:22:83:57:ce:ee:d8:63:21:98:
49:cd:3e:3a:bd:0c:ff:74:f2:af:58:de:36:ff:f6:e5:01:b6:
b4:6d:8d:d3:7a:58:72:41:68:52:2c:86:f8:2b:0c:a0:65:50:
5d:fd:21:e5:4f:31:3c:3a:73:f1:76:fb:39:2d:d0:15:ab:39:
7a:64:b5:c8:c5:ad:25:14:70:77:99:6c:7a:1b:ca:6f:3b:1b:
7b:f3:53:13:4f:37:11:74:cd:9a:5c:12:47:5b:74:0d:4f:2a:
37:f5:47:71:a4:0b:6a:11:87:01:1c:f7:6b:eb:2f:f4:64:44:
26:c2:26:1c:db:83:b8:fb:aa:a6:33:ee:c3:08:1a:2f:a9:d8:
87:6e:eb:b9:fe:9b:53:39:10:dc:ed:5b:47:63:ae:d8:35:76:
e3:fe:77:08:38:40:ce:23:df:26:92:29:79:4e:3c:55:4f:7b:
d2:e5:72:99
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICDDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM4QUYxMTAvBgNVBAUTKDc2M0Y3RkJEOTY0QTFDMzY2ODMwOEM5QTI5RTE1MDI1
QzBEREY5RDQwHhcNMjYwMTA4MTAxMzU3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODkxYi1kZmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8x0SXYOhxWDa67aJvB+OrbVCMG4MyWkNRn7lP5XBiMQP7ULKubUYRxbsT9F0
o3rHZtf1vDjgeetHJMhYgXKBHb0mH05QY2fpWxBNAGdE0XGeTHpTRziJb6eRYFFG
k5PdgoNyVMcmtNqg4Tquhx+ayK1L1dMs+bWKzNc6SanyIJJUrZAy6HZdMd/Ly2Ye
t7TMMXRP4wDLWWV2tqQ7SvFgdwK/VyTZEYXqSneRwF0As1iN4OiPIVodMp99EzC0
LJWWJFCsmrIP+v2KVHj0RsJl5BE7MlsU7N5Yi0y8qioITVxFjF9qvc4g6X72ZNYM
WwgROm1FGNCoinFwybfZ80ELLwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFPXnY2ZK
Ilu591/bEdVFNc5dHug4MB8GA1UdIwQYMBaAFHY/f72WShw2aDCMminhUCXA3fnU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9EMUY2NEU3MjVF
RUYxMUVBQTU0RTZDNkNDNEY5QUUwMi9kajlfdlpaS0hEWm9NSXlhS2VGUUpjRGQt
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqOV92WlpLSERab01JeWFLZUZRSmNEZC1kUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkM4QUYvRDFGNjRFNzI1RUVGMTFFQUE1NEU2QzZDQzRGOUFFMDIvOUUxNzNEOThD
M0EwMTFGMDlGQjRCMTM1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ8bLMA8EAgACMAkDBwAkBKFAAFAwDQYJKoZIhvcNAQELBQADggEB
ACTvtrjXpopqHfUrqK1ga8y5RVvoL6Khvps2PfKhMtu8Wj4+q+goWknND1v0wpVm
GTCXYk4mNnMf0zHJFL/hXbWbb7/RbQgTZ0/lnoumj5ia5SKDV87u2GMhmEnNPjq9
DP908q9Y3jb/9uUBtrRtjdN6WHJBaFIshvgrDKBlUF39IeVPMTw6c/F2+zkt0BWr
OXpktcjFrSUUcHeZbHobym87G3vzUxNPNxF0zZpcEkdbdA1PKjf1R3GkC2oRhwEc
92vrL/RkRCbCJhzbg7j7qqYz7sMIGi+p2Idu67n+m1M5ENztW0djrtg1duP+dwg4
QM4j3yaSKXlOPFVPe9Llcpk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:06 2026 by rpki-client