
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/F8D9DD88B8FC11F1BF1A80ED4011F970.roa
File: F8D9DD88B8FC11F1BF1A80ED4011F970.roa (raw, json)
Hash identifier: H0FKlshXl0D4srmT01cH307SR+SUUWcxlZRuNMPuvp0=
Subject key identifier: 31:01:F3:87:07:88:D7:99:44:F5:B2:EC:CC:6F:66:D3:28:77:EF:6D
Certificate issuer: /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Certificate serial: 02A9
Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/F8D9DD88B8FC11F1BF1A80ED4011F970.roa
Signing time: Fri 25 Sep 2026 16:20:07 +0000
ROA not before: Fri 25 Sep 2026 16:20:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151051
IP address blocks: 103.121.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 16:20:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 681 (0x2a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Validity
Not Before: Sep 25 16:20:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab69f37-9e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:40:7f:a1:77:90:4d:9e:f0:3c:dc:8a:05:
ba:76:0f:82:7b:10:2e:8b:53:8b:a6:3b:45:6f:72:
f1:50:db:a1:19:3b:58:5b:45:c9:22:72:5e:84:99:
48:b1:8a:e9:7f:29:32:31:a3:20:a9:51:85:a7:c0:
28:72:b8:c3:9f:81:61:b3:33:83:7b:32:f1:06:c0:
75:d8:76:c6:f7:64:8e:44:3a:18:3d:79:69:e9:2d:
f7:b7:88:b8:9f:99:a6:29:c2:45:f8:98:ac:31:88:
c9:10:0a:1c:c7:6d:7f:f8:3c:88:74:57:f9:d9:c0:
c7:05:8e:39:c6:d4:9b:bb:9f:31:82:e4:e6:a0:bf:
31:f0:e3:df:70:fe:9b:d7:d4:7c:24:a1:46:f2:4a:
3c:03:20:02:62:da:ba:ef:93:a3:c7:ac:ef:22:5a:
06:5a:a9:ab:f4:11:b1:e1:6c:f7:36:ad:f6:0c:d3:
aa:d6:57:98:1f:fe:24:98:84:11:e2:f9:b2:13:68:
b2:53:45:6d:80:67:41:c8:7f:f6:d3:8f:cd:bc:13:
87:cd:d7:7e:85:3b:c1:57:a7:c3:87:5f:7e:46:31:
c0:ad:75:d7:57:de:63:8a:63:e1:5b:30:d0:5c:1d:
8e:64:c1:14:89:5c:02:56:3c:a8:a2:f9:ab:1a:a4:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:01:F3:87:07:88:D7:99:44:F5:B2:EC:CC:6F:66:D3:28:77:EF:6D
X509v3 Authority Key Identifier:
keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/F8D9DD88B8FC11F1BF1A80ED4011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
103.121.178.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:43:0c:89:5e:67:c6:3d:f6:63:e7:de:3d:50:cf:76:00:e5:
38:9b:5f:42:e0:b1:d7:fa:25:d1:39:4c:de:d6:99:fe:04:96:
73:a8:fc:a9:5f:c4:db:c7:a5:1c:8c:96:88:45:3a:54:0e:96:
80:28:b5:5d:00:fe:1e:2a:32:3d:c0:81:be:56:30:a7:27:a9:
b0:a2:88:0b:c9:f6:89:4b:00:20:5e:07:6f:5b:cd:43:25:74:
6c:7d:71:75:5d:73:7a:2f:13:85:0e:97:a1:4c:4b:61:80:f3:
e4:54:df:f2:b2:74:e9:5f:e2:6a:b5:51:85:97:46:f0:83:a5:
e6:8e:30:bb:27:2e:5f:4a:ea:5a:2e:d3:7a:62:95:91:a4:f9:
af:d5:85:46:d8:24:8f:ac:de:59:4f:7d:c7:7e:0b:81:ec:6b:
6d:e2:84:bd:e2:02:d2:0f:7f:39:17:ab:06:8f:d8:c1:aa:17:
c1:21:6a:e2:56:48:1a:1e:b6:9e:89:19:6b:4b:5b:2c:67:bf:
70:ad:35:4e:da:4f:6a:d6:86:ef:5e:18:15:0a:59:c4:95:82:
54:e9:fb:8f:aa:eb:51:e8:d7:f5:52:ef:35:b3:68:49:78:b2:
6e:4e:b8:a1:24:5d:46:32:3f:8e:1f:0d:d7:f5:7c:64:56:4e:
ca:9a:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:27:06 2026 by rpki-client