
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/9770D05EBC4211F0B94CE580C4F9AE02.roa
File: 9770D05EBC4211F0B94CE580C4F9AE02.roa (raw, json)
Hash identifier: EKVGFJ/g32vu6i1eB7NEFOf+Zsly8ubAP4iYudVd5gM=
Subject key identifier: 08:37:D9:B1:AC:A9:15:C0:05:F7:A8:6E:86:35:43:4D:25:D8:CB:B9
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 037F
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/9770D05EBC4211F0B94CE580C4F9AE02.roa
Signing time: Sun 03 May 2026 01:32:34 +0000
ROA not before: Sun 03 May 2026 01:32:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5065
IP address blocks: 103.227.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895 (0x37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: May 3 01:32:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f6a5b2-104b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:cc:7d:d7:3d:61:dd:23:51:90:e7:0e:43:
8f:5f:5c:92:98:25:5d:e0:ca:24:db:5a:26:57:9c:
2e:d5:cc:f8:99:1b:56:ab:8a:aa:1b:4f:f8:32:73:
f8:85:2c:20:9f:90:d9:fc:27:e1:6f:be:44:7e:04:
38:bf:16:fd:ce:27:d2:e5:76:63:6d:e4:1b:1f:20:
48:95:89:a8:03:8f:59:2f:14:26:e4:8d:35:80:3b:
41:87:06:43:06:08:fa:ae:83:5a:8d:28:1c:aa:31:
51:f1:1c:5e:5c:c3:d6:11:3f:31:df:cc:34:0e:0d:
f5:14:ae:36:57:70:f2:ee:e0:79:5c:e4:33:d4:dc:
fe:5f:a7:88:8e:4a:6f:79:76:17:2f:9e:27:d6:33:
34:49:1c:18:5e:4f:c8:72:f9:e1:8b:f4:9d:95:1d:
2d:8e:0a:66:42:b8:4c:c4:d2:69:5e:bc:8b:1f:17:
1a:ba:de:45:83:39:15:53:7e:d1:86:68:92:71:bf:
e3:ec:f9:80:80:28:1c:7d:9f:06:a0:87:fc:22:05:
a1:68:41:7e:56:87:c9:cf:1a:c8:9e:a9:58:14:5c:
6f:62:0c:9b:f2:cc:27:fd:19:87:df:2b:4f:2c:6d:
09:c7:c5:cf:5f:e9:43:97:cf:ca:83:07:84:19:3b:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:37:D9:B1:AC:A9:15:C0:05:F7:A8:6E:86:35:43:4D:25:D8:CB:B9
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/9770D05EBC4211F0B94CE580C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.227.211.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ce:d6:5a:1b:a0:0f:54:5c:be:3e:5c:96:7e:f7:0e:de:eb:
96:84:b7:47:aa:e6:b7:5e:c7:0b:61:6b:f8:8b:31:de:0d:40:
6e:e9:72:ee:61:b2:1b:9a:77:dd:4a:36:34:ae:2d:e7:61:38:
da:b3:db:d2:f1:4f:e7:51:a1:b7:ec:f3:d4:a7:8f:65:4c:e5:
8a:bb:81:fb:6c:50:57:62:7f:e2:5b:cf:9c:d3:db:6b:6f:dd:
88:95:59:41:f2:9f:f0:9d:51:07:97:7f:e8:ca:a8:04:d0:3b:
6b:84:a3:99:72:91:fe:f2:28:48:9d:1b:4c:c2:af:c5:7b:1f:
b2:70:be:b7:04:14:a2:5c:06:9f:0a:ea:a7:ec:ea:a1:0c:ad:
86:cc:17:e7:b2:a0:18:84:01:2d:a7:9b:4d:16:b8:d3:19:fd:
37:f4:ce:b0:e1:33:17:cb:53:91:ef:c1:bf:92:4b:9b:64:0d:
f3:b2:4a:c5:d7:00:57:25:97:a6:0f:c2:c1:8c:bd:1e:93:1b:
80:be:be:0e:50:2a:31:d0:9f:7b:1a:8a:fb:5c:fe:33:1f:d3:
5d:da:31:1a:b1:f9:58:c1:5c:22:28:70:77:b9:e7:93:52:43:
5c:36:ea:32:1a:29:52:90:c5:59:37:7e:92:87:da:ab:31:22:
20:b9:6f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:55 2026 by rpki-client