
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/A38DD8D40E1111F1B60944950A3D8C67.roa
File: A38DD8D40E1111F1B60944950A3D8C67.roa (raw, json)
Hash identifier: 8xomlP6u/pFuCS+4ZI0VqTn0cJ1Ypm6zhDkBB6EqaYQ=
Subject key identifier: C0:96:35:8A:20:30:54:03:04:F3:AF:5D:FB:45:0F:4A:A3:14:95:7D
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 037E
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/A38DD8D40E1111F1B60944950A3D8C67.roa
Signing time: Sun 03 May 2026 01:32:32 +0000
ROA not before: Sun 03 May 2026 01:32:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44259
IP address blocks: 103.227.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 01:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: May 3 01:32:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f6a5af-16c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:e8:da:a5:0e:86:98:47:fb:1b:43:fd:ca:
94:12:89:2a:fa:6a:f6:89:73:ab:2a:64:0d:d3:28:
37:a7:cf:c4:3b:8c:0a:ff:b6:47:5b:aa:a5:59:c1:
02:7f:7b:c1:5b:64:d7:d2:f5:54:0d:ff:cb:f6:ce:
5b:fa:41:0f:8a:52:47:7b:66:d1:a3:b5:be:75:5d:
3a:80:80:96:ce:35:fd:d3:4d:08:ad:b9:0e:b4:21:
76:a0:ff:3b:ce:b0:da:45:98:9b:fb:4f:13:5b:ce:
97:77:55:61:60:bd:c7:e8:79:69:38:25:9c:5d:83:
16:32:0c:37:2f:9d:b5:d7:8e:73:37:41:84:aa:e9:
06:37:f8:e2:61:57:55:b4:1b:09:b2:b8:88:47:74:
38:6f:49:bf:b9:49:20:79:8a:4b:34:33:93:27:3f:
3d:86:49:d4:77:42:ba:ce:b8:ea:5c:c4:10:5f:1a:
7e:24:e8:5f:0d:5a:de:0a:90:06:a1:fa:05:aa:65:
9e:34:8d:c4:69:8e:91:ec:58:4b:47:d6:43:9e:2c:
cd:86:22:20:9f:2c:84:47:32:22:e4:fd:a3:42:b2:
62:c2:55:79:9c:4e:d4:7c:0f:81:c9:01:0b:3e:c1:
d6:65:fb:7a:5e:17:15:ab:7e:5f:8f:91:78:a8:3a:
db:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:96:35:8A:20:30:54:03:04:F3:AF:5D:FB:45:0F:4A:A3:14:95:7D
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/A38DD8D40E1111F1B60944950A3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.227.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ea:c5:37:e1:1b:89:53:bd:36:84:d1:f3:e3:f9:00:bf:8b:
10:ac:26:c4:e7:22:c7:ba:d3:97:da:ff:f9:db:53:1e:b2:29:
f6:f9:18:bf:9c:2e:25:d5:dd:ea:08:80:d3:f4:34:67:a7:3c:
7a:d8:9d:bf:d9:ed:9b:e1:63:74:01:51:7d:da:49:28:26:7c:
25:95:df:f2:53:83:86:d9:20:86:e5:2c:02:36:23:39:5c:93:
2c:7e:ed:f5:81:51:09:b4:11:87:1e:b5:a0:39:e6:91:bf:2d:
04:c5:4b:91:12:3a:b9:db:ea:24:fb:7e:d4:d6:1c:d7:a0:b6:
e5:df:af:04:2c:56:f4:7a:4b:14:4f:3b:7f:de:32:5e:cf:ca:
00:58:cc:fa:0f:f3:e7:fa:be:ee:d7:6c:b5:34:84:64:47:af:
16:6e:d4:58:57:af:9d:c1:30:33:b5:d1:0b:2c:e4:b2:a8:4c:
c0:0d:d5:8d:c7:8f:50:58:2c:6a:a2:82:e5:f5:a9:5f:27:28:
51:98:1f:d6:71:91:15:b2:77:58:74:a2:cf:a5:e2:f1:b7:b7:
df:37:79:69:07:65:da:db:da:4e:a4:ed:78:eb:6f:2d:0a:05:
42:c4:91:05:c6:ee:ba:09:6e:2a:c1:d4:d5:62:2a:f9:fa:b2:
0a:69:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:22 2026 by rpki-client