
$ rpki-client -vvf rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/9622AF205A5811EBA7FCC36AC4F9AE02.roa
File: 9622AF205A5811EBA7FCC36AC4F9AE02.roa (raw, json)
Hash identifier: 7DYZ42c+uAET1oaybbh+c/oEvhXN4AIkElr0mgUD2kE=
Subject key identifier: 97:B9:9E:B9:41:8B:B2:EC:60:1C:1D:99:10:ED:E1:1E:6E:4D:7A:8A
Certificate issuer: /CN=A913397F/serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Certificate serial: 075D
Authority key identifier: D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/9622AF205A5811EBA7FCC36AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:12:13 +0000
ROA not before: Fri 02 Jan 2026 21:17:50 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 141453
IP address blocks: 103.159.181.0/24 maxlen: 24
2001:df5:8880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1885 (0x75d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913397F, serialNumber=D233BB88B0889B64F14F5315D71613AA1674D007
Validity
Not Before: Jan 2 21:17:50 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4493d-1b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:bc:cc:a5:02:23:60:6b:6d:6e:bf:72:4d:
a1:9e:16:43:63:2a:5c:75:74:fe:53:82:19:86:4f:
fe:53:d0:0b:da:7c:ea:00:b7:66:d0:7a:ac:69:41:
0c:cc:c8:32:1e:cf:10:2e:6f:9f:0b:a0:d7:52:42:
58:92:33:98:6d:4b:db:d1:a5:54:6f:06:04:0e:b5:
ab:01:78:15:3e:97:67:38:88:ed:d5:2b:cb:fc:02:
2d:e0:fb:03:28:14:e1:37:77:09:84:4f:37:90:f6:
11:c7:0a:b4:ed:c6:35:58:79:13:b9:4b:60:5e:de:
c6:69:6b:a1:6f:e4:49:7f:1c:0c:0f:2d:18:b9:94:
4b:45:ac:78:ba:ae:39:71:b6:ac:c3:0e:75:7c:f6:
c4:6b:8c:61:e4:f5:47:57:e1:63:f7:83:c0:75:a1:
d7:42:91:79:db:78:07:f5:cb:ea:9d:67:1c:18:8d:
9f:9d:1f:18:04:a5:06:ee:f5:d5:17:d2:c5:19:20:
95:58:56:f6:f6:f3:54:35:fb:a5:30:62:ff:eb:c0:
07:60:95:2d:ad:33:fe:8f:82:5e:b8:37:d0:35:fe:
83:1f:8c:43:47:b9:b5:b8:7d:e5:38:f0:e8:7b:91:
34:b3:8b:89:a1:2b:8b:72:c2:1b:e1:5c:8c:65:8c:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B9:9E:B9:41:8B:B2:EC:60:1C:1D:99:10:ED:E1:1E:6E:4D:7A:8A
X509v3 Authority Key Identifier:
keyid:D2:33:BB:88:B0:88:9B:64:F1:4F:53:15:D7:16:13:AA:16:74:D0:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0jO7iLCIm2TxT1MV1xYTqhZ00Ac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913397F/FF98D68A5A4611EBA026DE23C4F9AE02/9622AF205A5811EBA7FCC36AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.159.181.0/24
IPv6:
2001:df5:8880::/48
Signature Algorithm: sha256WithRSAEncryption
93:82:05:1a:86:6b:af:23:e0:10:d5:ca:aa:ec:d7:0d:3c:ca:
bf:fd:82:04:c4:0d:e4:ee:ce:29:3a:77:be:c9:2a:b7:be:5b:
41:08:8b:f2:9b:43:c8:b4:4d:2f:d6:12:32:68:ab:9e:7c:f3:
4c:22:84:10:4a:e3:5e:ef:ce:c3:cc:56:e9:2d:7c:54:f0:cb:
dc:70:cb:3e:bd:e6:24:7b:ce:fb:c7:87:dc:5f:5e:3b:2d:a1:
dc:e3:75:ba:ed:d9:7c:84:79:c0:78:a4:91:d1:f5:03:48:45:
ca:2b:cc:db:25:ca:a2:ed:cc:d6:22:01:58:09:0b:b8:10:1d:
90:29:e3:1f:fc:b7:ee:3c:93:09:fd:e5:a5:35:20:72:14:3a:
52:f7:3a:5f:b6:7b:5d:18:01:cb:e1:9e:5e:df:33:92:d0:01:
6d:b9:3c:21:b6:e2:1d:d5:e9:61:f3:88:ad:87:37:94:b6:ac:
6d:78:f7:55:13:c9:b5:78:03:c3:ae:5a:fe:78:c6:f0:9c:fe:
6e:3d:48:70:c9:ef:1f:1c:79:32:7c:27:cc:d4:2e:06:d3:35:
d2:7c:08:b6:c1:2f:ef:43:81:45:61:b9:8c:f4:c8:77:49:c8:
8c:a7:7a:38:47:bf:a2:75:c5:fd:1d:97:82:85:50:c7:64:67:
ea:40:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:30 2026 by rpki-client