
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
File: 900F6E92211E11ECAEED8632C4F9AE02.roa (raw, json)
Hash identifier: paPJ2VWTf+WLhEkDLAlkBi0agBrAp+1davRv4M78fOU=
Subject key identifier: 07:5D:4C:A2:A1:7B:93:18:39:BE:26:03:E4:3A:93:C1:C7:7B:25:09
Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial: 05AD
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:47:34 +0000
ROA not before: Thu 02 Oct 2025 23:55:04 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 55720
IP address blocks: 103.75.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Validity
Not Before: Oct 2 23:55:04 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a594f6-752c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:61:b9:de:9d:eb:2f:f1:f8:ad:4f:d9:96:
09:36:df:b7:4e:57:7a:64:5e:e7:9d:87:20:6f:6c:
ca:d3:0f:76:5c:b8:3d:73:21:6e:4f:99:af:7e:22:
23:8f:e1:c3:80:e8:6b:78:37:ff:08:43:08:08:b2:
82:d8:1e:e1:16:fe:1e:3c:82:c2:c7:7c:0e:43:db:
7b:4c:15:0b:3c:ca:cc:1e:f5:55:bd:0e:3f:d6:9f:
4f:64:a0:40:52:4a:96:59:ab:be:95:10:fa:31:71:
b4:0b:1b:20:34:3d:1c:9b:90:ce:f6:db:28:43:2e:
cd:8f:8e:e5:d2:4a:d4:f3:2a:bb:86:ba:f1:22:de:
67:6a:d9:be:b5:bc:fa:36:34:24:63:17:b3:89:bf:
f5:8d:ce:34:2e:36:5e:e1:9e:bb:ce:05:5b:d1:5f:
ca:a6:01:f3:ee:75:c2:0c:4a:6b:d8:99:34:98:11:
e4:a6:64:6a:f0:64:82:43:d4:98:60:30:a1:5e:ca:
ae:e2:b8:d9:76:be:e5:75:1f:9b:8e:1c:f9:bc:dc:
02:15:90:5b:55:c8:79:f8:0f:94:2e:25:ba:33:0f:
37:13:39:bd:67:63:0d:04:cf:0a:31:0a:b7:14:40:
aa:d4:4b:5a:fa:2f:59:b2:74:53:4b:72:0a:71:12:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:4C:A2:A1:7B:93:18:39:BE:26:03:E4:3A:93:C1:C7:7B:25:09
X509v3 Authority Key Identifier:
keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.75.116.0/24
Signature Algorithm: sha256WithRSAEncryption
af:dd:bc:12:ed:60:b5:bd:2d:c2:3a:7d:90:1e:ee:e4:ea:53:
22:42:2b:3f:bd:3b:0e:ea:6e:15:b6:6e:38:ff:90:cb:2c:e7:
62:b2:7a:ce:e8:5d:48:91:35:2a:cc:04:e2:32:48:79:af:84:
60:bf:c8:d0:9e:dc:22:4a:0e:c9:62:f6:8d:0c:5a:d7:fb:79:
d3:1f:c7:73:35:c4:ec:82:a4:4e:f1:89:60:34:50:47:e8:87:
23:ce:9c:d6:79:4b:df:26:34:cc:1c:ce:39:4b:59:69:a6:40:
59:df:61:f6:14:ab:6b:73:03:ab:d9:95:4a:31:e2:46:11:6b:
73:cc:f3:84:3f:0e:5b:8d:8e:90:83:0c:15:1a:93:d7:d8:c3:
be:c9:65:f3:2a:d1:39:8d:ec:14:60:be:d1:39:a4:87:0e:cf:
38:56:bf:6b:f5:73:59:1f:ec:17:4f:e2:5e:17:a4:6d:d7:f0:
22:e2:81:a5:eb:39:43:db:a2:31:08:12:93:35:61:f4:f2:22:
3f:87:49:45:2c:f6:3f:60:25:7f:52:28:7f:2d:32:bf:70:5f:
5e:61:74:95:c7:59:11:3e:62:3b:e1:5a:bf:c7:93:e3:a3:36:
dd:39:ba:06:83:b3:2e:47:8a:80:b2:91:40:73:d0:6f:a1:18:
c8:0b:af:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:56 2026 by rpki-client