
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
File: E4AAD78CEFFE11E991390613C4F9AE02.roa (raw, json)
Hash identifier: NpwlTwI8Xm9ihx5f2AI8RzaFuXlf3KaqQ3R0nM1i1CE=
Subject key identifier: E0:19:A1:56:66:67:74:10:0F:14:16:CD:07:26:63:83:3C:68:8B:0D
Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Certificate serial: 0E68
Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:37:22 +0000
ROA not before: Thu 14 Aug 2025 18:27:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 137974
IP address blocks: 103.119.68.0/22 maxlen: 24
2403:3fc0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:38:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02
Validity
Not Before: Aug 14 18:27:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a424f2-ce9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6c:d4:92:dc:73:9d:df:b2:41:ac:f1:ee:65:
58:ed:30:6d:0d:b1:80:6a:fc:2a:a2:8a:4f:02:c7:
ba:f1:3f:ea:41:eb:1d:9b:de:bf:75:31:c4:e1:9b:
0f:f1:f9:07:ea:62:34:36:ee:8d:21:6d:ae:30:03:
4c:b9:ab:92:9d:47:80:3e:96:a9:ad:d6:67:47:77:
09:dd:eb:66:65:0f:10:3b:48:c9:5e:41:b1:c2:7a:
86:77:b8:29:48:38:3b:e2:eb:0b:2c:82:6b:9c:b0:
b3:e6:26:63:f3:3d:13:2e:4d:53:4a:75:71:2b:7c:
5d:71:c8:9f:d3:c7:0f:58:35:98:b1:d1:d0:be:49:
1b:f0:98:02:81:6f:34:78:45:22:fb:20:69:33:06:
6b:73:d5:f3:8b:3e:15:04:49:98:f5:6d:9d:5d:7b:
6c:47:0a:30:47:d3:ba:03:b4:4b:30:2b:4d:d4:08:
c4:45:0e:03:5e:6f:75:7a:aa:02:f5:c5:84:0f:8f:
61:33:30:9b:05:87:c7:dd:f0:33:b7:71:5d:87:51:
2e:ab:d0:ad:a3:2e:14:29:0c:45:8d:3f:04:39:84:
c8:d4:53:42:53:dd:7f:f2:22:9d:03:9f:0f:37:0f:
11:e7:7a:4d:42:c5:9f:1a:6b:64:2c:8f:d7:f9:58:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:19:A1:56:66:67:74:10:0F:14:16:CD:07:26:63:83:3C:68:8B:0D
X509v3 Authority Key Identifier:
keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/E4AAD78CEFFE11E991390613C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.119.68.0/22
IPv6:
2403:3fc0::/32
Signature Algorithm: sha256WithRSAEncryption
50:65:50:a0:9d:d3:1e:ac:a9:5e:6c:55:bc:18:fb:bb:1a:00:
2e:a3:df:f0:0e:10:8d:81:12:87:6e:61:b9:f3:22:0a:5e:0c:
92:00:ea:22:b0:1a:9b:ce:a6:41:39:8a:0f:fd:d9:c2:55:06:
46:10:a0:af:af:6c:56:b1:d7:5a:c1:d8:66:b1:44:e4:c7:d5:
29:49:3f:3f:a5:e8:71:8e:c6:a2:ab:29:b9:0f:6b:3c:1b:f1:
ad:14:e0:e7:2a:ca:92:e4:50:e9:85:48:02:4a:3b:43:22:58:
58:63:5f:97:f2:97:d8:dc:04:39:3b:6c:20:36:de:68:7e:65:
13:21:8f:8f:bd:d0:ca:f4:32:f7:a0:c4:c8:75:e0:3e:20:89:
30:49:b5:51:9a:d8:50:eb:50:b4:85:e9:0d:69:9d:b2:bc:bd:
0b:40:d0:e4:ac:01:b2:4d:75:18:0c:4d:ed:35:5f:25:54:6e:
c5:b4:5c:46:ec:4a:1c:88:8a:dd:16:3b:8a:67:71:10:d1:9d:
04:9d:fb:24:fe:c3:83:2a:b4:7a:61:b9:42:1c:af:94:cc:0f:
4c:97:3d:d5:bc:e1:12:99:00:3e:f0:98:c0:7d:ed:79:c1:b4:
cf:69:86:82:fc:ec:5e:5b:05:b0:f8:34:6d:16:43:3b:fc:47:
38:b7:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:48 2026 by rpki-client