
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa
File: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (raw, json)
Hash identifier: 1GModq8GVTp3VBZ+WmjSYkW1Bqq/2XyaBR4joVrXKaM=
Subject key identifier: 11:5D:F1:42:91:55:F1:F6:9A:59:A8:06:BE:59:54:30:D0:FC:AF:CA
Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Certificate serial: 087B
Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:09:30 +0000
ROA not before: Fri 18 Jul 2025 21:32:08 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132890
IP address blocks: 103.27.104.0/22 maxlen: 24
113.52.148.0/22 maxlen: 24
2407:5f00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl
rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2171 (0x87b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433
Validity
Not Before: Jul 18 21:32:08 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a5a82a-4728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:66:a2:2d:0f:fc:26:9f:0e:9c:5e:cc:cb:
a5:b4:da:26:4a:9c:0f:74:68:f4:1a:d8:d2:4c:54:
ba:18:dd:bd:31:a8:22:22:2e:aa:2b:d3:a5:fb:ef:
37:12:5c:7c:b2:bc:2d:9a:12:ca:60:e3:54:31:77:
4b:69:0b:ca:ba:83:ea:47:7d:95:dd:15:4d:3f:0e:
a9:f2:14:2b:3a:98:05:b0:64:ed:a9:e0:1d:10:d0:
0e:02:21:af:36:3e:99:83:64:90:85:f9:c3:c5:3a:
41:ac:24:8a:c6:48:af:35:55:9a:a4:74:a7:05:ff:
75:6c:c2:9c:9b:4a:be:92:f0:df:a9:c9:89:f3:2f:
6d:d7:4a:71:0e:07:99:9a:35:63:15:9c:29:72:bd:
b1:6e:82:c5:19:73:d3:eb:75:da:f3:c4:0f:6e:75:
78:80:96:b5:88:17:fa:43:90:b0:94:a9:06:73:98:
ca:16:3b:14:8f:11:9b:b7:09:38:0c:c1:f6:47:64:
94:a7:55:21:5e:1c:00:3a:b3:6a:a3:8c:44:5f:8e:
6f:e3:a4:6b:2f:78:53:ec:b0:c4:85:d2:41:07:31:
64:e6:b5:4f:37:7f:62:4f:c8:a5:a4:38:93:57:e8:
78:a0:a9:24:d7:be:03:9b:66:20:9e:65:3d:5b:60:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5D:F1:42:91:55:F1:F6:9A:59:A8:06:BE:59:54:30:D0:FC:AF:CA
X509v3 Authority Key Identifier:
keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/12A47D4E9CDB11EF857FB626C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.27.104.0/22
113.52.148.0/22
IPv6:
2407:5f00::/32
Signature Algorithm: sha256WithRSAEncryption
dc:76:c1:33:3e:4c:72:99:86:d3:85:a8:1e:b1:aa:7c:45:cc:
18:80:e1:3d:e1:29:9d:6f:03:25:36:eb:bb:d5:a9:31:40:c6:
3a:0f:2d:24:9e:2f:bf:f5:4f:71:b4:bb:33:80:62:26:e1:c8:
5f:a4:5b:da:15:ec:5f:2e:cb:e6:c2:95:e3:fb:db:46:46:1c:
3c:59:d8:93:fb:9c:ef:ac:a5:ee:1a:0b:19:2c:9c:97:07:a6:
10:be:f8:eb:63:d6:c6:ea:e9:36:35:cc:25:13:fe:b7:18:2a:
60:91:04:9c:83:70:6e:a9:bb:9e:5a:c0:a2:f3:2a:24:30:8e:
1f:d6:de:4b:00:c8:cb:6a:e5:e0:34:ca:16:cd:57:d0:46:18:
b2:49:fd:09:90:e0:a4:4e:4d:5d:60:01:d1:11:e8:ab:e1:52:
21:d6:48:6a:b3:ef:ff:28:9e:1b:28:1a:1d:da:18:c2:e5:94:
35:ac:7a:83:f6:f4:9d:c5:89:62:4f:ee:e6:45:90:5e:af:7d:
09:37:ea:35:96:a2:88:0c:7a:a7:56:b4:0c:28:11:c8:54:01:
7e:f9:20:c1:6e:ef:14:0f:aa:8b:21:a0:92:f0:e6:73:9c:0f:
ff:08:75:93:6a:bb:fa:4b:be:49:b6:b7:f2:f8:a5:09:be:77:
75:0f:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:32 2026 by rpki-client