
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa
File: B9FDAFA436D511F09007A616C4F9AE02.roa (raw, json)
Hash identifier: 14hjxCWDN1Xl0Tkh1WoOKZgmhqThzo7epHMxj3MS5qU=
Subject key identifier: 2D:48:E9:2C:48:7F:B8:11:18:63:40:B1:22:B6:30:36:34:85:1C:6C
Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial: 05E6
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:16:49 +0000
ROA not before: Thu 18 Dec 2025 23:18:57 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55581
IP address blocks: 103.104.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1510 (0x5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Validity
Not Before: Dec 18 23:18:57 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44a50-5804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:8f:ca:a4:13:ff:2d:31:dc:41:0f:0f:cd:
27:d4:5b:99:62:63:a7:f8:38:b2:10:bf:52:1c:6a:
db:56:f7:b1:76:4d:4d:bf:35:48:74:7d:ee:0a:5f:
2c:d1:9c:b1:c9:ff:24:69:3d:05:99:63:01:0a:78:
57:d1:22:5b:09:6f:46:41:f8:cd:17:ba:f8:a2:fa:
20:15:04:3c:03:68:d8:a5:42:ca:b1:1d:a2:42:3e:
4c:de:9e:84:22:71:02:8c:74:51:71:9f:9c:f8:84:
ef:58:0b:cc:af:3d:b7:5b:4f:78:a1:54:39:a8:5f:
0a:54:c1:86:1f:3e:80:44:c0:57:27:66:7c:b8:52:
1f:e7:93:a6:4e:cb:18:9c:7c:11:6b:4a:48:03:42:
5c:49:bb:f2:a3:40:27:f8:00:99:b6:7f:34:0d:0f:
5c:cf:f6:92:61:b4:3e:03:42:24:7d:09:73:b7:3c:
44:68:42:ca:33:81:db:85:b2:20:1a:6c:80:68:a8:
a7:39:ed:3f:1b:fa:69:b2:05:a2:d5:1a:a6:66:c4:
76:0e:e1:ec:3a:07:fc:1f:bf:fe:f4:ef:99:98:55:
a2:87:b0:99:4b:40:75:a3:db:ee:c5:02:31:79:f0:
dd:ec:84:29:bd:af:8e:f1:fd:a8:14:5d:22:1b:e4:
88:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:48:E9:2C:48:7F:B8:11:18:63:40:B1:22:B6:30:36:34:85:1C:6C
X509v3 Authority Key Identifier:
keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/B9FDAFA436D511F09007A616C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.104.236.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:a7:db:c6:f5:8e:a7:94:6a:1b:48:15:20:82:1f:83:0b:5f:
0d:ac:bd:37:07:6d:07:f9:bf:15:e2:69:40:4d:6b:39:f2:1b:
5d:b0:c9:14:7b:30:c0:1d:de:69:20:c1:64:b9:f3:ab:5d:11:
24:d8:eb:e2:4c:11:84:99:e3:23:72:a4:3e:5b:6c:ee:c1:a6:
12:bd:4d:55:54:9a:ea:ba:2f:21:74:eb:60:ea:c1:0e:02:c3:
25:a4:1c:cc:a1:96:8a:01:1f:96:c3:dc:cd:f9:0a:5f:ed:a5:
aa:67:5c:32:02:e0:fb:3f:e7:6a:eb:66:62:a3:50:5d:28:de:
43:a5:09:2c:5f:1b:97:09:63:3c:67:31:69:d4:62:28:04:ed:
ac:c0:a5:ab:d7:d3:7a:bd:1b:ab:33:3a:d7:19:4b:7c:d7:71:
db:09:b0:43:3d:db:e9:56:52:c4:34:78:a5:82:b2:44:a4:d0:
0f:3f:f5:85:52:ae:66:71:a6:77:c9:38:bb:e8:cd:f3:9a:55:
5f:50:ec:be:dc:f7:b0:1f:47:19:97:42:19:7a:0f:52:f0:67:
9f:d2:71:38:6b:3d:9a:25:36:e1:13:23:18:b1:03:c3:81:91:
01:a9:78:f7:ca:42:bc:35:0b:8a:5f:31:8d:77:29:c1:ab:24:
5e:c5:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:55:41 2026 by rpki-client