
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/A2AF0622853711EFA09C892EC4F9AE02.roa
File: A2AF0622853711EFA09C892EC4F9AE02.roa (raw, json)
Hash identifier: OLS2n2bCipeK2cJAKKmNcGHacmpb1F1CGfou3xcKoRw=
Subject key identifier: E8:12:22:BA:D3:A7:FB:8B:08:84:44:69:79:8B:05:7C:89:2B:AA:41
Certificate issuer: /CN=A9168BA2/serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Certificate serial: 0B77
Authority key identifier: CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/A2AF0622853711EFA09C892EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:30:30 +0000
ROA not before: Tue 04 Nov 2025 19:38:28 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 13335
IP address blocks: 103.143.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl
rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2935 (0xb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168BA2, serialNumber=CA62E438F98D8518D2F2A5D9F6765651E5ADA60E
Validity
Not Before: Nov 4 19:38:28 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a469a5-d74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:9d:f3:6c:fd:40:08:df:4f:7b:30:aa:03:
63:c9:2b:c8:f8:da:ee:f9:b6:10:b7:b2:84:40:41:
3c:f1:7d:60:59:83:a6:98:82:55:c2:62:63:ee:c6:
71:31:1b:d4:16:e4:26:21:97:51:e2:1f:e2:5e:d6:
5b:77:3a:5c:0c:f6:c0:c4:fa:13:d6:f4:02:1a:40:
4f:b2:e4:a7:98:04:a2:cd:6e:ce:90:f8:46:31:8f:
88:77:d9:ec:1b:cf:6a:de:eb:b3:a3:2c:fa:cd:e2:
1e:2e:2c:50:19:61:f5:85:91:28:d2:b3:a8:ba:c3:
14:0c:79:bc:ba:e1:3e:cb:d1:7a:42:49:bf:8f:e7:
6c:1f:f7:a1:58:3a:7b:1f:74:da:51:ac:fc:45:dc:
5c:b3:23:a3:43:f9:67:95:f7:74:41:df:35:5b:e3:
ee:17:e7:43:de:94:e1:cd:64:18:c7:97:7e:47:9c:
50:1c:d9:17:29:50:1c:3f:10:28:a7:3d:25:f7:59:
9e:e3:ce:92:9a:64:0d:01:ba:b8:25:2d:9e:5d:35:
50:42:43:d8:13:60:fe:aa:e5:da:1f:ea:1b:d9:bd:
73:b7:19:26:5e:48:d9:17:59:ed:a2:36:00:4d:13:
1c:bf:e3:21:65:9a:8f:42:a4:93:43:6c:9f:d9:05:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:12:22:BA:D3:A7:FB:8B:08:84:44:69:79:8B:05:7C:89:2B:AA:41
X509v3 Authority Key Identifier:
keyid:CA:62:E4:38:F9:8D:85:18:D2:F2:A5:D9:F6:76:56:51:E5:AD:A6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ymLkOPmNhRjS8qXZ9nZWUeWtpg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168BA2/99DF386254C411EA84F4E72DC4F9AE02/A2AF0622853711EFA09C892EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.32.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:75:86:72:00:c7:cf:33:59:42:e0:3a:dd:c7:18:91:01:28:
5a:91:3a:ef:1c:56:a1:eb:79:40:56:1e:27:a3:74:d7:42:6c:
f0:29:d7:22:b2:70:1e:76:ab:98:e2:00:87:f4:51:27:9f:2a:
d1:7f:b9:ff:13:f0:0d:d1:a9:02:ac:72:38:a7:5d:fa:c5:a5:
ac:47:3f:e2:b9:8c:1b:0a:4b:e8:4b:2f:d2:a3:8e:34:c0:b1:
ec:f8:84:a8:0e:95:db:69:c7:79:d9:3a:ef:52:8b:f2:a4:42:
98:ea:0c:00:60:b8:70:6b:35:6c:23:27:72:81:da:d5:0d:cf:
37:b5:b9:b6:1e:2b:5f:92:af:f8:ac:94:fe:ec:a5:3d:d7:ff:
0f:ec:a9:d5:fc:dd:8f:7c:83:33:ca:b8:a2:a2:ee:d9:bb:99:
4c:d4:3c:fb:a5:03:a3:34:16:d2:41:2c:bd:a6:21:3d:25:7c:
d7:0c:cf:d3:43:e0:4f:05:43:98:44:f1:a7:f2:82:53:fe:10:
60:2a:f5:74:f9:dd:94:d4:9c:2a:6d:2c:68:6a:4e:7b:be:7c:
44:89:15:bd:56:99:15:2c:3a:38:1c:f6:08:36:31:00:c9:b4:
1d:8d:b3:c6:97:14:47:7b:59:1a:3b:65:ef:a6:0f:8b:02:4b:
13:5c:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:52 2026 by rpki-client