
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7CA73BD4F7E111F09133AC30656F56BC.roa
File: 7CA73BD4F7E111F09133AC30656F56BC.roa (raw, json)
Hash identifier: HlxafeH6AEoPG1Yfys0LpexPN/SeOrkSK9h73IAvSQ8=
Subject key identifier: 85:93:AC:48:BD:48:63:61:9D:2D:3F:F5:B0:CE:A8:F7:83:F1:32:03
Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Certificate serial: 042F
Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7CA73BD4F7E111F09133AC30656F56BC.roa
Signing time: Mon 23 Feb 2026 00:20:57 +0000
ROA not before: Mon 23 Feb 2026 00:20:57 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137897
IP address blocks: 103.182.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1071 (0x42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A
Validity
Not Before: Feb 23 00:20:57 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=699b9d69-933e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:d3:9c:7c:89:3e:78:6a:7f:b4:a7:da:e5:
d7:03:55:a0:d5:50:67:00:34:8c:dd:11:63:74:81:
13:3f:92:66:be:e1:cc:5a:6b:37:43:c8:61:2f:37:
54:6a:b0:18:14:ad:56:38:e5:78:d0:2f:8a:ab:f1:
c1:ad:d5:f1:d4:bc:c7:28:33:d9:ca:49:3a:95:7f:
62:07:ba:b7:96:ee:8b:dd:9e:3c:28:48:44:f2:3b:
29:27:1e:ad:d5:f4:64:82:7e:fd:92:05:3f:9c:e2:
11:10:24:42:0f:5c:43:e5:88:c2:a6:0e:20:54:6e:
95:d1:2f:c0:93:c4:8a:ba:9b:17:4c:c7:dd:01:76:
e1:e5:7d:c7:09:3d:5a:60:86:08:0d:c2:82:c5:ef:
51:b4:db:19:b3:92:d3:4c:b9:8a:2d:d9:c7:cf:43:
c8:5f:92:69:99:be:87:33:2f:03:a5:c8:6b:3a:66:
df:e5:19:a2:3e:a8:f6:d7:fa:7b:72:6e:1b:c8:ef:
a1:ab:e9:1b:02:4d:ad:c9:07:64:08:e2:da:74:70:
67:9e:88:05:7c:1a:ec:ed:d4:e8:db:ef:05:c2:c6:
29:78:b9:87:ba:80:3c:eb:85:c4:32:95:73:75:65:
2d:58:28:96:ed:49:8b:e8:de:0f:92:ec:b2:9a:c5:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:93:AC:48:BD:48:63:61:9D:2D:3F:F5:B0:CE:A8:F7:83:F1:32:03
X509v3 Authority Key Identifier:
keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/7CA73BD4F7E111F09133AC30656F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.96.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:d6:fa:10:1b:f0:ce:25:02:81:31:9e:4c:a2:e1:2d:64:5c:
df:d3:28:79:02:ce:6d:4d:df:11:8b:d0:8c:69:c2:e1:c7:fd:
d1:12:96:3a:ca:cf:9d:46:0f:35:6e:cb:86:70:70:c5:45:92:
14:bc:55:a2:31:c7:81:55:e7:06:98:de:71:66:a9:4f:90:c1:
15:91:1e:4a:bb:1f:45:87:a8:c0:78:d3:b8:48:d9:5d:a9:d3:
e6:24:3a:b4:6e:01:a0:d8:74:3d:df:a4:c8:39:11:de:6b:f3:
5f:df:fb:3e:bb:61:30:8f:6a:87:8f:90:15:5e:5f:e8:eb:bc:
27:c7:2b:89:a8:62:ba:72:de:4e:bc:5e:ed:b2:8d:44:10:88:
a7:14:9e:11:d2:d2:a8:27:53:91:ea:93:91:32:b9:88:db:6e:
88:26:a4:59:f6:03:3a:fb:5a:b4:cb:5a:1e:c5:ce:0e:cf:aa:
ca:36:4f:94:1b:36:f9:a3:08:b0:da:e9:10:21:5d:15:ba:4b:
1e:c5:2c:f6:7b:6d:d1:98:f6:10:d5:b6:72:72:eb:70:0e:50:
3f:4d:e3:22:5e:d4:cb:65:c4:18:a9:c4:31:30:6d:ab:40:d5:
85:43:b0:d5:95:6f:35:90:62:c9:c6:9d:e5:5c:5e:c3:ea:c3:
55:f0:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:25 2026 by rpki-client