
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa
File: B3677C08D2AA11F0850BC856C4F9AE02.roa (raw, json)
Hash identifier: 0XvamhyH8INrFu62hoTA3sr2g5V8xYOOdXcsdLQK1l8=
Subject key identifier: 42:3A:6B:1A:C0:50:84:C4:E2:A3:C6:0A:2B:FE:31:7A:94:2C:1D:DF
Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial: 01E0
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:19:08 +0000
ROA not before: Sat 06 Dec 2025 13:51:45 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151786
IP address blocks: 103.72.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:37:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 480 (0x1e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Validity
Not Before: Dec 6 13:51:45 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a458ec-df75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:e3:c9:7a:ed:34:3c:30:46:01:1b:b3:7f:
ba:54:b0:b4:9a:79:b3:d2:34:c1:6f:4d:41:42:19:
5e:80:c1:b7:52:09:90:b9:b3:52:e7:2b:6e:74:a3:
81:75:5c:f1:c7:5f:05:9d:51:ff:1c:e6:97:73:c9:
07:f1:8a:4b:ec:55:37:60:c8:a5:c3:54:74:f5:0c:
1b:d9:76:f5:7d:cf:8f:aa:c7:53:ae:5c:d4:44:73:
fd:c5:fc:70:fe:15:c1:d5:68:01:ca:6d:2e:5b:70:
f9:b9:e9:94:e3:c8:e3:47:a0:3c:6c:6e:d9:65:8d:
b8:88:04:d9:bc:c4:48:91:d5:96:72:00:d2:bb:f8:
cc:ef:f2:a3:86:47:d5:36:7c:d5:bd:44:5f:c3:13:
b2:c1:8d:7f:13:a6:ad:96:75:de:0b:a4:86:fa:3b:
63:6b:d2:b0:f0:5b:f2:ca:8d:69:c7:3f:7e:59:40:
4b:7a:0f:43:f4:9f:95:40:04:69:9a:02:3e:71:c3:
b2:0b:4d:5b:ae:7c:d8:76:c2:6e:e9:4c:0a:3b:b3:
c8:90:39:97:b2:01:95:fe:12:96:53:9c:29:0a:42:
7c:cf:75:a9:33:7a:43:7e:de:82:ae:8d:1c:0b:63:
d3:da:47:69:51:54:83:e8:d6:b1:14:83:43:49:30:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3A:6B:1A:C0:50:84:C4:E2:A3:C6:0A:2B:FE:31:7A:94:2C:1D:DF
X509v3 Authority Key Identifier:
keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/B3677C08D2AA11F0850BC856C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.72.65.0/24
Signature Algorithm: sha256WithRSAEncryption
51:af:40:12:89:c1:e2:30:e8:ba:68:5c:89:3e:73:b2:d3:1d:
a5:c6:5a:2b:7b:29:2d:22:e9:be:0d:34:2c:6c:30:e2:fb:7b:
df:8a:30:92:ce:23:ff:07:93:7f:29:9d:0b:66:7e:a3:b1:c1:
fc:12:a7:96:c0:87:37:5f:44:74:c1:29:5a:37:ca:ca:f1:ec:
0d:16:8a:46:b5:ff:49:28:44:2e:9f:7e:2f:93:cb:cd:6d:50:
01:8e:77:f4:7f:64:5f:a1:d5:ca:96:4f:0e:ff:3c:af:31:d1:
64:08:35:32:25:25:59:c7:79:64:65:83:b5:4b:51:20:51:ce:
c9:4c:d8:26:79:53:84:6c:7c:87:73:65:1e:c0:bd:41:5f:d8:
aa:ff:26:d8:1b:87:6a:16:0d:c7:31:74:83:fc:2d:07:17:00:
da:da:0c:0d:0f:52:61:82:6b:c3:92:81:d7:44:34:51:77:10:
8b:bf:22:c6:48:5c:54:d9:cf:ee:d1:41:5f:d0:f6:e4:2b:e1:
f1:c2:aa:42:e4:19:66:b0:36:0c:30:82:60:2c:ff:cd:ce:99:
03:a9:99:9a:0c:b6:f7:95:e0:2c:2f:dc:e4:c4:83:ec:ce:0a:
1a:17:58:dc:fc:10:87:90:0b:fa:6d:ce:a5:08:ab:bc:aa:04:
1f:c3:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:59 2026 by rpki-client