
$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/22DC230C299311F0B32D9F82C4F9AE02.roa
File: 22DC230C299311F0B32D9F82C4F9AE02.roa (raw, json)
Hash identifier: Q8meJh+l3QvnqqqYOUJJQlzzASdq6o1tO+VcZsCelFk=
Subject key identifier: 59:17:6B:98:C2:36:2F:71:A4:4B:FE:30:55:64:83:BB:27:14:E1:D6
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1EB3
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/22DC230C299311F0B32D9F82C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:58:57 +0000
ROA not before: Tue 18 Nov 2025 16:04:15 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 24440
IP address blocks: 103.76.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7859 (0x1eb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Validity
Not Before: Nov 18 16:04:15 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47051-d260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:ab:63:6c:31:81:76:2c:e7:c8:5a:65:a5:
45:b5:c2:11:e8:cf:55:eb:f9:24:cc:44:79:e4:02:
3c:ac:83:f3:2b:88:5c:58:e3:e5:2b:0d:b2:0a:ce:
41:74:35:12:2c:4d:f4:33:53:af:71:5a:2d:9a:af:
8f:55:5a:ed:d7:83:fe:8d:67:fd:51:56:08:a2:2b:
71:20:01:a4:78:1a:85:12:21:57:ae:4c:83:07:e3:
33:1f:73:f9:50:c7:70:4a:97:e7:65:6c:0b:f1:20:
15:db:00:aa:c9:ee:24:6f:06:25:b1:a2:91:e3:a3:
cb:d5:34:40:b4:a0:50:39:d3:1a:dc:44:5c:a7:59:
d4:43:51:62:c4:17:ac:24:6d:4d:68:82:96:76:6f:
7f:de:8b:5b:26:4d:3f:46:78:7a:d9:b9:a9:83:b0:
46:d6:c0:33:5b:84:ac:6b:f7:f1:75:91:77:02:1d:
fd:35:9f:00:a4:05:5f:a7:b4:db:82:73:47:b6:2d:
d5:33:23:56:ae:1c:5e:08:be:4c:d3:b5:3a:96:c0:
02:1d:f2:5a:d8:78:d2:86:90:20:1a:72:37:2d:bc:
b7:02:28:c5:f5:46:8f:f6:03:f1:60:bd:9f:12:2f:
4c:35:c8:67:5a:fc:44:c6:88:ae:2a:0d:e6:f2:51:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:17:6B:98:C2:36:2F:71:A4:4B:FE:30:55:64:83:BB:27:14:E1:D6
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/22DC230C299311F0B32D9F82C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.76.43.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f2:5a:e4:70:86:97:e4:20:aa:a2:8c:c1:79:77:c9:47:6d:
70:52:e4:64:49:2b:5e:e5:5d:53:af:ff:22:1d:c6:53:94:27:
fa:eb:52:e3:9b:d6:9d:0d:53:52:82:24:98:7a:41:06:e8:b4:
d9:d1:9e:44:d9:81:5d:1d:21:9e:6a:1b:67:77:52:c4:a4:7d:
47:3b:ef:72:a5:2a:74:01:a8:58:ef:57:dd:b7:2d:c9:63:8e:
7f:89:76:e6:38:f4:9f:37:24:20:35:d8:bb:b4:38:09:23:42:
80:94:e3:a5:70:1c:8b:25:2f:39:01:e0:92:14:ec:ae:af:df:
c5:4b:b0:a6:a6:bd:ae:08:3f:4e:34:95:45:9b:9d:e2:36:33:
13:9e:05:58:30:b2:6c:f2:5f:c1:59:4b:40:5a:d3:85:4a:fb:
f7:f9:8a:f6:b5:cf:e4:17:b6:0a:e0:af:c8:a8:f8:68:e4:1a:
37:9d:21:24:ce:8c:eb:aa:1e:a6:0c:9c:a2:96:25:62:a2:f8:
61:9c:ee:b4:01:49:fd:2c:d7:27:33:04:2d:42:13:eb:c3:e9:
96:34:ce:66:34:27:fa:6b:aa:2d:6b:fe:35:fd:88:53:1b:35:
68:a0:c8:61:0d:9c:26:d0:ad:e3:67:c3:63:8b:aa:b6:a6:f0:
f1:c7:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:43 2026 by rpki-client