
$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa
File: C08B23401DA511EBAD78BB46C4F9AE02.roa (raw, json)
Hash identifier: 6dxQbscKD9BpisiGIvmhEruYks1OCWVGKkbkjxYZYu0=
Subject key identifier: E9:0D:25:AF:E5:F1:9E:A5:AF:5E:40:5A:D4:17:E0:42:D5:97:13:DC
Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial: 0827
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa
Signing time: Thu 16 Apr 2026 21:26:56 +0000
ROA not before: Thu 16 Apr 2026 21:26:56 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 139027
IP address blocks: 103.138.168.0/22 maxlen: 24
2404:d1c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Validity
Not Before: Apr 16 21:26:56 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69e15420-f661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:e1:2b:c7:cf:79:4d:14:4e:39:75:33:54:
97:7e:a3:0a:4a:5b:fa:b4:b1:ad:da:c6:52:fd:9e:
21:e6:6c:1f:a4:6a:f0:f8:12:91:ab:42:6d:8e:cd:
f8:95:fb:cd:fb:35:af:d3:af:2b:89:0a:70:08:c1:
d0:b8:ea:42:bc:68:03:05:6c:d8:6f:0c:90:d8:3d:
3e:a8:1c:21:b3:03:50:24:f0:90:a7:63:c5:e1:fa:
a1:ec:34:7e:69:29:3c:90:8b:28:0f:8a:3c:26:3e:
bf:77:c3:85:69:e7:e4:20:7d:de:38:f5:b3:7f:c8:
75:55:4f:d2:c1:54:93:4a:50:a1:76:06:81:fc:14:
ca:f4:74:f6:dc:4b:25:cd:2d:5a:f3:6c:fa:db:f9:
3a:ab:5e:ce:46:f6:27:18:ad:cf:35:63:5c:11:ad:
19:ec:2a:ef:6a:06:db:76:9d:12:e1:d2:e6:ce:ed:
a8:89:0d:af:9a:3f:fb:51:e4:f0:f3:39:d7:85:1b:
02:bc:cc:47:26:9d:c6:d8:52:d3:36:bd:45:c6:b9:
93:c8:3a:7c:96:dd:f5:3a:6e:1f:c3:93:d9:29:7b:
83:63:24:f1:0a:13:eb:1a:14:0a:22:e3:41:4a:e3:
7f:37:0b:7b:5a:ba:33:09:c5:b5:f0:c4:32:6d:2e:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0D:25:AF:E5:F1:9E:A5:AF:5E:40:5A:D4:17:E0:42:D5:97:13:DC
X509v3 Authority Key Identifier:
keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.168.0/22
IPv6:
2404:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
64:85:00:fc:c5:6a:be:e2:5f:d0:a8:14:46:42:83:cd:f7:0f:
63:cc:d1:55:06:3f:55:e8:42:ed:01:de:73:e3:7a:59:0a:2f:
76:82:eb:37:b2:98:4f:ef:58:4d:09:9c:2f:29:4a:c3:96:e5:
7d:87:21:a3:e6:82:4f:5d:b5:f4:cc:ea:b7:47:53:d1:c3:63:
75:8a:e5:32:a4:d4:3e:b5:95:af:45:19:4b:71:4c:d0:71:3a:
a0:6f:97:64:5f:29:43:05:27:60:07:24:94:e2:d5:75:8a:3d:
42:a7:83:c2:8a:6a:69:54:4d:a2:2b:49:9f:c7:e5:cc:ce:28:
5d:14:0f:84:24:9f:98:02:8c:39:c9:d5:1f:0a:3f:71:02:2b:
1d:b0:38:27:82:6b:32:e5:fd:8f:5a:0a:98:2f:16:f9:78:3b:
32:e7:99:cc:1d:a4:21:99:f8:ee:c6:61:a4:3d:e6:ca:85:23:
97:61:1c:b8:25:79:e9:a1:c4:67:e6:42:46:1a:9f:ad:3c:8b:
39:f5:05:6e:5d:48:4f:75:d8:2c:82:93:ad:e3:f0:ec:a5:b2:
a2:2c:93:ad:1e:74:9e:b7:a2:70:ed:46:f9:89:f5:28:1c:83:
ba:68:eb:41:1d:1a:76:de:d8:b5:54:92:39:fb:8d:ff:60:ab:
a9:78:26:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:28:48 2026 by rpki-client