
$ rpki-client -vvf rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa
File: C08B23401DA511EBAD78BB46C4F9AE02.roa (raw, json)
Hash identifier: VzHmzT9qEOc8jaNdnRrhA4Hy1ZCyxxdz/VTcSRfJzdM=
Subject key identifier: 8B:BC:12:90:D5:32:EC:93:2C:8D:E3:AD:C5:C4:08:6B:90:03:0D:89
Certificate issuer: /CN=A912675B/serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Certificate serial: 0808
Authority key identifier: E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:52:57 +0000
ROA not before: Tue 20 May 2025 21:50:21 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 139027
IP address blocks: 103.138.168.0/22 maxlen: 24
2404:d1c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912675B, serialNumber=E2665EE362E5CC58F7D67F4A6B7621AA460BD38E
Validity
Not Before: May 20 21:50:21 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a452c9-ea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:55:3c:11:aa:06:e0:12:24:ec:e7:88:32:
95:7f:09:6d:0d:77:61:e7:40:33:15:87:23:1f:cc:
cd:85:48:b8:5f:d3:c1:9a:2d:7c:f9:18:4e:3a:86:
25:c0:40:20:72:11:8a:be:2b:9c:1c:1b:df:15:50:
d5:ca:01:22:a2:af:ff:d6:6a:10:3b:80:71:8b:1b:
ac:34:46:c3:73:3a:00:75:12:bc:34:0d:76:bf:bf:
40:6d:63:e2:b7:08:27:51:52:7e:29:f0:37:91:a0:
1e:c5:f6:48:7f:d1:cc:f3:c3:0f:51:8b:1f:1b:c7:
81:9a:41:e6:3f:84:4e:51:80:f5:24:b4:fa:ae:ae:
03:a9:b4:eb:f0:87:8a:d9:13:c2:e2:f1:7b:f1:ed:
c2:b3:53:39:86:98:57:51:c9:8b:d2:24:0d:39:0e:
b0:72:52:4e:2f:93:39:d8:72:4d:17:37:21:e6:82:
c0:29:4c:2d:ca:8c:9e:a7:e8:bf:1b:bb:97:19:99:
bf:ec:3d:72:08:1a:03:3b:43:86:15:b1:bc:fe:92:
0f:d8:61:d1:68:bc:9c:98:9d:3f:eb:72:7d:96:b5:
90:94:27:30:27:f9:23:1d:56:29:d0:56:0f:e1:ad:
d4:0e:8a:af:85:6d:01:e2:aa:7b:86:d7:e7:df:3d:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BC:12:90:D5:32:EC:93:2C:8D:E3:AD:C5:C4:08:6B:90:03:0D:89
X509v3 Authority Key Identifier:
keyid:E2:66:5E:E3:62:E5:CC:58:F7:D6:7F:4A:6B:76:21:AA:46:0B:D3:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/4mZe42LlzFj31n9Ka3YhqkYL044.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mZe42LlzFj31n9Ka3YhqkYL044.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912675B/56769A301DA411EBB4163A45C4F9AE02/C08B23401DA511EBAD78BB46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.168.0/22
IPv6:
2404:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
22:5b:34:68:25:75:91:da:20:d9:e6:b3:58:2b:91:7e:84:65:
e3:3b:d6:4f:dd:7c:14:8b:21:30:7d:57:14:17:9e:86:e7:57:
49:cf:b0:24:e8:12:3d:84:6a:fd:bc:26:28:51:d8:11:38:b5:
77:51:6d:45:39:cd:77:6c:a2:bc:5e:fe:a5:eb:90:b6:ee:35:
76:a3:4c:8f:1d:61:f6:7e:12:d6:d8:91:e2:80:05:0b:43:53:
3a:ba:cb:09:f9:de:52:4b:56:a7:0a:20:60:c3:b8:38:39:54:
6f:e8:a8:6a:50:a5:7b:e4:cf:78:10:d3:06:ce:39:aa:57:f4:
ab:3a:85:ea:2b:d3:3f:3a:2b:79:77:87:a2:e7:b6:51:01:1f:
28:7c:8c:6d:51:78:aa:b1:1a:59:1b:78:7f:44:d3:c4:e5:95:
39:44:56:97:19:f1:3f:96:19:67:8f:63:17:b4:89:bf:58:5a:
1d:79:1f:cd:ef:d1:3b:97:d2:3c:07:0c:a1:1f:29:e6:dc:d7:
85:9b:da:34:2e:67:b0:f1:d0:f3:22:62:a2:53:52:e3:02:8e:
96:cd:bf:6d:91:dd:1e:32:b2:3b:a3:ec:ff:06:60:04:0b:54:
33:eb:49:74:91:2d:a5:44:42:2e:01:2f:42:7e:41:e4:dd:f6:
43:69:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:14 2026 by rpki-client