
$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
File: ADBB651E043411ED9F02B325C4F9AE02.roa (raw, json)
Hash identifier: I+A6jU5dzLuzTjRDJLWlUAhXYmfB0fXHWslyFxviwpw=
Subject key identifier: 60:A4:78:1B:0E:15:56:B1:64:4B:8F:C3:6B:01:E2:1F:20:40:DA:1B
Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial: 0434
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:03:10 +0000
ROA not before: Sun 01 Mar 2026 01:22:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142403
IP address blocks: 103.146.158.0/24 maxlen: 24
103.146.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076 (0x434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Validity
Not Before: Mar 1 01:22:27 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4552e-f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:19:2a:77:9a:0b:28:c4:ed:79:cb:a3:8c:
04:f1:90:47:f1:79:31:cc:42:68:3c:61:d0:67:d3:
5b:8e:5a:83:6a:70:84:06:f0:1d:ae:04:c6:3f:52:
73:0d:f4:45:f0:b2:bc:9d:71:e8:dc:ad:27:92:50:
26:be:e8:8c:5d:9a:86:aa:ca:09:5a:a9:9a:ca:0b:
7c:c8:37:b1:e1:85:d9:59:6f:3a:d9:4b:79:c3:8a:
07:3e:29:99:76:40:82:10:f9:0f:7e:45:d3:12:4d:
da:84:b7:e0:c0:90:a6:82:1c:c6:1c:5a:56:49:ac:
34:6c:cb:e4:a7:5f:76:51:2f:20:c7:c7:5a:aa:40:
7a:d6:d4:b7:d0:df:59:76:c9:8f:8e:46:47:c4:26:
de:04:8e:84:97:87:4d:ca:1a:3b:77:78:a5:c7:0e:
a8:c1:8f:d4:e4:0f:5a:89:1a:8d:cd:5f:df:67:ce:
17:ca:b0:7d:bf:01:03:f2:7d:77:53:83:17:91:53:
c6:fc:db:36:12:a1:5d:a5:cd:2f:a5:50:8e:77:4a:
e0:c5:3b:0e:53:a9:d2:e6:83:79:91:f8:d3:d0:95:
8f:61:0b:f9:65:e9:26:3b:a2:35:90:33:cf:bb:71:
a4:63:d0:97:94:e9:b5:25:54:b2:ba:c0:45:9f:6d:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:78:1B:0E:15:56:B1:64:4B:8F:C3:6B:01:E2:1F:20:40:DA:1B
X509v3 Authority Key Identifier:
keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.146.158.0/23
Signature Algorithm: sha256WithRSAEncryption
31:83:17:35:b1:d7:29:63:5a:d3:a8:aa:34:84:39:de:47:bf:
f7:dd:15:33:d2:09:c8:17:c4:ec:29:b8:2b:b3:f9:08:ae:74:
55:47:0a:97:7d:36:be:72:97:71:88:22:c7:68:8e:81:9e:6e:
a3:21:68:4d:57:52:63:51:c4:ad:33:c3:b3:e7:5d:35:b8:bc:
95:1f:e1:36:b2:06:33:8c:68:41:98:34:6a:da:b7:06:9e:48:
2e:22:50:dd:85:f1:91:76:ee:fb:dd:ee:e5:b6:2e:6d:cb:38:
0d:ae:10:78:b6:06:8c:17:28:00:a7:df:92:e0:1c:a4:17:6e:
9c:08:9a:bc:0f:57:7d:87:f2:0f:8d:e0:5a:ee:22:86:c9:d4:
12:80:ea:6d:6a:b8:2f:78:f4:28:c0:b5:fd:e1:e6:cb:b2:15:
9e:51:98:53:50:bd:6e:be:c7:74:ba:46:8c:20:be:5a:15:23:
49:2c:f4:04:a3:be:cc:11:88:da:f7:12:11:3d:00:86:9a:4e:
63:4a:c3:dc:82:16:21:0f:e2:9a:84:61:ca:7b:c6:19:24:56:
d1:48:52:41:2d:75:a6:12:01:44:79:30:8a:ba:02:c3:cc:4e:
6a:a7:2e:96:67:01:51:12:49:d3:d6:e0:ea:f3:e8:c6:62:98:
34:3e:87:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:51:45 2026 by rpki-client