
$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
File: E3D2704667FC11F0AC42A91FC4F9AE02.roa (raw, json)
Hash identifier: ptlT7u2MhuBbu24nscPM+vqHy0ITbmTpmlMUOppZHGo=
Subject key identifier: C5:92:E5:E9:51:BF:71:E4:D4:CD:DC:49:54:47:5C:88:DA:0E:C9:5F
Certificate issuer: /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial: 3573
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:59:58 +0000
ROA not before: Tue 14 Oct 2025 05:07:01 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 151472
IP address blocks: 43.225.205.0/24 maxlen: 24
103.9.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:52:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13683 (0x3573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Validity
Not Before: Oct 14 05:07:01 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47e9e-2143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:84:28:98:cb:ef:71:d4:14:41:66:8d:1f:
30:69:f6:63:b9:7f:30:9f:99:2e:8b:41:56:cd:80:
59:b2:5b:29:2c:9d:cd:1a:c5:a1:3f:d1:ae:1e:5b:
aa:dc:ca:99:0c:78:53:c7:8e:45:04:2a:de:82:87:
e6:d9:66:d8:b1:78:8d:2b:72:0d:02:83:fe:2c:d7:
8e:f4:0d:51:a9:77:de:cf:f5:73:2f:a7:5e:bd:34:
36:93:a5:4d:98:ce:2d:93:1a:be:18:0e:2a:36:72:
43:e8:58:08:93:df:33:26:56:52:93:ba:9d:f1:12:
82:26:56:ec:48:95:7a:ac:7c:1c:de:2c:09:42:8c:
b8:34:0f:bd:8b:50:e6:9c:e1:01:cc:8d:07:fc:3d:
f9:a8:7b:3d:83:04:c2:80:7c:e4:52:91:8c:ce:94:
b8:29:a8:40:ba:c5:16:df:16:e6:02:50:a6:6d:72:
72:da:25:e9:35:99:94:d3:1b:d2:b9:c8:00:22:cf:
9b:5e:71:80:10:42:6c:5e:31:bd:5e:99:f2:96:ec:
7a:8e:1b:2d:d8:17:80:b0:63:36:58:cf:e8:84:b4:
73:3e:96:46:96:7a:d6:05:24:4b:9c:54:a4:75:b8:
12:64:39:4e:16:73:66:f1:8a:e8:a7:58:47:c9:96:
de:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:92:E5:E9:51:BF:71:E4:D4:CD:DC:49:54:47:5C:88:DA:0E:C9:5F
X509v3 Authority Key Identifier:
keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.205.0/24
103.9.105.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7a:23:e4:90:80:19:e7:29:1c:85:97:40:9b:cc:1d:96:68:
53:7e:85:d1:06:1f:9e:9f:b2:0b:67:73:b2:78:54:3d:3a:bc:
a8:95:89:1e:13:0a:59:be:d5:23:24:bc:99:d2:6e:fa:84:62:
89:c4:e1:45:c2:6c:10:49:09:ba:3b:dc:19:06:8d:a0:13:50:
7a:2b:d6:b6:3c:c9:72:bb:82:89:68:91:ff:85:60:6e:d4:7a:
8c:ef:18:b9:80:2d:7b:9c:d2:eb:85:53:a7:b3:3c:16:14:e3:
f6:6f:69:60:fd:51:09:28:ad:4e:97:52:b8:3d:dd:88:bc:87:
62:ce:41:26:4f:25:32:64:2c:3a:86:5d:3a:48:aa:69:59:cc:
8b:72:0b:ae:47:82:2f:da:a9:6e:dc:3c:c1:0b:df:b2:e0:52:
30:24:16:fe:fa:a8:cc:0c:b5:5a:49:5a:65:e2:18:4b:73:21:
3c:79:73:19:36:e6:1f:e1:32:13:7a:59:8a:1c:37:fb:25:8c:
7b:fa:e0:c7:ac:71:82:72:4d:b2:30:f0:86:05:1a:c3:d7:06:
20:87:61:39:1a:3b:ac:d4:ff:99:52:17:c8:d6:8b:7b:34:2a:
6b:52:06:d9:48:10:63:92:9f:39:c9:93:6e:90:a9:eb:14:54:
7e:05:f6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:52 2026 by rpki-client