
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa
File: 4D962E8AE65111ED90E5833EC4F9AE02.roa (raw, json)
Hash identifier: adDAibF9dnse3Md/ES6xNcP7fQ3Toio7LT0OLgV2wvE=
Subject key identifier: 41:63:7B:CD:18:B5:1B:D4:5C:3C:38:A7:9D:39:31:20:67:02:1C:76
Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Certificate serial: 0219
Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:34:51 +0000
ROA not before: Fri 11 Apr 2025 03:08:30 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 151204
IP address blocks: 103.69.94.0/23 maxlen: 24
2001:df2:57c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Validity
Not Before: Apr 11 03:08:30 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3de0b-fda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:32:0d:76:9e:28:e3:93:34:e1:8e:f7:ad:
d5:f4:28:42:a4:2f:ce:33:c8:ed:4c:01:33:03:5f:
48:8e:46:ba:63:8c:3e:96:1c:4a:52:17:74:65:71:
65:98:ed:34:c6:70:77:74:b8:29:99:64:74:90:54:
88:85:93:ca:ca:e3:85:e8:f0:c6:dc:63:5f:b3:23:
a6:b2:cb:39:b1:f0:7f:f2:e8:12:36:47:a1:01:4a:
6c:4e:53:05:ff:2f:ed:53:b7:ef:9d:d5:76:bd:b5:
98:b7:a2:2d:40:96:dc:ed:c3:7b:65:f1:d3:be:d6:
ba:a5:d0:16:aa:c8:78:e0:bc:54:70:8a:78:c2:6d:
5c:c0:96:63:a9:0f:11:16:be:2d:dd:73:11:1f:d5:
5f:a3:9c:44:0a:08:d1:61:a9:69:d9:29:8f:ae:b0:
1a:08:13:bd:20:ad:81:22:63:e8:72:03:53:6b:c2:
34:e2:1e:72:c6:c3:e7:af:5f:91:aa:a8:17:eb:02:
45:65:9e:0a:92:7b:3a:87:02:e4:5f:03:e7:ce:dc:
f0:a9:38:69:5f:7d:6b:c5:d9:0d:f1:96:58:d1:64:
c1:a0:d2:55:7d:7f:a9:c2:e0:26:39:c5:93:c7:b6:
86:ca:50:47:38:96:81:5f:b8:7c:0b:e9:37:42:4a:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:63:7B:CD:18:B5:1B:D4:5C:3C:38:A7:9D:39:31:20:67:02:1C:76
X509v3 Authority Key Identifier:
keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/4D962E8AE65111ED90E5833EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.94.0/23
IPv6:
2001:df2:57c0::/48
Signature Algorithm: sha256WithRSAEncryption
4d:be:92:e8:68:c9:80:ad:5b:e2:ee:c2:1d:57:09:1e:bb:c6:
fe:ee:91:b7:00:0c:37:b4:8b:8c:c0:ac:52:db:eb:ed:2d:3a:
3c:14:f8:26:aa:23:80:b6:94:b3:9a:6a:ed:3e:39:de:4c:e4:
a9:75:68:a2:50:3d:4b:2a:9b:90:b0:8d:85:29:4b:98:5b:92:
bf:6c:f1:13:c8:c9:30:d4:e8:65:87:a1:e0:07:14:37:98:30:
1a:83:d1:98:74:92:fe:39:96:24:9b:ac:70:7b:53:20:23:c1:
39:d3:8c:3f:ba:97:58:c8:ff:fe:c1:35:e2:8e:bf:eb:60:fc:
e5:cc:0b:c8:ce:2e:52:b0:9a:65:71:f7:84:df:d6:23:5b:99:
d8:59:a8:fc:ed:a6:98:6d:e8:e2:95:89:0d:c4:20:6e:f9:17:
fe:6a:04:99:be:68:51:dd:9a:35:2d:d0:a9:1b:1b:a2:0e:f1:
fa:32:96:94:cc:cb:db:78:20:03:c4:88:dd:9d:8e:9f:5e:b9:
dc:15:83:bb:b3:73:2b:59:d8:8e:d2:34:d1:40:3a:38:97:fa:
62:ea:be:ce:1a:4d:92:a3:e8:dc:3c:51:1f:d2:b3:f3:ad:57:
4b:dd:b4:29:18:2d:45:08:75:72:d9:25:b5:1c:96:63:f5:97:
c6:b1:be:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:58 2026 by rpki-client