
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa
File: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (raw, json)
Hash identifier: m0EtsgnFteaZumXXNJzKKsBn+VRdGLka+E0ADygv+iA=
Subject key identifier: 26:9D:7D:07:CC:06:41:C1:23:AF:18:14:4B:25:50:EA:EC:DC:98:7E
Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Certificate serial: 0194
Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:49:19 +0000
ROA not before: Tue 27 May 2025 05:40:19 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 139000
IP address blocks: 103.138.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Validity
Not Before: May 27 05:40:19 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a5955f-8a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:35:bb:56:8a:61:09:82:f8:d2:16:e4:1e:
bb:91:43:36:f9:f8:c3:74:ec:60:53:5d:21:87:c1:
01:65:0c:fc:5d:b4:14:3c:12:9d:54:ba:b7:f3:49:
f9:bc:4b:bf:8e:e7:ab:9d:b6:7c:b9:4c:98:63:04:
28:09:7f:25:c9:84:ab:33:c1:b4:1c:2f:dc:19:bd:
7a:47:08:de:7d:d1:41:00:34:90:10:31:88:67:7c:
13:69:5e:99:fc:37:5a:88:60:7f:80:a8:f5:d3:85:
c7:b5:a2:1b:bf:79:33:63:0a:eb:80:28:7c:74:2c:
ae:20:6b:a9:99:7a:bd:ac:54:97:c1:ab:05:33:87:
c9:af:2e:05:ed:c8:2e:53:af:02:4b:9a:d8:9c:7e:
ca:9f:26:f9:ea:54:43:17:10:db:fe:d1:f6:11:91:
91:83:fb:20:2e:ef:9a:f8:11:d6:63:2f:ca:7e:11:
a3:d0:f1:98:e6:21:1b:8b:89:77:0f:a3:b2:7a:52:
59:81:1c:61:81:59:f8:0e:58:92:3d:a6:f6:25:4c:
78:5b:01:07:32:3e:08:e6:37:8c:ee:af:04:02:2d:
40:09:3c:77:97:a0:08:f2:11:55:a9:7f:fb:66:c1:
7d:96:6f:e2:4e:56:a0:3d:88:6d:4b:11:11:ae:a7:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:7D:07:CC:06:41:C1:23:AF:18:14:4B:25:50:EA:EC:DC:98:7E
X509v3 Authority Key Identifier:
keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5a:ba:12:71:ba:f3:f5:95:ba:df:b3:b5:c1:15:1a:98:25:
09:94:c6:c7:e2:8d:54:d8:33:5b:87:7c:99:3f:a5:2a:e4:28:
e0:64:2f:12:d6:68:4c:64:d4:96:15:08:81:cc:18:09:f1:74:
f3:95:fe:5e:3a:d9:96:2d:99:4f:76:85:65:af:8f:d3:5d:04:
77:e5:c0:d2:25:bf:98:5e:0e:da:63:f7:e8:8d:a3:66:ae:66:
a3:c8:98:97:70:74:32:32:21:be:d8:4b:ea:69:ed:00:7b:65:
3b:da:42:4b:e4:9c:43:58:e2:32:6d:a3:52:c1:62:f4:10:ab:
d2:a0:ec:a1:34:6d:22:2c:57:a3:d3:06:d2:a3:0d:02:93:62:
db:fe:dc:2a:e0:d7:8a:b2:be:40:23:d7:f3:3d:65:8c:8c:0e:
a7:fb:60:fd:de:85:00:d0:e9:a8:30:60:f5:17:72:76:3d:6a:
79:8c:2f:e1:09:a1:da:ff:cb:4e:2b:7a:fd:40:02:f5:3c:fd:
da:fc:94:88:bc:1e:e5:b6:95:1c:62:37:12:d2:50:8d:d8:06:
d0:4f:41:02:82:a6:a1:45:85:a6:19:86:ff:30:0d:c4:74:f9:
f0:56:5f:4b:62:31:b5:0f:ca:50:b3:68:dd:0a:61:e5:90:b1:
21:2e:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:58:02 2026 by rpki-client