
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa
File: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (raw, json)
Hash identifier: XshIrrv6aloyMNxWY1ygZTA+sPXukhSReGQFQnVlJxA=
Subject key identifier: D0:0C:26:8D:DC:1C:97:FB:BE:76:41:A0:8E:D1:0E:25:AA:83:7B:EB
Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Certificate serial: 01C7
Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa
Signing time: Fri 05 Jun 2026 04:34:59 +0000
ROA not before: Fri 05 Jun 2026 04:34:59 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 139000
IP address blocks: 103.138.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 03:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59
Validity
Not Before: Jun 5 04:34:59 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a2251f3-eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:2d:d7:be:96:9a:bf:f2:36:c0:de:73:cf:
cb:70:da:f2:ca:ce:94:eb:d6:32:98:55:25:8d:72:
a5:5f:4d:98:e1:e5:a6:8e:40:5e:de:b6:4f:0f:2f:
6b:71:0f:ae:f4:58:61:8f:8b:61:7a:5f:7d:ad:77:
74:ce:d0:78:01:6c:09:8d:87:12:7f:1d:14:8f:b1:
0a:ba:73:ef:9b:e3:9e:45:81:2c:bb:1b:4d:87:73:
17:5a:e3:84:1e:67:10:af:9e:da:e2:de:8b:26:75:
89:ff:3b:03:f9:8a:56:71:48:fb:a4:0e:af:08:25:
01:02:df:71:19:46:34:e3:61:06:88:b1:87:67:c9:
33:e4:25:69:87:be:1f:dc:ea:75:b8:87:e6:b5:8b:
25:50:07:20:52:48:8e:54:97:63:f3:4d:ed:63:83:
ff:a7:92:c2:c1:89:58:cc:ec:ed:17:1a:7c:a2:67:
f1:8f:99:9b:fc:fc:6c:6e:d1:31:a5:9c:c8:aa:2a:
fb:45:c8:69:8b:60:a6:78:39:a0:31:02:f7:15:b2:
78:4c:25:d7:b8:bb:43:47:90:97:b5:c1:91:b6:ae:
3a:65:65:1d:04:64:aa:34:66:c7:72:65:98:3e:38:
e4:9f:f7:25:6a:d1:c3:9b:89:83:b1:0f:6e:0b:80:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0C:26:8D:DC:1C:97:FB:BE:76:41:A0:8E:D1:0E:25:AA:83:7B:EB
X509v3 Authority Key Identifier:
keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/7DE2804AB4BC11EEA02E9A19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.138.87.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f2:72:ba:80:2a:c6:1f:f5:4f:0a:09:3f:64:a8:7f:a2:fc:
42:f9:c2:0d:bc:f0:81:f4:bc:d6:75:65:b0:27:31:93:d1:f2:
b9:06:be:24:cd:f8:c8:42:ff:50:6b:e9:d5:81:14:fa:b9:fa:
6f:90:44:c3:55:6d:fb:d2:f6:9f:83:d5:a9:cf:41:c5:5e:3f:
bd:ab:53:99:97:2b:3f:38:40:fc:71:e6:90:7d:6a:04:ec:36:
ff:ef:b6:87:ab:9c:df:f6:cc:d1:ce:e7:cc:62:4b:90:6a:de:
68:2f:54:9c:60:3d:44:da:e0:1e:69:fb:11:5b:1c:36:7d:ca:
a6:5f:7c:1f:1d:02:87:12:f5:f6:13:99:df:bc:12:94:11:e3:
2b:64:2c:ef:99:3a:30:7a:5d:77:39:45:f7:33:26:84:98:2c:
63:2e:db:c8:e3:5f:d5:63:f7:07:05:b9:ab:76:fa:24:e4:68:
35:52:41:f1:d1:94:b5:24:f0:fc:f5:6c:2e:40:cd:8a:92:a7:
41:82:cc:df:19:ac:13:7e:c9:fd:0f:40:51:e8:6d:1c:11:6a:
c3:42:d6:0f:d6:9f:69:4c:cf:39:17:92:f7:d4:7e:a8:b4:69:
9e:d1:63:0c:c8:7f:98:52:ba:bc:3b:85:7f:ba:0f:a8:67:3e:
99:68:6b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:04:44 2026 by rpki-client