
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E897EA5A3EE411ED905A3415C4F9AE02.roa
File: E897EA5A3EE411ED905A3415C4F9AE02.roa (raw, json)
Hash identifier: jcbGwSlzULf5rLkfD8fUMWUcZGOa/WoZyUzS4RvfPc8=
Subject key identifier: 63:A8:0B:27:E1:74:6E:C7:9F:43:18:77:D5:03:C8:7D:E4:15:E6:22
Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial: 088A
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E897EA5A3EE411ED905A3415C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:03:13 +0000
ROA not before: Wed 10 Sep 2025 21:33:04 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 4637
IP address blocks: 103.155.8.0/23 maxlen: 24
2406:60c0::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186 (0x88a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Validity
Not Before: Sep 10 21:33:04 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a46341-f75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:a4:b4:5d:78:df:20:ea:cb:33:b8:c2:1b:
93:69:a4:45:b0:4a:10:f8:0e:eb:31:a9:9a:74:f7:
88:f2:91:5c:a7:3f:97:96:23:8e:0b:7a:a6:46:f4:
01:d8:be:45:6e:3a:a8:0a:2f:0e:ac:0e:8b:3f:11:
98:42:51:a0:70:3c:35:60:bc:41:8f:13:59:b5:92:
3a:28:de:5b:ba:78:14:a1:a1:fb:c8:8a:59:65:0c:
78:b4:97:64:8d:dd:7c:52:55:1c:95:01:2e:76:e6:
9e:55:2f:4c:76:92:2b:f3:59:ac:de:b4:0a:9b:5b:
9b:df:37:ba:1c:c5:2a:fe:36:9b:c0:0f:64:f7:19:
f6:f2:10:2d:2a:33:50:48:5c:a8:d8:05:33:15:df:
59:8b:ad:cb:d9:93:90:5e:54:da:54:99:49:bb:3f:
34:29:c1:3f:c1:8c:3a:65:4c:a5:86:10:e6:aa:ff:
ce:aa:23:ea:58:e4:60:48:9b:2d:ff:45:d3:d9:2a:
3a:f4:6b:06:e7:e5:d3:3f:c7:9b:93:ff:99:cf:84:
8e:57:91:01:6a:8e:52:ee:d2:8a:23:36:19:90:8e:
34:8f:6f:c9:51:cf:75:f6:76:f7:a5:0f:a0:31:45:
3e:a6:3c:bb:91:bc:f7:7e:3d:2b:06:fc:7a:db:85:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A8:0B:27:E1:74:6E:C7:9F:43:18:77:D5:03:C8:7D:E4:15:E6:22
X509v3 Authority Key Identifier:
keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E897EA5A3EE411ED905A3415C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.8.0/23
IPv6:
2406:60c0::/32
Signature Algorithm: sha256WithRSAEncryption
91:7d:92:08:12:04:15:7d:53:a6:5b:83:8c:df:a7:f8:72:af:
26:f1:b1:3f:d8:46:3e:33:89:76:b0:a9:50:ad:77:72:c5:3b:
c0:14:69:26:a5:58:a2:da:18:91:ff:6f:9c:92:33:3d:bc:50:
d9:2a:b1:74:7d:68:b9:d1:02:df:eb:ef:3b:be:7a:77:84:92:
2d:26:19:e7:fa:f7:95:0d:4a:10:5d:a3:32:b3:53:b6:c5:08:
7e:df:f3:06:a2:c2:2a:b4:51:fe:df:16:33:d1:6a:8f:d9:eb:
98:b5:de:82:0b:25:80:28:d5:21:71:c1:d0:e1:2a:58:a3:af:
53:04:cb:71:f0:fc:9f:5f:8d:bc:e4:cf:60:fc:7d:21:e3:c5:
37:38:5b:d9:2c:55:c3:7f:0f:ba:28:44:3f:65:63:1b:3b:cf:
a8:a3:07:79:0f:73:a9:42:88:46:c7:21:cb:6e:02:84:ad:f3:
3b:36:31:74:cd:66:17:42:6b:98:36:ab:8d:66:df:41:1f:3f:
f3:89:fc:d1:b0:63:79:fe:ab:53:44:32:27:58:92:6c:a3:3e:
9f:b4:8e:a2:ff:69:99:e4:f4:16:aa:eb:1c:48:2f:a2:06:3f:
74:20:00:e7:2f:bc:24:4e:27:d7:84:42:90:3c:b2:88:5f:fc:
4b:9a:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:50 2026 by rpki-client