
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/43A8A46EACBC11EBB0651B63C4F9AE02.roa
File: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (raw, json)
Hash identifier: H6B6O0MUDuGmdlVs1fFKTz2DyB+jNWGXxwAsMamv3Hw=
Subject key identifier: 24:0B:D5:B5:B5:5B:26:33:EF:0F:90:AD:75:14:B9:FE:62:C1:6F:40
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 08D1
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/43A8A46EACBC11EBB0651B63C4F9AE02.roa
Signing time: Wed 26 Aug 2026 20:41:31 +0000
ROA not before: Wed 26 Aug 2026 20:41:31 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 137443
IP address blocks: 103.153.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2257 (0x8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Aug 26 20:41:31 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a8f4f7a-6d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:f4:97:a9:1e:dc:68:69:da:df:36:19:37:
81:90:1f:e2:06:1f:0e:b2:d1:2d:aa:30:72:ff:b9:
02:0b:b5:7b:6c:f8:95:fd:ff:0e:be:e0:b8:f0:76:
c1:06:f6:be:f2:b2:d9:da:56:c4:e4:43:4b:f0:d0:
44:73:7a:41:cc:35:ce:7e:de:21:8d:54:2c:7b:ba:
ca:44:c5:b3:b8:21:e3:4a:b3:e1:c2:a3:56:0f:2c:
bf:fd:38:d8:d0:a8:38:0c:89:7c:f0:a8:e7:b7:93:
60:b3:8e:f5:16:44:0c:73:03:80:46:c7:c0:7b:f2:
fe:b3:f9:39:46:a3:a0:b5:a2:fd:25:c0:3c:1d:02:
37:72:b6:f4:2a:ae:c3:95:fc:c0:ff:4c:a4:2a:75:
51:1c:bf:ae:d8:6a:86:dc:07:c7:7e:6e:8d:d3:48:
05:dc:c4:b4:d7:88:6e:21:e3:81:df:03:0f:58:d4:
38:07:ae:7d:e7:0a:1c:0c:54:7a:23:46:03:d1:bb:
41:b0:e4:91:35:de:08:e2:dd:50:e6:dc:d6:70:aa:
ce:c7:7e:7d:ad:87:b4:14:22:39:e7:66:ac:08:69:
a8:ea:c7:0f:f0:d2:57:c3:64:fa:36:4d:2d:a4:f5:
bf:f4:4e:7e:59:09:f5:77:28:84:64:1b:07:54:b8:
62:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0B:D5:B5:B5:5B:26:33:EF:0F:90:AD:75:14:B9:FE:62:C1:6F:40
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/43A8A46EACBC11EBB0651B63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.138.0/23
Signature Algorithm: sha256WithRSAEncryption
89:21:c7:75:67:be:3a:7b:04:d4:c8:b7:54:a4:f9:b7:0e:98:
8d:cb:a3:06:7d:94:cb:1a:8c:d4:46:86:af:ee:a1:75:a1:a5:
8f:9c:7c:50:1d:cb:d7:6f:07:39:19:c4:52:e2:74:c3:17:4b:
c4:19:8e:7a:5e:5c:17:f4:c3:a6:47:5b:b8:cb:f5:35:dd:9a:
3a:8d:0d:a6:c1:ad:3e:3d:8c:4d:3e:bb:7a:d8:5b:29:21:dd:
de:d7:fe:21:44:ef:86:de:db:d3:10:95:28:06:c8:07:58:16:
8b:92:af:14:24:38:d2:66:55:0b:36:da:89:65:5f:85:1c:5d:
07:18:a0:3e:ea:27:fc:82:9f:87:67:3b:f2:9e:e6:dc:80:30:
eb:ff:83:3a:19:d1:f6:64:f4:17:88:65:52:3c:45:f8:16:a2:
75:2d:86:06:d2:7f:4c:65:78:01:10:73:a6:4e:20:40:3b:b1:
b0:db:18:07:7d:7a:13:3e:6a:30:dc:be:fe:80:3f:64:8a:b6:
90:52:e9:c7:5e:a3:fe:fc:9a:a1:52:13:b8:81:b2:98:7f:29:
9f:57:a9:e0:e1:92:f6:ae:39:fd:fa:a0:6c:81:8a:45:67:d8:
41:e7:34:6b:4e:7b:63:d2:e3:48:01:86:b0:93:8d:8f:db:59:
24:09:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:30:59 2026 by rpki-client