
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
File: C202E82834B611ED815AAB32C4F9AE02.roa (raw, json)
Hash identifier: FkAIc4PkSrjwjHI3WuneOyjO69joINPbfIEPkCYw/A0=
Subject key identifier: 56:6D:CD:E7:CF:7B:73:AA:BA:03:D8:6A:68:C5:96:38:E9:FC:72:2E
Certificate issuer: /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial: 02AA
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:08:29 +0000
ROA not before: Fri 17 Oct 2025 04:07:53 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 137538
IP address blocks: 103.5.218.0/23 maxlen: 24
2400:aae0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Validity
Not Before: Oct 17 04:07:53 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a42c3d-bc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b2:f9:1b:77:d4:47:b7:96:a1:6d:39:05:cf:
90:9b:f9:3e:8b:50:0c:9f:b4:85:f2:78:04:39:cc:
cc:4e:af:60:18:a4:2c:ef:96:c6:77:28:72:d2:ba:
9a:dd:78:9d:1f:2d:3f:e3:26:ac:d2:51:12:8b:5b:
e0:5f:de:7f:88:a9:23:75:cf:ae:c0:ec:de:fa:2a:
57:d9:06:42:a4:6f:67:d4:86:e5:7c:53:18:ad:1b:
48:32:ba:e1:f0:74:e3:eb:12:3c:6f:ff:5d:c8:07:
7a:15:63:1a:c2:3e:a1:3e:4c:8b:24:44:be:a6:06:
78:59:f7:fc:3e:22:be:3f:c7:f7:5c:e4:11:4f:22:
e8:0b:3d:8b:78:d5:b1:11:47:2d:8f:77:5c:ca:2c:
c0:e1:8a:0b:73:b5:5f:13:82:80:7c:19:f9:61:a5:
09:f0:2e:f6:2b:93:5c:95:57:ac:d7:86:09:07:b1:
63:34:e6:0b:4c:ba:96:94:b8:e1:33:e5:1d:4b:d6:
31:96:6a:b9:eb:1b:dc:81:f0:2e:e7:f5:a8:74:39:
15:e2:6f:38:8b:6c:a1:d7:e7:74:df:67:f8:bf:29:
3e:ed:42:a6:86:63:f5:61:4d:03:eb:c6:6e:3b:de:
5b:81:a8:5f:f1:3d:c2:2d:95:c5:6e:95:46:2d:11:
2a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6D:CD:E7:CF:7B:73:AA:BA:03:D8:6A:68:C5:96:38:E9:FC:72:2E
X509v3 Authority Key Identifier:
keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.5.218.0/23
IPv6:
2400:aae0::/32
Signature Algorithm: sha256WithRSAEncryption
9e:b9:54:6d:1d:d1:a6:19:13:b8:f5:31:94:96:6e:3a:28:f7:
6c:e7:85:60:fa:f7:b1:ca:a5:45:fb:10:16:cd:b7:dd:14:0f:
cf:a6:61:6d:c5:a0:b9:03:e0:6f:7f:19:fa:5c:df:08:71:cd:
2d:fb:d1:92:50:1d:fc:2e:7e:5b:d3:c7:04:e1:c2:3d:17:ff:
48:0e:57:f6:f3:f7:0f:9e:b6:e6:a5:53:d0:f9:a8:94:0a:bb:
2c:32:fa:44:db:e5:b2:02:4e:f2:12:63:3f:ce:ef:c4:3f:43:
e0:7d:18:0e:50:b6:33:ed:87:52:69:ad:b2:0e:39:66:91:6b:
3e:3e:08:3a:5b:4a:98:98:9e:3f:b6:06:cd:97:7a:ff:c2:d6:
43:47:9c:78:5a:52:56:7d:6e:6b:a9:8f:03:bf:a4:9c:11:27:
30:4a:6d:d5:2e:42:31:64:bb:6b:73:7f:c6:41:36:fc:1a:d6:
81:08:61:eb:52:a2:59:05:27:fe:0f:7d:bf:85:4f:12:23:2c:
07:84:29:98:ca:85:4c:3d:7e:90:dd:da:e0:04:3f:e4:18:a6:
35:3e:dc:2d:a2:d2:fe:1d:b5:c4:c9:3b:1a:92:72:f8:a9:8d:
b6:98:67:fb:4b:30:34:9c:26:a9:2e:cb:54:98:01:b0:01:6f:
e9:94:93:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:38 2026 by rpki-client