
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa
File: 25234272DF4311EDA83C7074C4F9AE02.roa (raw, json)
Hash identifier: k2kF86r2Rejt5Qoj2enjD0kXVIDO+7c+AhqCfXHuLMo=
Subject key identifier: 92:67:EC:D2:D5:59:B4:37:E9:13:82:BC:48:2D:33:CF:EC:F4:02:B3
Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Certificate serial: 0CFB
Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:23:01 +0000
ROA not before: Sun 02 Feb 2025 18:27:17 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 136176
IP address blocks: 103.83.15.0/24 maxlen: 24
103.84.133.0/24 maxlen: 24
2401:32c0::/32 maxlen: 32
2401:32c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3323 (0xcfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C
Validity
Not Before: Feb 2 18:27:17 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40575-0a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:ee:87:b8:cb:10:d2:06:bd:0f:fa:df:61:
eb:61:60:b0:b3:89:ff:cf:a0:08:26:2e:a3:cf:a4:
a8:7b:6d:2d:60:84:f3:e5:01:ed:c1:23:db:83:0a:
41:6e:61:d1:74:ac:8a:63:13:bc:b2:55:e0:40:14:
23:f4:a1:5f:96:f2:39:f2:46:4e:ca:a7:65:09:c9:
78:6b:e3:0f:4d:d4:e0:d7:cd:e9:69:9c:11:ab:be:
81:c9:17:c5:00:3a:91:85:11:47:1b:bf:73:8f:06:
be:d4:e7:e5:ab:c1:3b:a5:6d:84:19:4b:a2:01:08:
38:9d:c7:b1:f3:7c:ee:ac:9c:2c:56:88:51:1f:25:
6f:af:86:da:d5:8e:6e:17:3e:de:ab:ba:30:85:61:
d2:fb:e9:77:88:cf:05:88:f6:42:4c:c3:80:e2:fc:
5f:cb:ba:5b:26:ce:00:45:0c:ef:c6:75:4b:6f:25:
08:24:69:24:a6:4c:64:4c:e6:36:3a:19:45:7f:9f:
87:61:55:c2:48:46:e8:46:34:76:7f:5e:04:a0:28:
de:3c:96:9b:06:7c:66:10:83:3f:27:db:ee:17:c9:
4a:dc:4b:f2:15:e1:31:e6:ba:84:b0:85:5e:b7:95:
4d:d3:3e:0f:b9:2b:2a:f6:48:28:13:08:c4:6a:9b:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:67:EC:D2:D5:59:B4:37:E9:13:82:BC:48:2D:33:CF:EC:F4:02:B3
X509v3 Authority Key Identifier:
keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/25234272DF4311EDA83C7074C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.15.0/24
103.84.133.0/24
IPv6:
2401:32c0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:c2:2c:98:06:65:17:ec:5a:a6:4d:53:eb:e7:f9:ae:e3:fa:
ed:f8:bc:4b:32:53:57:b2:7d:51:bd:1a:af:01:6d:f8:27:61:
7c:27:ac:86:5c:27:87:91:e8:31:04:96:4a:18:4c:7d:50:01:
b9:b8:30:af:8b:bb:27:45:d7:ad:4f:b4:13:7e:0b:ef:9b:60:
af:1d:10:4b:bb:cb:18:81:23:d1:a5:74:ca:aa:08:ba:b6:18:
60:b5:ea:11:a9:9d:2c:79:0f:00:94:36:d9:e8:4a:db:c6:00:
f9:cc:5e:29:13:22:20:a6:e4:85:b5:46:55:c0:25:2a:10:83:
b8:05:79:62:81:66:cd:1d:25:44:70:4a:57:57:9a:af:9c:7d:
7a:ad:76:c7:53:5b:cd:df:ad:3f:1c:fd:a1:5d:0b:f7:44:45:
b5:c0:4e:f8:d7:cf:12:3b:52:0e:37:4d:96:f3:23:12:d7:9e:
af:82:ec:b1:5c:75:ac:5f:55:36:76:24:4a:61:2e:fb:d0:7d:
72:4b:1b:f1:c1:7f:20:d6:37:0e:99:e4:2e:23:a7:8e:c4:f0:
46:e7:1a:17:88:78:1c:8e:d3:d1:3c:cf:6b:b2:71:2f:59:3c:
e6:c6:b8:3f:ce:be:2f:ba:90:e4:9d:d0:eb:dd:e3:5b:d6:d7:
fe:a9:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:45 2026 by rpki-client