
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
File: B69382D2CCC911EBB3A3513CC4F9AE02.roa (raw, json)
Hash identifier: /7av7VmQbV+L0jTSYNfMg1H06rntjmVObrTCW6Y2sTg=
Subject key identifier: A8:5A:A7:AE:40:54:82:EF:B7:8B:17:AA:A6:70:1C:F6:42:EE:F6:BC
Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Certificate serial: 064E
Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:58:32 +0000
ROA not before: Mon 28 Jul 2025 23:35:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 55567
IP address blocks: 103.1.7.0/24 maxlen: 24
103.231.159.0/24 maxlen: 24
103.231.168.0/23 maxlen: 24
202.61.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1
Validity
Not Before: Jul 28 23:35:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a429e8-dbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:ed:ae:02:a9:ac:c5:b8:bc:09:f3:dc:fe:
af:d1:b6:dc:0a:c5:f8:e5:dc:88:c9:2d:5f:cc:64:
6b:09:8f:d9:67:8d:f0:8f:34:85:5a:04:e4:fd:ba:
ea:d5:75:7a:99:37:24:f7:b3:7e:bf:b4:77:aa:b9:
13:e0:05:d8:b7:64:30:a5:1c:ab:51:3b:0c:ff:58:
a6:86:0c:fc:59:8f:02:21:46:2d:f0:99:84:83:7b:
75:5b:99:04:b5:0c:b0:b3:81:2e:33:2b:7b:e1:d4:
19:12:30:59:56:3f:13:09:db:30:83:7d:e2:e2:16:
39:0f:1a:26:4b:95:2f:3a:cb:43:e2:f7:5d:2f:66:
70:c1:ab:2c:04:1f:14:e2:6e:a9:fb:b0:be:f9:ce:
65:25:1b:80:be:64:07:76:de:e8:d0:07:c5:8c:e6:
c4:02:6a:12:c5:89:43:cf:c0:aa:88:00:7e:e2:f5:
03:70:9a:63:4b:97:a0:64:93:5b:56:7e:90:58:8b:
5f:5d:02:82:95:d5:1e:e1:6a:33:18:de:d1:85:3a:
07:93:ef:56:0d:2c:df:88:1c:19:2f:a2:38:be:38:
de:e0:2d:2e:0d:f2:f5:96:11:6e:1f:7e:01:e6:c6:
1b:79:55:0e:62:46:b6:f7:0c:56:3f:43:87:9b:4d:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5A:A7:AE:40:54:82:EF:B7:8B:17:AA:A6:70:1C:F6:42:EE:F6:BC
X509v3 Authority Key Identifier:
keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/B69382D2CCC911EBB3A3513CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.1.7.0/24
103.231.159.0/24
103.231.168.0/23
202.61.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:16:33:8e:ba:9f:76:b0:2f:66:5b:9c:06:89:9d:ca:73:be:
91:86:ca:1b:65:0c:3a:f8:53:d7:a2:4b:7c:c1:b6:98:f6:60:
86:eb:e0:76:ef:bd:25:5e:e6:61:6d:2d:25:d5:e0:8f:a3:3e:
6f:9d:42:81:7a:21:0a:d9:ed:e4:d4:3f:42:c7:f0:23:4c:b9:
fc:a6:d8:da:41:d4:24:fd:63:a3:b8:db:17:46:56:6a:62:4a:
c9:c5:cd:e0:a9:18:10:fe:45:b8:c4:2b:15:00:a3:08:e2:bf:
0e:59:7e:8e:1a:18:44:2f:72:51:c5:07:2a:73:f7:4f:49:6a:
18:60:9a:b5:05:04:55:84:9d:bf:4b:d2:46:8d:9c:da:bc:32:
a3:9b:ad:e5:08:8b:f7:c3:4d:97:3f:3f:0c:92:9a:ae:60:f7:
10:9c:98:27:70:f7:e7:d9:2b:fe:fc:96:06:64:2c:d8:45:11:
25:3b:2a:b8:09:1d:85:dd:e7:15:32:04:68:37:cf:32:72:4b:
cb:9a:ff:71:75:50:6b:49:9e:ae:b9:15:47:db:28:2e:a2:26:
6b:ec:b3:3f:4b:73:a5:03:08:02:eb:dc:d1:6a:66:5f:54:59:
3e:62:52:c2:d9:7b:f5:7f:3b:c3:91:17:fa:51:55:1c:95:c9:
99:b3:f3:dc
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1
MzA2MTM2QzEwHhcNMjUwNzI4MjMzNTMxWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjllOC1kYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWrtrgKprMW4vAnz3P6v0bbcCsX45dyIyS1fzGRrCY/ZZ43wjzSFWgTk/brq
1XV6mTck97N+v7R3qrkT4AXYt2QwpRyrUTsM/1imhgz8WY8CIUYt8JmEg3t1W5kE
tQyws4EuMyt74dQZEjBZVj8TCdswg33i4hY5DxomS5UvOstD4vddL2ZwwassBB8U
4m6p+7C++c5lJRuAvmQHdt7o0AfFjObEAmoSxYlDz8CqiAB+4vUDcJpjS5egZJNb
Vn6QWItfXQKCldUe4WozGN7RhToHk+9WDSzfiBwZL6I4vjje4C0uDfL1lhFuH34B
5sYbeVUOYka29wxWP0OHm03l/wIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFKhap65A
VILvt4sXqqZwHPZC7va8MB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3
MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQ4QzMvRDc0MTRENTRDNzIyMTFFQkE0NzE0RjQwQzRGOUFFMDIvQjY5MzgyRDJD
Q0M5MTFFQkIzQTM1MTNDQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAZwEHAwQAZ+efAwQBZ+eoAwQAyj16MA0GCSqGSIb3DQEBCwUAA4IB
AQBqFjOOup92sC9mW5wGiZ3Kc76RhsobZQw6+FPXokt8wbaY9mCG6+B2770lXuZh
bS0l1eCPoz5vnUKBeiEK2e3k1D9Cx/AjTLn8ptjaQdQk/WOjuNsXRlZqYkrJxc3g
qRgQ/kW4xCsVAKMI4r8OWX6OGhhEL3JRxQcqc/dPSWoYYJq1BQRVhJ2/S9JGjZza
vDKjm63lCIv3w02XPz8MkpquYPcQnJgncPfn2Sv+/JYGZCzYRRElOyq4CR2F3ecV
MgRoN88yckvLmv9xdVBrSZ6uuRVH2yguoiZr7LM/S3OlAwgC69zRamZfVFk+YlLC
2Xv1fzvDkRf6UVUclcmZs/Pc
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:25 2026 by rpki-client