
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa
File: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (raw, json)
Hash identifier: ystXqmcXsJu+zcIezcCOloYKjrlcgYih0bHHJpAVghU=
Subject key identifier: 2B:FF:6C:A2:26:5D:94:13:BD:86:E3:08:4A:51:CF:DA:98:DB:79:E9
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0E00
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:39:52 +0000
ROA not before: Tue 20 Jan 2026 18:15:15 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 151629
IP address blocks: 103.89.24.0/24 maxlen: 24
103.89.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3584 (0xe00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Jan 20 18:15:15 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a479e8-99ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:7b:f6:31:13:68:86:8a:29:3a:b8:9e:92:
66:15:dd:e3:59:4f:ca:13:38:08:20:67:af:32:a3:
d2:88:d8:3d:f9:e3:83:c6:a9:e6:34:34:59:b2:97:
5a:f6:a0:20:ee:2b:60:4a:b9:a4:22:c3:5f:3b:09:
9f:31:b9:d4:f5:36:52:89:dc:66:cf:e3:d3:a3:1a:
30:b2:34:8e:fe:29:b9:11:fa:29:5a:14:63:09:a3:
ab:c7:1a:93:7a:eb:38:f9:e9:7a:54:fd:57:e8:d2:
5c:cc:7a:1d:f4:b2:dc:f6:ea:4f:06:6b:2c:d8:78:
32:7e:36:54:32:0e:83:17:c8:89:b7:c5:09:ba:7d:
92:77:3d:c4:94:92:15:01:c7:4c:50:46:27:48:c9:
c4:2e:7d:8d:9a:85:d0:60:c7:83:78:dc:67:2f:8d:
c0:74:95:e1:38:f5:0f:be:0a:28:ac:53:6d:d9:4e:
dd:75:af:cd:3e:ca:3c:8d:7d:c7:72:c6:fb:de:5f:
5e:8d:86:5f:52:a1:86:ad:c0:ca:7e:74:28:90:0d:
de:30:ce:7b:07:3b:c6:93:0c:9c:79:5f:23:d7:1e:
e6:01:e6:c6:a4:6f:65:fe:68:88:92:08:8a:1a:d5:
e3:48:78:28:11:07:d2:81:f4:d3:04:fe:a1:01:10:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:6C:A2:26:5D:94:13:BD:86:E3:08:4A:51:CF:DA:98:DB:79:E9
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.89.24.0/23
Signature Algorithm: sha256WithRSAEncryption
39:57:61:76:32:db:9c:dd:93:97:8e:ec:31:ff:56:32:49:ec:
b0:fe:71:5e:98:bf:1e:d4:4a:b7:80:4c:c0:fd:13:4b:e5:1c:
22:79:96:e3:6a:ef:07:5e:aa:16:92:e0:a9:a2:59:fd:d5:06:
e4:0f:c7:54:0a:5d:6f:a1:4b:08:9e:b0:b8:25:8b:da:de:66:
d5:2c:37:5e:d7:98:29:13:70:03:85:37:b0:ee:18:6b:68:bc:
11:21:c2:e7:66:fe:bd:b9:0b:b0:75:b0:61:23:e2:f6:90:1f:
77:49:3b:d8:c2:a9:ac:0e:d0:56:d6:c1:60:01:74:6c:dd:18:
39:16:b2:f8:01:11:c7:92:e0:92:d9:e4:b2:c5:2c:39:a7:1f:
bc:d1:50:e4:86:9c:e0:8d:d8:df:de:1c:69:b7:e7:cf:c4:f3:
fb:99:24:fa:0f:b6:a1:f8:5c:75:b5:b8:86:f6:80:db:c2:82:
5f:86:90:d1:ad:3e:dd:71:5a:87:5c:4d:30:59:71:14:ca:76:
d0:32:30:a0:b6:7f:bf:51:21:ff:e8:b0:8f:75:66:14:82:37:
6b:fe:40:bc:f8:3a:ab:b6:0c:89:57:5c:f6:dd:a5:c0:e0:6a:
fd:5b:0f:4f:e1:5a:96:14:dd:4e:e9:1a:10:fa:a0:6f:6e:bd:
64:77:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:50 2026 by rpki-client