
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/6E37C53C72CA11EC8CE7244BC4F9AE02.roa
File: 6E37C53C72CA11EC8CE7244BC4F9AE02.roa (raw, json)
Hash identifier: ZBqiSC8MaIqiFY8A4SYJFOCWnc1AAvTaOuaU1W8aPeo=
Subject key identifier: 41:E7:75:F4:A3:8E:09:5C:70:F0:BE:BA:2B:68:87:5A:20:19:D1:DB
Certificate issuer: /CN=A912E898/serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0
Certificate serial: 0F46
Authority key identifier: 48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/6E37C53C72CA11EC8CE7244BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:37:56 +0000
ROA not before: Fri 20 Feb 2026 18:15:03 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 134715
IP address blocks: 103.133.216.0/22 maxlen: 24
2404:5540::/32 maxlen: 40
2404:5540:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl
rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3910 (0xf46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E898, serialNumber=482DADB992DE2CF1BF990836478E19944995B1E0
Validity
Not Before: Feb 20 18:15:03 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44f44-68ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:61:b1:e0:1f:99:a6:e4:90:2c:3c:5e:77:
94:f3:05:2a:ae:1b:d6:e2:80:a3:22:7e:4f:95:52:
73:db:77:32:22:7d:c1:b8:ac:21:c6:dd:30:86:df:
c8:e0:6d:fd:e5:82:15:47:cb:bd:72:63:f0:64:f0:
6b:75:b2:6c:17:ee:d7:ae:13:45:d6:79:93:f8:3f:
74:9e:33:f0:9f:67:68:62:2b:30:17:23:57:0b:f4:
e3:b5:49:96:bf:5e:7b:61:0f:7f:22:ea:e2:8d:6b:
26:46:25:7c:f4:77:8c:b2:dd:e9:c6:0a:0e:ba:f6:
c0:69:48:f6:d3:46:f2:b8:5b:7d:ce:12:0f:49:97:
5b:0f:93:71:66:9f:50:d7:a4:c0:23:e7:d7:99:93:
0d:ba:b3:b0:ea:b5:f8:59:25:06:90:be:ce:2a:0c:
66:8d:80:17:f9:0b:25:30:df:60:33:0b:9c:c7:17:
d0:c0:be:c0:1b:b4:9a:10:b8:e2:23:e8:a1:6d:d6:
03:64:58:aa:f1:ff:4a:60:54:32:90:37:83:0b:71:
d8:e7:f4:9c:2a:7d:2f:77:53:6c:e6:ee:47:9e:cb:
04:7f:88:41:0e:8e:f9:11:c4:2b:ed:a3:49:16:01:
11:43:f0:73:d5:b8:c3:59:14:a0:67:8d:56:9a:62:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E7:75:F4:A3:8E:09:5C:70:F0:BE:BA:2B:68:87:5A:20:19:D1:DB
X509v3 Authority Key Identifier:
keyid:48:2D:AD:B9:92:DE:2C:F1:BF:99:08:36:47:8E:19:94:49:95:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/SC2tuZLeLPG_mQg2R44ZlEmVseA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC2tuZLeLPG_mQg2R44ZlEmVseA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E898/211C64468C2811E9B02BCD80C4F9AE02/6E37C53C72CA11EC8CE7244BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.216.0/22
IPv6:
2404:5540::/32
Signature Algorithm: sha256WithRSAEncryption
19:16:52:b0:31:a0:16:1b:d9:97:32:f6:c9:ca:fd:00:4f:f1:
d8:c3:68:b3:ee:bd:d7:3f:43:43:2b:26:fb:28:79:50:d2:c8:
58:93:91:53:f0:c1:1e:1e:e9:b6:da:5c:5c:a8:b3:ac:bc:d8:
d0:f3:d1:cc:22:32:c7:4f:b6:34:ea:b1:75:cf:70:17:14:c8:
3a:38:5d:79:63:b0:ef:9c:95:f3:ff:e2:cb:1b:40:2a:74:9c:
15:b1:89:4f:08:05:80:8f:e3:52:4d:cf:89:02:ac:35:92:44:
b2:d1:2c:b2:8b:76:59:81:9f:a2:de:fa:3f:ae:54:b7:de:86:
e0:45:4b:19:f4:43:4a:fa:4f:96:12:90:d2:ac:da:d0:44:76:
fe:2f:05:b4:12:ee:f6:39:e3:b4:a4:41:bf:cf:a2:c0:09:92:
e7:52:83:40:fa:49:9c:82:f5:98:bb:7a:2f:c1:c4:18:e5:d9:
95:b7:39:1b:5e:ba:02:e4:10:5c:97:f9:c1:b1:da:86:f0:a9:
4c:13:ab:1c:86:7e:3f:16:0c:4f:e8:c3:05:71:58:8f:1a:87:
81:2b:ed:f0:d0:c5:9b:59:a5:f3:25:ac:4c:cb:40:d5:1a:9b:
dd:39:9e:9f:af:12:04:e0:cd:de:1a:b6:0c:af:5d:dc:f1:21:
5a:cf:6d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:26 2026 by rpki-client