
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/213F506AEF8A11F08E686F05616F56BC.roa
File: 213F506AEF8A11F08E686F05616F56BC.roa (raw, json)
Hash identifier: +0TIbXgSWfY4Rfh4n/KWV5MfMbBrpgMrwoEbGLQfWss=
Subject key identifier: 00:DE:BC:C2:14:FB:8C:F5:1C:9B:B9:13:6E:E8:E5:11:68:10:87:02
Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Certificate serial: 2336
Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/213F506AEF8A11F08E686F05616F56BC.roa
Signing time: Sun 01 Mar 2026 18:43:34 +0000
ROA not before: Mon 12 Jan 2026 07:45:10 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 134128
IP address blocks: 103.54.148.0/23 maxlen: 23
103.54.148.0/24 maxlen: 24
103.54.149.0/24 maxlen: 24
2402:3b80::/32 maxlen: 32
2402:3b80::/48 maxlen: 48
2402:3b80:1::/48 maxlen: 48
2402:3b80:2::/48 maxlen: 48
2402:3b80:3::/48 maxlen: 48
2402:3b80:4::/48 maxlen: 48
2402:3b80:5::/48 maxlen: 48
2402:3b80:6::/48 maxlen: 48
2402:3b80:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9014 (0x2336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B
Validity
Not Before: Jan 12 07:45:10 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a488d6-b05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:6f:df:07:f9:d5:15:bb:48:4c:a4:7a:39:
ee:ec:e4:e8:04:7e:18:e0:64:12:d4:dc:33:f5:e6:
2e:5c:37:27:da:b3:5c:95:83:3a:49:ad:44:05:6d:
12:52:65:ae:e5:b8:4c:81:b5:90:a0:8e:a6:48:13:
ce:31:bc:a6:db:fc:99:55:4f:3b:33:0b:fc:7e:8b:
d1:4b:ce:b9:c3:1b:27:0e:30:3e:5f:f7:b0:07:5c:
e8:44:5f:93:5d:b9:31:b4:c8:8d:49:3d:b0:02:c4:
dc:a3:6c:ec:ee:5d:9b:b8:33:08:f8:95:d5:91:cb:
ac:13:b2:59:98:c3:05:a9:66:4b:ca:a3:6e:82:26:
9d:75:d7:46:cc:cc:11:39:cb:6a:18:2a:30:43:c7:
ad:5d:99:1d:c8:62:ab:14:57:cf:5c:52:dd:0e:a7:
c9:7e:96:77:51:ff:6a:96:1c:96:73:7f:aa:e6:bf:
7e:7a:df:26:2a:50:18:51:53:7e:f1:07:06:c9:29:
81:0b:b4:89:48:ad:8e:4b:62:e4:fd:06:23:dc:aa:
3e:ff:c4:40:7d:85:90:e2:aa:c0:60:d2:3a:86:ab:
29:24:7e:06:12:c1:fb:3c:18:5a:bd:7e:04:59:06:
f6:9a:c1:4c:1d:aa:4f:e1:31:24:d9:da:8d:90:c3:
e9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DE:BC:C2:14:FB:8C:F5:1C:9B:B9:13:6E:E8:E5:11:68:10:87:02
X509v3 Authority Key Identifier:
keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/213F506AEF8A11F08E686F05616F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.54.148.0/23
IPv6:
2402:3b80::/32
Signature Algorithm: sha256WithRSAEncryption
13:10:13:c2:e7:d1:4f:65:03:3f:8f:f2:70:8f:e0:72:a3:05:
d7:4c:fb:f6:28:33:8a:a3:25:05:24:30:04:3e:38:c5:ba:b4:
e3:78:55:ed:5c:0f:ea:e8:66:97:01:55:7e:d1:f9:1f:f3:c8:
87:64:dc:49:50:21:b0:0c:8c:f3:bb:43:60:d1:6b:6b:3b:60:
5c:71:91:f3:8c:d1:08:37:1a:23:b7:51:b2:c5:ae:2e:7c:69:
37:8d:f9:d3:f1:28:66:3e:e3:82:9a:54:19:48:3f:fa:e0:1e:
06:d6:b0:b3:64:71:6b:bc:64:1a:e3:1b:ac:88:d1:a5:35:58:
a8:20:a0:c2:d6:42:e5:39:d8:f1:1f:47:5c:ae:b2:9e:60:6c:
e0:87:94:1f:a9:ea:76:a9:30:0e:52:da:14:57:e0:41:3d:2b:
14:56:ff:23:a4:92:0d:2f:68:70:2b:c0:a0:ff:0d:62:93:80:
2b:55:0b:f2:c6:84:7e:20:94:47:d2:a7:05:3e:67:3a:ba:c1:
cf:f8:88:50:e6:b3:2d:ac:4f:bd:83:79:11:ea:01:2a:87:04:
ca:2a:aa:e4:a6:8c:aa:95:f6:9b:ad:4e:c6:b4:53:b5:60:71:
3d:d7:a4:a9:41:b0:d7:63:bd:2b:e4:db:58:d3:6c:8f:39:da:
65:f8:11:60
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICIzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2
OEY2OTg1M0IwHhcNMjYwMTEyMDc0NTEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODhkNi1iMDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA34Jv3wf51RW7SEykejnu7OToBH4Y4GQS1Nwz9eYuXDcn2rNclYM6Sa1EBW0S
UmWu5bhMgbWQoI6mSBPOMbym2/yZVU87Mwv8fovRS865wxsnDjA+X/ewB1zoRF+T
XbkxtMiNST2wAsTco2zs7l2buDMI+JXVkcusE7JZmMMFqWZLyqNugiaddddGzMwR
OctqGCowQ8etXZkdyGKrFFfPXFLdDqfJfpZ3Uf9qlhyWc3+q5r9+et8mKlAYUVN+
8QcGySmBC7SJSK2OS2Lk/QYj3Ko+/8RAfYWQ4qrAYNI6hqspJH4GEsH7PBhavX4E
WQb2msFMHapP4TEk2dqNkMPpHwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFADevMIU
+4z1HJu5E27o5RFoEIcCMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy
RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo
VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvMjEzRjUwNkFF
RjhBMTFGMDhFNjg2RjA1NjE2RjU2QkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZzaUMA0EAgACMAcDBQAkAjuAMA0GCSqGSIb3DQEBCwUAA4IBAQAT
EBPC59FPZQM/j/Jwj+ByowXXTPv2KDOKoyUFJDAEPjjFurTjeFXtXA/q6GaXAVV+
0fkf88iHZNxJUCGwDIzzu0Ng0WtrO2BccZHzjNEINxojt1Gyxa4ufGk3jfnT8Shm
PuOCmlQZSD/64B4G1rCzZHFrvGQa4xusiNGlNVioIKDC1kLlOdjxH0dcrrKeYGzg
h5Qfqep2qTAOUtoUV+BBPSsUVv8jpJINL2hwK8Cg/w1ik4ArVQvyxoR+IJRH0qcF
Pmc6usHP+IhQ5rMtrE+9g3kR6gEqhwTKKqrkpoyqlfabrU7GtFO1YHE916SpQbDX
Y70r5NtY02yPOdpl+BFg
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:41 2026 by rpki-client