
$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/1E95063A21E611EEB4824339C4F9AE02.roa
File: 1E95063A21E611EEB4824339C4F9AE02.roa (raw, json)
Hash identifier: GI2gsqu+J1XF+zcAjfZl0XcQJgQ0GxaRaSah+zU//tg=
Subject key identifier: 7D:9E:41:E8:8D:21:52:6B:E1:A0:0E:76:92:D2:6D:3C:60:EB:D0:BE
Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial: 0B5B
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/1E95063A21E611EEB4824339C4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:57:12 +0000
ROA not before: Sat 08 Feb 2025 19:38:06 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 140212
IP address blocks: 103.148.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2907 (0xb5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Validity
Not Before: Feb 8 19:38:06 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a59738-c81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:37:d8:b2:af:a7:06:b9:51:96:f0:1d:44:63:
09:76:31:a7:6b:64:d4:84:b0:fd:be:01:a3:d2:9c:
66:41:6e:87:6d:14:4f:7b:47:2e:f7:4c:58:16:4d:
63:4b:0e:62:72:07:d2:6b:df:c1:86:ed:93:93:db:
c4:34:e0:8e:0e:8c:0a:bb:bc:80:49:3e:16:ce:aa:
44:a0:af:26:fe:78:18:05:6f:12:23:43:fe:45:b7:
2a:d8:42:b3:ee:79:4b:29:c4:57:8d:ba:d1:c5:35:
f6:ce:8e:47:be:f3:46:2a:36:74:b9:a3:47:60:83:
d0:d6:0f:21:ad:13:fe:4f:43:d3:4e:f1:4e:00:86:
11:a4:5e:65:63:2e:1e:4f:a1:cb:4d:61:a7:03:fa:
54:6a:ef:b6:20:51:2a:cc:53:c3:06:db:d3:1d:40:
88:ab:80:45:55:20:0d:09:a4:ac:83:5c:ff:49:6d:
4c:4f:ac:68:92:4b:7e:e8:9f:4e:5a:e9:94:f0:e4:
4f:b4:6d:cc:5f:ad:b3:0d:39:bd:fc:cb:5a:24:69:
1b:61:92:76:c0:cd:e1:12:07:c2:c4:23:24:e2:39:
2e:89:b1:3f:85:37:2d:11:7c:46:ee:c0:80:56:7e:
53:9e:4e:e7:30:a4:f7:2d:57:88:71:02:a4:e8:43:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9E:41:E8:8D:21:52:6B:E1:A0:0E:76:92:D2:6D:3C:60:EB:D0:BE
X509v3 Authority Key Identifier:
keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/1E95063A21E611EEB4824339C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.150.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:21:11:e9:fa:12:ac:aa:c8:10:1c:8e:f1:d0:d9:b0:3a:ca:
c8:47:b7:cc:d2:c9:77:44:f4:4d:f8:44:a6:b3:d6:93:77:48:
6a:41:43:74:a8:f1:9b:ca:21:2d:ef:6d:84:57:6c:ab:7a:8a:
27:c9:ac:ce:43:ba:d3:60:c2:cf:c9:9a:7e:05:ce:64:35:0e:
20:99:66:9a:f3:aa:9e:62:69:35:35:25:3d:e1:de:66:b9:7f:
6c:24:93:d6:cc:7d:08:3f:c0:e8:7d:53:65:16:48:5a:9f:9f:
65:2e:ab:12:45:6d:8b:ac:e0:b6:34:37:8b:8c:87:21:d8:bc:
65:a6:5d:93:fa:ba:4e:2d:b0:9b:33:17:96:2d:54:e3:ec:0a:
8a:3b:67:7d:29:7d:44:1f:b8:f4:38:99:38:81:9c:9b:6c:f7:
8b:5a:a2:10:03:61:88:6c:86:fa:67:4e:77:fc:c0:9f:9b:1f:
ca:77:d5:17:a2:89:2b:c5:53:29:8a:52:57:17:98:5c:17:0b:
0f:75:2e:85:ac:54:91:63:38:ef:49:ed:ec:8b:60:0b:c2:61:
c3:b7:6c:20:5c:97:81:3b:ea:d4:27:01:cd:70:46:ca:76:d0:
b1:c2:ee:8a:c9:04:f2:8c:74:15:fc:a3:03:01:dd:a7:04:37:
87:dc:50:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:09 2026 by rpki-client