
$ rpki-client -vvf rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa
File: DBC08AD4457911E9BA84DA51C4F9AE02.roa (raw, json)
Hash identifier: PxGfyB9W/rrckFKkWTDwSaYZ5fUPv1DDMqq0Qrh6HDI=
Subject key identifier: 83:84:10:45:79:96:1D:D4:FF:EC:44:8D:51:9C:89:A5:70:D0:88:DF
Certificate issuer: /CN=A913559B/serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Certificate serial: 10FB
Authority key identifier: D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:34:52 +0000
ROA not before: Thu 26 Jun 2025 17:19:19 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132277
IP address blocks: 103.12.2.0/24 maxlen: 24
103.96.108.0/24 maxlen: 24
2001:df0:2ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4347 (0x10fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913559B, serialNumber=D032E0614923F4A582338EB7636C39684AED51ED
Validity
Not Before: Jun 26 17:19:19 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4245c-ee5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:5e:85:f7:c1:9b:23:8c:c4:7f:20:90:c4:
02:cf:16:01:d3:c8:44:f2:2d:8f:a4:82:34:eb:5f:
ae:d2:a5:6a:7e:09:bc:66:1d:9c:95:74:4d:ce:ff:
36:ea:b2:18:65:07:a3:98:66:fe:9d:e1:99:82:34:
0e:1b:77:93:05:a2:74:97:74:58:2f:0b:44:74:1d:
dc:cf:12:92:23:ab:62:20:0b:b5:b5:be:a4:60:a0:
41:f4:00:71:9c:e7:6d:3f:21:d2:b7:0b:9c:df:95:
03:78:ee:fc:fe:c0:d5:df:a3:a4:0f:97:64:ff:27:
3c:2d:ff:e9:56:4c:8f:53:2f:7e:5a:6e:54:21:9f:
94:5f:f5:5c:f8:5c:a8:3d:c8:f2:dd:12:17:72:79:
8a:23:ee:15:26:dc:f1:e0:48:08:65:7e:cd:eb:d0:
db:72:d4:7e:5e:fe:bd:cd:5e:ea:dc:b9:df:5c:08:
04:be:ac:bd:73:36:7c:61:3f:d4:74:5d:24:1e:82:
4a:33:b1:e6:1f:23:34:9b:25:c5:7a:09:a6:c3:08:
07:92:f5:8f:d2:ac:6e:ff:c8:11:8b:db:46:1a:ef:
3d:d0:5f:5a:31:3d:8a:03:6a:4c:7c:05:c7:2c:20:
34:b0:38:36:70:b5:0c:cc:13:2b:94:31:8b:be:28:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:84:10:45:79:96:1D:D4:FF:EC:44:8D:51:9C:89:A5:70:D0:88:DF
X509v3 Authority Key Identifier:
keyid:D0:32:E0:61:49:23:F4:A5:82:33:8E:B7:63:6C:39:68:4A:ED:51:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/0DLgYUkj9KWCM463Y2w5aErtUe0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0DLgYUkj9KWCM463Y2w5aErtUe0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913559B/6C1A0EFA367C11E9B278F93BC4F9AE02/DBC08AD4457911E9BA84DA51C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.2.0/24
103.96.108.0/24
IPv6:
2001:df0:2ba::/48
Signature Algorithm: sha256WithRSAEncryption
46:36:b5:ac:22:a5:62:fd:43:d3:8e:a3:a4:7e:c1:f6:39:b4:
ff:87:70:15:d9:79:af:08:6b:c1:3c:5a:34:53:11:52:37:7e:
44:4e:8c:ad:91:8a:f0:56:38:41:1e:0d:9a:16:10:19:5b:a9:
51:1e:a4:50:c2:26:4f:79:69:b0:93:b5:43:58:1c:9a:34:ed:
3f:62:62:a9:d7:55:39:fd:f7:85:8c:ff:b4:33:4a:f8:87:eb:
f5:18:ad:79:e4:38:50:b8:ba:ad:cb:bd:48:0f:36:68:60:14:
c5:1c:b5:15:1d:6c:b1:61:2c:90:6c:dd:68:5d:9f:07:fc:65:
86:02:9d:92:7e:68:1f:44:77:12:5b:06:a6:81:b9:a5:3c:b8:
9c:af:38:26:2a:c3:e1:d1:78:28:93:e4:2f:0e:7a:18:a2:6c:
85:2a:48:99:f2:f6:c5:d2:71:99:7c:84:15:e8:21:fa:d1:94:
d1:6c:b3:54:30:bb:9c:24:19:9f:d7:57:e1:7e:06:2b:4f:34:
bf:a2:30:52:5f:b3:12:f6:d3:21:1c:78:96:1e:92:c6:f3:8c:
ad:89:32:63:f7:7d:89:78:7f:97:d3:ae:fd:a5:2b:59:9b:34:
4c:df:5c:90:77:8d:51:35:c6:75:6d:21:6a:4b:75:dc:57:6a:
76:49:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:39:31 2026 by rpki-client