
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa
File: 0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa (raw, json)
Hash identifier: OzzisHqp9aMxr1INfPGQv4pLf3uDSdbaDwDpJkSYQh8=
Subject key identifier: 78:38:B0:37:FE:CA:96:3F:37:4B:30:4F:A3:52:0F:AB:23:1C:31:39
Certificate issuer: /CN=A913A839/serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA
Certificate serial: 0AC9
Authority key identifier: 60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:00:09 +0000
ROA not before: Thu 30 Oct 2025 19:39:04 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 139680
IP address blocks: 103.143.150.0/23 maxlen: 24
2405:5640::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl
rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2761 (0xac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A839, serialNumber=60AB3CFFAB88A51342B816F059019F073E9500AA
Validity
Not Before: Oct 30 19:39:04 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44669-38a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:30:b4:63:00:a7:a2:73:ab:77:fc:05:24:
ec:8f:7b:73:b7:ab:74:1e:f4:d2:bb:63:8d:0c:f7:
55:99:a5:59:9c:57:f4:cf:34:64:eb:ab:a1:93:2d:
a7:dd:c7:af:67:4d:0b:6b:ab:f1:ef:d6:3f:48:34:
50:85:14:b6:2b:b5:ef:ca:cb:c8:24:ad:cc:c1:a7:
d5:f9:e8:35:90:d3:31:65:14:f8:ca:a3:d8:90:61:
8b:c7:1e:10:d6:07:d4:80:4a:db:43:ea:62:7b:c9:
5a:90:bb:c0:d6:7b:4f:38:c1:ad:df:11:88:d7:b5:
d4:7d:9f:98:cd:e7:87:76:5f:4c:50:80:5a:99:3d:
85:d8:83:cd:5d:ee:ec:59:62:fd:38:d8:0f:6d:bb:
af:b0:0d:cf:55:83:9f:88:8a:fe:7f:27:dc:44:e2:
c0:46:4b:db:db:12:5c:76:a4:8b:2a:d0:65:6c:ff:
f6:5d:c9:ea:b4:45:9a:dd:80:d7:d5:a8:49:40:e5:
07:ba:f9:b5:ea:2e:ec:40:4a:a7:4f:06:2d:73:3b:
3c:63:b9:d1:49:34:2e:26:b9:7c:f2:fa:90:ac:ec:
b9:d3:f3:49:5c:6c:f7:80:f2:8d:69:68:9e:7a:b2:
2a:2e:b4:e5:70:75:0e:f2:21:9f:01:67:f0:be:2b:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:38:B0:37:FE:CA:96:3F:37:4B:30:4F:A3:52:0F:AB:23:1C:31:39
X509v3 Authority Key Identifier:
keyid:60:AB:3C:FF:AB:88:A5:13:42:B8:16:F0:59:01:9F:07:3E:95:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/YKs8_6uIpRNCuBbwWQGfBz6VAKo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YKs8_6uIpRNCuBbwWQGfBz6VAKo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A839/C0E03CF46C2F11EA8CEC946EC4F9AE02/0DCB1BDC6C3111EA8F4E9B70C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.143.150.0/23
IPv6:
2405:5640::/32
Signature Algorithm: sha256WithRSAEncryption
43:a7:86:db:78:43:e3:9e:29:fc:37:0f:6a:10:ed:58:7f:1c:
50:39:83:f5:0d:b9:d1:b9:a6:cc:6b:99:29:7c:91:ab:8e:4f:
91:48:c1:eb:3a:b5:50:ef:88:71:c8:bb:bb:59:3a:9c:9d:9a:
82:6d:22:dd:ef:ba:0d:44:dc:36:7a:cd:3f:0c:1a:71:b5:cf:
c6:4f:da:13:f0:b9:e5:ad:57:a8:14:ab:60:dd:bc:ed:73:a9:
ef:d8:de:df:2e:25:05:b6:2f:25:c8:80:11:de:f2:1a:13:96:
1c:4d:7b:c8:99:4b:8d:06:c6:13:c4:ec:73:c0:82:a4:4e:ff:
ca:ba:61:c2:8d:b4:92:d4:c6:09:3a:8d:83:83:1c:72:a9:d9:
65:0b:cc:8d:d8:03:9c:95:53:eb:8b:d8:d9:73:2a:7f:bd:e4:
d9:28:5d:ec:08:67:41:af:9f:15:20:52:d0:5c:58:d0:31:91:
71:33:00:9a:0c:80:b3:12:f2:53:b5:b9:5c:9e:9a:6a:98:96:
24:b7:d5:1d:71:ef:03:2e:84:7d:6e:b7:6d:cf:07:53:b3:04:
04:60:4c:59:69:d3:e7:7c:0c:03:d7:18:54:22:dd:3a:dc:ec:
4b:6d:37:bf:ab:b6:03:5a:8d:53:fb:c6:73:f0:5f:34:64:84:
65:6f:cd:fd
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICCskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E4MzkxMTAvBgNVBAUTKDYwQUIzQ0ZGQUI4OEE1MTM0MkI4MTZGMDU5MDE5RjA3
M0U5NTAwQUEwHhcNMjUxMDMwMTkzOTA0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NDY2OS0zOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnuEwtGMAp6Jzq3f8BSTsj3tzt6t0HvTSu2ONDPdVmaVZnFf0zzRk66uhky2n
3cevZ00La6vx79Y/SDRQhRS2K7XvysvIJK3MwafV+eg1kNMxZRT4yqPYkGGLxx4Q
1gfUgErbQ+pie8lakLvA1ntPOMGt3xGI17XUfZ+YzeeHdl9MUIBamT2F2IPNXe7s
WWL9ONgPbbuvsA3PVYOfiIr+fyfcROLARkvb2xJcdqSLKtBlbP/2XcnqtEWa3YDX
1ahJQOUHuvm16i7sQEqnTwYtczs8Y7nRSTQuJrl88vqQrOy50/NJXGz3gPKNaWie
erIqLrTlcHUO8iGfAWfwvis2bQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHg4sDf+
ypY/N0swT6NSD6sjHDE5MB8GA1UdIwQYMBaAFGCrPP+riKUTQrgW8FkBnwc+lQCq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTgzOS9DMEUwM0NGNDZD
MkYxMUVBOENFQzk0NkVDNEY5QUUwMi9ZS3M4XzZ1SXBSTkN1QmJ3V1FHZkJ6NlZB
S28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lLczhfNnVJcFJOQ3VCYndXUUdmQno2VkFLby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0E4MzkvQzBFMDNDRjQ2QzJGMTFFQThDRUM5NDZFQzRGOUFFMDIvMERDQjFCREM2
QzMxMTFFQThGNEU5QjcwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ4+WMA0EAgACMAcDBQAkBVZAMA0GCSqGSIb3DQEBCwUAA4IBAQBD
p4bbeEPjnin8Nw9qEO1YfxxQOYP1DbnRuabMa5kpfJGrjk+RSMHrOrVQ74hxyLu7
WTqcnZqCbSLd77oNRNw2es0/DBpxtc/GT9oT8LnlrVeoFKtg3bztc6nv2N7fLiUF
ti8lyIAR3vIaE5YcTXvImUuNBsYTxOxzwIKkTv/KumHCjbSS1MYJOo2Dgxxyqdll
C8yN2AOclVPri9jZcyp/veTZKF3sCGdBr58VIFLQXFjQMZFxMwCaDICzEvJTtblc
nppqmJYkt9Udce8DLoR9brdtzwdTswQEYExZadPnfAwD1xhUIt063OxLbTe/q7YD
Wo1T+8Zz8F80ZIRlb839
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:10 2026 by rpki-client