
$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa
File: CE9692E0222311EAAED0162CC4F9AE02.roa (raw, json)
Hash identifier: W05cTvwuZ3N93hWfUJPpUsDgcMlEbyJ5596px1i50nc=
Subject key identifier: 7F:08:85:8A:7D:05:C2:D0:A1:D4:BA:71:FB:4C:87:90:7F:F3:01:09
Certificate issuer: /CN=A913AE7C/serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Certificate serial: 0C41
Authority key identifier: 86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:43:06 +0000
ROA not before: Thu 24 Jul 2025 19:29:39 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 58655
IP address blocks: 103.12.172.0/22 maxlen: 22
103.12.172.0/24 maxlen: 24
103.12.173.0/24 maxlen: 24
103.12.174.0/24 maxlen: 24
103.12.175.0/24 maxlen: 24
2404:7500::/32 maxlen: 32
2404:7500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl
rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:53:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3137 (0xc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE7C, serialNumber=86811BB267AEF85400DBE72970232D411A2D9AE9
Validity
Not Before: Jul 24 19:29:39 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4264a-08b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:bf:99:26:34:a7:24:a1:32:3e:8b:32:f9:
bc:ba:90:28:90:1d:b3:98:da:83:9f:29:09:2e:e5:
90:89:7a:ed:5d:2b:17:e9:65:22:8d:76:3e:2c:14:
1b:cd:84:82:08:01:f0:16:d6:dc:2c:ca:4a:64:a6:
38:46:62:18:e1:ea:21:a5:a2:f9:2b:77:51:11:27:
25:0d:f6:6b:5c:47:71:78:34:c3:0e:d1:f3:bf:7c:
3c:e1:e5:5e:27:23:e7:a5:6d:1a:de:af:78:5d:3b:
34:ec:77:f9:c5:a4:a6:47:86:57:0a:9a:f4:82:34:
89:af:2c:fd:2f:01:c1:2c:50:be:21:c8:b9:8c:80:
db:da:00:24:c1:94:ab:12:5a:c6:bb:32:84:93:65:
9e:bf:43:62:5e:c0:b3:20:ea:9e:09:d0:29:3b:03:
b7:8a:82:c7:d5:ea:96:52:21:4a:d9:1e:32:93:c6:
f2:62:01:27:d0:79:ad:1d:b0:86:25:08:c7:ed:c1:
36:67:b9:b3:cf:e4:31:74:0e:4d:03:0d:62:22:60:
55:d1:ea:b3:f1:9a:91:7e:cc:f3:e0:67:04:7f:b0:
14:19:e4:89:fd:b2:de:fd:19:1d:3e:d1:57:b5:75:
1f:e1:b4:0d:8b:6e:9f:16:76:3d:b1:9b:0a:63:4b:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:08:85:8A:7D:05:C2:D0:A1:D4:BA:71:FB:4C:87:90:7F:F3:01:09
X509v3 Authority Key Identifier:
keyid:86:81:1B:B2:67:AE:F8:54:00:DB:E7:29:70:23:2D:41:1A:2D:9A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/hoEbsmeu-FQA2-cpcCMtQRotmuk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hoEbsmeu-FQA2-cpcCMtQRotmuk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE7C/F3407E54222211EA877DD52AC4F9AE02/CE9692E0222311EAAED0162CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.172.0/22
IPv6:
2404:7500::/32
Signature Algorithm: sha256WithRSAEncryption
89:74:94:df:a4:f3:a2:b4:af:72:de:3d:d4:e3:3d:01:0b:7e:
8d:05:eb:3f:69:4c:a7:34:16:01:6f:ce:41:03:ba:71:35:3e:
6d:42:08:45:91:a4:5c:5d:5b:09:cc:cb:c1:2d:ac:3b:7e:b5:
a1:9d:9e:8d:01:20:7d:95:10:93:da:b9:b7:9d:c7:d9:f6:40:
15:f3:a9:47:12:b2:55:a0:47:55:4a:38:10:60:44:3c:24:0a:
0c:00:f9:bc:d5:1a:a2:30:83:e3:1d:1c:de:89:bd:a7:54:fb:
bd:ab:fe:20:ba:e2:b5:c5:e9:a8:79:c9:2a:05:17:77:a1:8c:
30:19:86:77:24:fb:d9:f8:e1:39:e2:ca:9d:23:57:d3:21:25:
19:b1:92:50:ce:36:33:9a:df:67:cc:16:7b:3f:87:2d:e9:50:
a7:85:f0:d1:90:30:10:0c:39:6e:54:ce:bc:1c:c0:af:6d:f5:
dc:e5:7c:b2:8b:9b:df:df:e9:62:9e:63:8f:b1:20:13:05:2f:
1b:3f:42:ab:b1:a9:44:99:d2:0e:db:b7:e5:1d:92:20:c5:60:
3f:e2:52:18:69:f9:46:ad:f0:03:24:5f:3d:d1:b7:24:a7:45:
b2:52:46:4b:2a:5d:b5:54:9e:9d:99:f1:37:73:12:53:3b:56:
80:fa:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:28 2026 by rpki-client