
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
File: 8325B5147FE911F09A568E85C4F9AE02.roa (raw, json)
Hash identifier: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=
Subject key identifier: 09:0E:20:D3:62:94:F8:0C:F9:7F:CC:14:74:CF:7E:E6:43:B9:AE:DF
Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial: 0CFD
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:35:04 +0000
ROA not before: Tue 02 Dec 2025 17:48:44 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 135654
IP address blocks: 103.78.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3325 (0xcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Validity
Not Before: Dec 2 17:48:44 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45ca8-fa12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:27:da:c7:9f:ec:26:4c:73:9b:51:39:9f:
24:fb:1c:a5:3c:53:9f:35:89:b8:2f:13:7a:1b:17:
3d:fd:01:28:a4:29:25:16:a6:b3:4e:37:d6:f1:39:
8d:f2:18:9a:b2:94:1c:51:02:93:b7:e1:a0:9f:fc:
9f:f6:e3:a0:8c:e0:3e:15:f5:4c:28:da:6d:2c:47:
90:00:fc:06:2a:13:49:70:13:c7:1e:34:f7:f7:bd:
f6:ab:6a:93:04:b3:e6:da:43:cf:ea:bd:40:3d:f3:
22:f7:f6:b4:79:f9:56:ef:4e:37:c9:46:7f:e6:27:
bb:65:0c:56:db:ed:74:6d:43:01:6e:1b:71:dc:fd:
e1:53:83:84:54:87:39:30:00:fa:cc:3e:91:8c:1c:
7d:79:45:50:59:2e:61:50:4c:7e:52:f4:de:c9:01:
da:ce:4e:21:4c:a6:3a:bd:a5:b6:69:ea:9e:8e:7f:
4a:e8:be:48:d6:19:9d:c9:90:4a:90:bb:3d:1f:a4:
28:e8:3a:87:d9:08:3b:64:a9:14:6f:6a:de:b8:79:
fc:07:c0:6f:9c:c4:56:cd:37:98:4c:48:e0:22:2e:
eb:7f:a8:be:51:63:2b:ec:6d:23:be:b6:d4:f5:a4:
a6:b0:67:2b:22:7b:f8:9d:82:30:a7:40:ca:d6:e9:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0E:20:D3:62:94:F8:0C:F9:7F:CC:14:74:CF:7E:E6:43:B9:AE:DF
X509v3 Authority Key Identifier:
keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.78.52.0/22
Signature Algorithm: sha256WithRSAEncryption
84:01:fb:33:f7:83:09:43:7f:ff:11:d0:b6:13:85:e9:63:fc:
97:93:e3:19:e3:01:8b:ac:fa:e0:4c:a0:b1:8b:51:da:63:60:
9e:07:40:b9:c4:4a:49:25:ce:20:f0:3e:d1:53:a3:de:20:0d:
1b:f0:de:68:70:00:95:81:8f:56:31:a3:04:97:9e:70:36:20:
6c:e5:8f:de:ba:3b:47:9e:be:3d:60:54:29:7d:9b:35:14:c7:
df:7f:58:d0:8e:09:35:9d:6f:ae:31:62:22:99:d4:05:1c:89:
71:aa:db:bf:c1:31:f2:98:99:4a:3e:fe:63:97:9b:f1:a0:b3:
33:ce:ce:34:74:e6:3d:c7:7c:8a:6a:12:55:32:07:ed:44:0a:
f0:5c:c8:23:c7:2b:ce:dc:a8:98:84:3b:c8:36:28:7f:76:f3:
51:8a:ab:a6:fc:44:ae:a6:8a:f1:c8:ab:cb:95:7b:e3:a0:2d:
dd:75:23:ea:a3:d8:3d:53:7c:50:9a:6f:f5:b0:11:e3:16:dc:
98:58:1b:b3:6c:cf:a9:5f:92:ee:49:3b:73:b5:ae:79:ba:30:
96:8b:10:c4:73:ed:43:29:a7:f4:8f:2f:ce:e7:ea:e8:48:de:
05:0b:b0:26:b6:1b:0e:ad:4e:e4:ae:e6:e0:64:9f:61:ed:0a:
29:b3:61:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:07 2026 by rpki-client