
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/683A9D3A52EF11EC83A5744EC4F9AE02.roa
File: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (raw, json)
Hash identifier: tzCOvyqYt7MFJ8SNbSmhb4aGjE+HioiUqoKryi7LaSA=
Subject key identifier: 98:A1:20:BE:C4:34:CD:76:71:69:4C:17:27:DE:3F:A7:9B:97:96:29
Certificate issuer: /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial: 04E9
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/683A9D3A52EF11EC83A5744EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:46:59 +0000
ROA not before: Fri 14 Nov 2025 22:45:00 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 148988
IP address blocks: 103.175.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Validity
Not Before: Nov 14 22:45:00 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a43543-f468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:cf:64:71:59:f4:a1:48:a7:08:81:69:fd:
b1:76:ce:c4:08:ab:b1:43:cb:ea:dd:47:16:41:ae:
57:4c:50:bd:01:f5:a1:e6:84:e8:93:79:9b:3a:56:
20:05:4d:5f:b8:6e:36:6e:a8:c9:f6:88:5a:ec:4e:
6f:8c:c2:b5:10:79:67:5e:c4:66:1a:fb:47:b8:61:
29:21:66:7e:e8:c1:02:d0:0a:62:d4:28:de:9d:69:
17:97:9d:a6:fc:51:5d:9e:ca:92:0d:f8:de:d4:9a:
24:f7:77:e6:57:d4:37:bb:23:9f:7e:cd:f6:d6:82:
5c:89:e9:63:e7:14:d3:16:e3:da:eb:8d:5d:cf:51:
5e:01:cf:d5:ed:18:8b:e5:81:54:63:73:7e:5b:4e:
43:0b:91:82:dc:73:23:63:5d:1a:54:55:f1:41:7b:
66:ef:5d:c7:4d:85:68:16:9b:8d:37:57:cb:1d:4f:
a1:b9:f0:2e:9f:41:c6:22:14:64:24:9a:36:34:40:
35:2a:26:c4:dc:e6:2f:b7:45:56:f8:65:f7:32:57:
b4:d6:19:84:fb:3b:c0:1f:97:b0:7d:6f:9b:a8:0d:
c7:91:d3:c4:0b:f7:23:ae:38:a5:84:d3:3a:36:ef:
2c:8f:0b:49:bb:f0:3c:dc:89:f8:51:35:e0:33:28:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A1:20:BE:C4:34:CD:76:71:69:4C:17:27:DE:3F:A7:9B:97:96:29
X509v3 Authority Key Identifier:
keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/683A9D3A52EF11EC83A5744EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.175.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7e:c6:38:d8:cc:4e:35:21:97:6f:83:38:f2:f3:b4:c3:2a:
69:a2:4b:83:5f:10:75:49:12:74:cc:4e:85:7d:d7:9a:8a:ca:
ef:b5:58:71:4c:1c:f6:82:23:2a:d0:75:34:0e:47:54:59:03:
59:e2:71:9d:8e:3b:38:ea:50:58:ef:97:5d:9f:0d:05:60:5a:
25:fd:9c:39:cd:b7:9a:91:7b:26:d2:85:a0:09:02:65:fc:ab:
3d:3a:6c:c0:3e:11:d2:26:0b:dc:4b:c8:c2:7f:77:73:b5:e0:
62:70:8f:2c:30:13:82:9d:54:72:25:47:35:99:81:8e:fe:2b:
03:25:64:66:32:22:50:ce:0c:7a:bf:0e:2e:ce:ab:35:b3:cf:
f0:81:2b:1d:c8:bf:36:5a:42:4f:96:41:76:57:dd:b9:ce:2f:
e5:77:cc:4c:09:15:6f:76:ce:f7:6c:94:78:75:76:70:cf:0c:
86:44:c7:7d:24:61:92:40:43:62:ce:99:ed:a1:26:57:5f:18:
b4:9d:f0:ad:df:91:8b:c6:55:c2:86:a1:5f:19:66:be:fc:2f:
5e:30:b0:f4:4a:46:53:6c:47:c6:04:74:04:f7:cd:d7:d9:49:
75:b9:33:df:1e:43:4e:11:ea:5d:18:66:7b:27:d9:58:e7:d0:
11:55:54:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:46 2026 by rpki-client