
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/10B69CB69A7811EFB88E9513C4F9AE02.roa
File: 10B69CB69A7811EFB88E9513C4F9AE02.roa (raw, json)
Hash identifier: zuURI07gyd5WQyCkPGGbwO63XybgzHMpUpLwoLd6OuY=
Subject key identifier: 78:71:E0:EF:26:F4:37:A0:24:27:35:AB:A3:DB:9A:3C:B3:C6:41:4F
Certificate issuer: /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Certificate serial: 0108
Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/10B69CB69A7811EFB88E9513C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:01:01 +0000
ROA not before: Thu 03 Jul 2025 07:11:31 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137924
IP address blocks: 203.32.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Validity
Not Before: Jul 3 07:11:31 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5981c-b4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:a5:65:f5:8e:43:32:e0:6b:8e:cd:e3:de:
78:95:cb:0d:5b:39:df:ad:48:d3:45:21:c0:e0:c0:
a1:3d:74:4e:c9:4c:87:50:47:46:cc:15:57:b5:55:
9a:a3:d2:3a:e9:db:78:0a:17:f5:39:00:08:32:f1:
fd:9d:e3:22:1c:d9:fc:47:cd:ea:9f:e4:79:28:3c:
e9:d0:45:62:a8:11:b5:4f:0d:eb:be:23:c1:5a:09:
81:26:c3:7e:5a:95:d5:43:52:68:98:26:26:e3:77:
98:3a:2c:06:8c:24:d5:09:fd:24:00:43:d6:0e:a6:
bd:26:3e:2c:84:a3:68:87:d6:fc:c4:f8:4f:f1:4b:
97:ba:fd:f0:9b:12:42:27:b3:f5:75:1b:8f:c1:65:
b1:f9:c1:82:4a:e4:08:f3:7e:3a:cb:1b:d9:6f:54:
60:13:b6:1f:be:4d:99:87:b2:e6:d4:a1:1b:7c:df:
02:18:8b:0e:3e:76:25:6c:9f:e9:97:9b:19:ab:25:
73:55:e6:46:24:fc:49:f2:38:48:ff:3e:f4:6e:fb:
bf:69:00:35:9f:ea:66:18:fa:25:aa:96:0d:39:d0:
ba:59:4d:f3:6d:67:f9:e8:57:6e:5c:ba:c5:24:ce:
fe:72:ea:81:32:91:48:9a:f5:11:c3:b6:1c:f9:aa:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:E0:EF:26:F4:37:A0:24:27:35:AB:A3:DB:9A:3C:B3:C6:41:4F
X509v3 Authority Key Identifier:
keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/10B69CB69A7811EFB88E9513C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.32.180.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:69:1e:5e:e8:fe:cb:c8:f0:2d:00:e2:e4:9c:78:c4:a3:a1:
a8:a2:44:48:ad:8c:20:fa:08:03:c9:7b:1e:c2:c1:bc:c7:8f:
38:ff:b6:b2:51:69:1a:92:47:ee:dc:b8:32:a4:b5:43:85:06:
95:8e:db:60:9c:8c:00:c2:02:19:32:ab:6b:76:ff:44:d3:00:
d1:55:48:18:a4:f6:13:4e:69:96:74:ab:d3:aa:2e:de:79:36:
56:b5:45:80:12:1d:ae:ba:36:6d:02:81:fc:f2:d8:20:06:b4:
42:c0:d3:25:b9:5d:25:c9:94:d5:52:27:db:58:dd:88:9d:34:
57:8d:ef:c1:8e:0a:d7:60:e9:75:d6:ee:af:2f:a3:c5:43:53:
09:c3:56:dd:9d:d0:cf:80:2c:63:78:1d:f9:0f:1f:40:e2:f8:
e7:21:07:10:4c:62:86:a9:1c:26:8c:61:b7:bd:a5:da:73:3e:
e7:8a:2e:de:fc:4a:cd:3c:aa:d2:53:ff:85:11:19:67:1a:32:
90:87:0c:e7:b9:1d:c0:73:1f:ce:45:2a:21:2e:0d:d9:e2:95:
de:f1:59:77:1c:ab:af:a2:2d:dd:b8:37:b5:6e:75:6f:11:50:
e8:1d:3f:d6:cd:e9:b5:7e:12:9f:80:d4:53:1b:64:96:5b:c7:
8d:90:28:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:29 2026 by rpki-client