
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/D4378BBA268311EE9BB21413C4F9AE02.roa
File: D4378BBA268311EE9BB21413C4F9AE02.roa (raw, json)
Hash identifier: MTcqJYKQSWbXz9c0TU/Gou0e9JwbmPGGOgnQpbsTvgs=
Subject key identifier: 57:65:DF:03:E5:60:5D:1F:BB:48:AB:8C:14:13:1D:F6:CE:AD:20:37
Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial: 0A6D
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/D4378BBA268311EE9BB21413C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:31:37 +0000
ROA not before: Sat 08 Mar 2025 20:10:41 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 141342
IP address blocks: 103.82.252.0/24 maxlen: 24
103.82.253.0/24 maxlen: 24
103.82.254.0/24 maxlen: 24
103.82.255.0/24 maxlen: 24
125.62.88.0/24 maxlen: 24
125.62.89.0/24 maxlen: 24
125.62.90.0/24 maxlen: 24
125.62.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2669 (0xa6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DE7A, serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Validity
Not Before: Mar 8 20:10:41 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a40779-531d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:62:4c:59:30:a8:6a:4d:f1:c2:b2:a4:82:
c9:89:db:fe:41:09:fd:9e:cd:13:92:12:1c:59:7c:
ac:3b:cd:13:42:e9:56:33:69:b5:e6:b1:e6:98:eb:
31:82:56:db:de:eb:aa:d4:6f:3e:14:08:52:0a:5c:
5c:f5:f0:1d:b4:bf:60:1a:d2:da:f0:23:be:b1:66:
2b:9f:78:82:08:a5:89:bd:2f:3a:9e:4d:7f:b3:04:
26:b7:86:d9:1f:52:5e:4c:f3:f8:45:14:89:dd:85:
46:96:41:20:29:fd:5f:19:3a:b9:04:5b:b3:ea:7c:
8d:a9:45:1b:e8:d6:2e:62:4b:3e:ca:80:2f:bd:48:
2f:f6:0c:ac:47:78:04:fc:6e:ea:b8:7d:cf:20:32:
83:81:28:90:fc:f8:11:f2:9e:32:1b:1d:f7:14:38:
d6:c4:ce:a8:17:f3:6f:65:05:ac:78:1a:90:7a:11:
0a:b9:04:24:b3:8d:35:53:7b:64:f2:b9:83:eb:6d:
9e:cf:3f:9e:75:e7:f8:68:f9:97:53:f2:74:26:3a:
65:a0:9b:e2:69:76:9b:5c:04:1f:1d:be:67:c8:68:
dc:a4:22:f6:67:00:aa:32:3b:f3:ad:4a:ad:11:21:
b2:c6:3e:93:3e:97:0a:9e:30:5d:ce:79:a3:cc:b3:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:65:DF:03:E5:60:5D:1F:BB:48:AB:8C:14:13:1D:F6:CE:AD:20:37
X509v3 Authority Key Identifier:
keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/D4378BBA268311EE9BB21413C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.82.252.0/22
125.62.88.0/22
Signature Algorithm: sha256WithRSAEncryption
73:99:b8:fd:ec:b5:fc:54:ad:c6:90:72:5b:a9:22:57:03:77:
52:18:b5:8e:65:07:32:03:cd:d4:13:89:8f:ef:a0:c0:3f:3e:
cd:d0:01:70:2a:e5:51:3f:0e:4a:ab:af:07:d5:96:e4:c7:7a:
02:5f:68:2e:1a:59:da:46:d0:3e:98:a0:d9:42:7d:27:5b:b3:
0e:3c:d8:26:e1:12:a9:9c:76:dc:29:90:36:78:8f:76:04:8a:
86:76:1b:fe:c9:f2:f5:19:01:57:15:b5:36:74:f4:df:17:fe:
6b:cc:4b:29:2b:b6:a0:53:f2:1b:88:30:f5:e1:00:9e:c7:67:
4e:63:ae:3d:ad:e2:17:63:b4:8e:57:e1:f8:98:b0:11:2d:30:
23:ff:31:75:3c:fa:6e:f7:e0:0a:d3:cc:a0:f3:5c:6d:99:86:
83:9e:84:b2:84:9c:28:40:cb:21:4a:ea:ab:d3:3d:f4:bc:b9:
57:db:df:37:71:ed:6c:99:be:e3:56:50:2e:e4:6b:3e:e6:8c:
df:a3:3a:5d:7c:c4:77:08:b0:df:f6:43:39:b5:81:0c:c3:81:
36:98:a2:84:ea:5d:7a:32:08:b9:fa:e1:6e:ca:91:f6:a6:d1:
df:fd:69:d3:60:23:85:9c:fb:7e:55:51:fe:aa:df:26:6d:62:
7d:94:61:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:47 2026 by rpki-client