
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa
File: BEDFF33EAD8F11F0B669681EC4F9AE02.roa (raw, json)
Hash identifier: EzUITh41blxqcV425viSW52eQ/6/TgoZvTBJG30visg=
Subject key identifier: 79:E1:0C:BC:AF:DE:89:D9:6F:11:B4:85:40:76:B0:5F:5F:4F:AC:02
Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial: 02A2
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:25:31 +0000
ROA not before: Mon 03 Nov 2025 01:46:43 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 153385
IP address blocks: 103.12.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Validity
Not Before: Nov 3 01:46:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4768b-0eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:7c:54:80:59:d9:83:2a:c2:31:00:6a:0f:
fb:fd:e0:21:c2:e4:7a:f1:45:48:9d:30:9d:7e:c1:
39:60:52:ed:86:12:b5:43:ba:6e:7f:00:c5:f4:da:
6c:13:8d:32:11:b0:61:7f:8d:6d:da:be:09:9d:46:
2d:d3:1f:8e:7d:82:15:37:72:5d:8d:00:3a:21:0d:
cb:74:e7:dd:76:0c:08:51:07:d8:40:03:ad:52:a4:
dc:c8:f3:d4:ab:dd:94:26:e4:62:55:82:99:5f:f2:
21:9c:e4:94:6b:d1:60:af:39:29:5e:1b:58:46:0d:
95:6d:65:66:08:1d:f0:01:bd:c3:d0:bd:0f:f6:7c:
7e:0d:d8:67:23:15:ed:35:cb:2a:0b:d7:f3:8b:2c:
16:7d:09:1f:60:4f:63:26:17:85:7f:f5:73:f1:ad:
90:68:0a:2a:c7:95:bc:26:00:d5:87:62:6a:ac:b5:
5f:ab:4d:cb:08:98:0b:a7:50:7f:39:b5:08:7e:f4:
e4:16:ce:c5:c6:92:cd:70:86:08:55:8e:ba:98:ee:
31:e1:63:74:b2:6a:4a:8a:17:85:b2:cd:38:58:3b:
9b:ee:24:d5:32:0e:f1:ab:bf:b5:96:3d:9c:c6:69:
06:c5:66:6e:76:86:a2:06:8b:aa:30:c8:99:d4:d7:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:0C:BC:AF:DE:89:D9:6F:11:B4:85:40:76:B0:5F:5F:4F:AC:02
X509v3 Authority Key Identifier:
keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/BEDFF33EAD8F11F0B669681EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.205.0/24
Signature Algorithm: sha256WithRSAEncryption
43:db:f3:1e:0b:ce:72:b3:e0:23:bf:a5:f9:75:67:90:cd:ef:
f0:50:a2:1d:32:f5:72:0d:df:68:1c:be:aa:b9:39:d9:10:e3:
e2:ac:45:3c:4b:b6:e6:db:27:d8:11:96:b6:f4:bd:8d:15:f5:
8a:07:33:08:66:f9:80:46:0e:e8:ea:70:55:b9:39:73:7f:dd:
e3:83:6a:92:5e:2b:78:b6:fb:e4:bc:60:d5:17:00:a7:6b:76:
95:af:a0:2e:4f:9c:0f:29:3a:56:6d:54:cb:82:75:0b:8d:14:
19:d6:cb:fd:13:de:e9:70:12:b0:af:1e:0c:8e:8d:5f:c3:89:
86:be:0d:5b:fd:c5:34:c8:4d:ec:54:3a:97:99:e5:2e:36:8c:
86:a3:79:f2:92:29:22:e3:de:e2:9d:a6:6c:98:d9:e9:7e:24:
f5:31:92:a7:b3:2e:07:e3:32:30:9b:24:ab:aa:40:55:1d:93:
1d:55:1b:ae:0c:83:27:7f:67:9a:76:b7:65:01:b7:bb:74:b9:
39:a8:2e:31:c5:a3:1a:63:47:6e:ec:01:51:a0:68:dd:2b:48:
7d:29:c3:60:dd:f7:3f:7c:6f:b1:db:ed:74:44:98:29:fc:5a:
a9:38:3b:46:9d:0f:e4:00:df:32:f0:e4:05:5e:05:6c:69:58:
cf:fd:a4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:53:41 2026 by rpki-client