
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/ED55D842ADB111F08582AD1BC4F9AE02.roa
File: ED55D842ADB111F08582AD1BC4F9AE02.roa (raw, json)
Hash identifier: vnOg2u5nZQ11gsb7K4vHWE+A+A3DwNil5+tqHXo/+no=
Subject key identifier: 5E:8B:F4:F6:C5:E4:95:96:A2:13:D9:40:D8:08:86:29:9B:A1:7F:1A
Certificate issuer: /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial: 02A1
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/ED55D842ADB111F08582AD1BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:25:30 +0000
ROA not before: Mon 03 Nov 2025 01:46:42 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150327
IP address blocks: 103.12.204.0/24 maxlen: 24
2400:ae20::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Validity
Not Before: Nov 3 01:46:42 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4768a-0c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:9e:3b:dc:dd:b2:a7:f7:86:7b:40:a5:cd:
04:28:c5:38:f3:3b:bb:01:e8:58:36:64:43:09:ac:
14:1b:1f:10:fa:d7:db:25:87:cf:d4:42:25:3c:da:
29:e5:df:b5:6c:bc:5b:6d:56:2e:f2:cb:b3:e7:2e:
29:2b:a2:0a:c5:7b:f8:54:44:eb:67:c0:88:4b:4a:
38:37:48:1d:c8:e2:fd:3f:98:53:d7:07:d4:c6:5e:
60:5a:67:cd:ac:a4:81:ff:b6:b3:85:3e:e1:bf:15:
d0:f7:f8:aa:db:08:0c:9e:71:40:ef:09:44:bd:95:
08:47:1f:fc:a7:b5:84:56:4f:bd:71:07:0b:5f:83:
ec:55:89:01:fe:47:4a:06:ce:bf:10:69:c1:cd:ad:
2d:a5:cc:19:27:19:ac:14:6e:fe:58:c9:ce:8d:04:
e2:6b:30:03:59:2b:d8:05:0f:86:9e:62:69:fa:e0:
ca:3e:22:d1:5c:94:25:60:75:16:77:a6:91:42:8b:
37:64:d2:52:63:a2:5f:9e:6f:66:75:03:23:f3:8a:
5c:e5:42:87:54:4b:42:7a:de:81:26:d5:02:84:0d:
f2:94:fe:4f:e5:26:36:8b:8e:01:32:65:76:fd:03:
e1:bb:07:89:a3:7b:16:17:cc:23:82:cd:b8:f4:83:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8B:F4:F6:C5:E4:95:96:A2:13:D9:40:D8:08:86:29:9B:A1:7F:1A
X509v3 Authority Key Identifier:
keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/ED55D842ADB111F08582AD1BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.204.0/24
IPv6:
2400:ae20::/32
Signature Algorithm: sha256WithRSAEncryption
25:ea:94:36:91:2d:0b:90:1b:ea:5d:7c:bc:8f:0c:47:23:78:
44:69:47:5c:52:8f:69:da:8b:3d:d6:52:bc:74:3e:e9:e6:45:
ab:6c:a5:55:85:1b:4a:2a:2c:00:d8:dd:83:ff:38:f3:8f:1a:
79:f5:ff:a3:08:c1:b3:43:3b:20:82:0f:04:50:3b:1e:2a:a8:
a9:c1:2d:90:32:7b:8e:5b:8f:7e:90:db:4c:32:4b:80:5d:9b:
7a:7e:a7:2a:5f:08:a9:7e:2f:df:fb:16:75:b0:fc:be:ac:30:
04:0d:05:e9:73:5a:72:65:d5:90:57:84:03:38:39:f7:6f:3f:
21:64:99:18:fc:65:b6:15:1f:96:d8:db:87:8f:ee:7b:3f:71:
fc:fa:fa:7a:9e:62:91:73:1c:84:78:86:a8:00:fa:a6:5d:bc:
e5:70:82:97:b9:c0:42:72:b6:1b:9a:f1:95:fd:13:26:90:38:
ad:a5:ec:cd:43:e1:a1:0e:ad:6f:71:85:6c:a0:38:93:2a:30:
b3:96:f8:61:d4:3b:e1:e0:f9:77:a2:cc:58:92:db:14:40:fb:
27:55:b6:8b:cb:4a:6a:7e:49:40:f0:0e:62:91:72:8a:63:ce:
55:1a:bf:89:fa:a0:e2:de:75:6f:12:1a:3e:2a:4f:45:23:f3:
e8:44:c1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:48 2026 by rpki-client