
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/DF7C7778A97711F0A76BF369C4F9AE02.roa
File: DF7C7778A97711F0A76BF369C4F9AE02.roa (raw, json)
Hash identifier: BQ60yu99DWJ9CNKy9x/LydxX4YGxdVFeZGopEZ5WrOo=
Subject key identifier: B8:49:24:FD:35:2E:74:59:3A:84:62:C0:B9:9D:F7:2C:29:D3:34:4E
Certificate issuer: /CN=A913E4AA/serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Certificate serial: 0CA9
Authority key identifier: 63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/DF7C7778A97711F0A76BF369C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:56:53 +0000
ROA not before: Fri 02 Jan 2026 11:35:56 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153038
IP address blocks: 103.155.27.0/24 maxlen: 24
103.156.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:56:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3241 (0xca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E4AA, serialNumber=63883E4CA2C8E7DDDAC3987E484FD1D672D93949
Validity
Not Before: Jan 2 11:35:56 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a47de5-ab68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:cd:3a:e2:88:71:28:38:b6:96:f7:c1:1f:
a0:5d:d6:db:0a:66:9b:8c:08:6c:17:38:28:52:95:
cc:8d:1b:bb:a5:ff:90:6b:f2:67:e9:57:db:29:f5:
9f:d8:c2:61:6d:07:17:ca:e1:98:0b:79:a1:5a:97:
33:c2:be:a7:3c:c7:59:a8:11:58:79:81:57:fe:d9:
e9:c9:6b:11:6f:b4:10:b3:5f:33:39:55:95:72:51:
f8:ed:84:86:44:f2:2f:9d:ed:e6:3a:1c:e2:9e:b3:
8f:2a:db:35:8e:b0:e4:16:6b:52:51:f3:bd:aa:68:
d6:dc:34:a7:ee:94:80:a5:95:7d:5b:e7:d7:7b:8e:
5c:8d:81:67:77:fd:b5:5b:05:f2:58:3a:10:15:a7:
f8:ca:ae:07:92:75:16:1d:02:a5:af:07:39:06:7b:
19:fd:86:00:0c:5b:33:26:f8:15:bb:00:32:6f:f2:
f4:56:31:54:19:1b:3a:d0:16:e7:06:44:96:d6:7d:
11:2e:dd:60:49:9b:4b:30:ed:e2:0d:5d:88:39:59:
7b:d3:bb:c8:7d:1f:b9:e0:25:15:09:b1:ed:59:94:
89:71:00:21:75:c0:e4:90:be:a7:9e:d9:c0:de:7e:
e6:72:8b:91:8a:c1:bd:ba:98:52:20:d8:5e:b7:a8:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:24:FD:35:2E:74:59:3A:84:62:C0:B9:9D:F7:2C:29:D3:34:4E
X509v3 Authority Key Identifier:
keyid:63:88:3E:4C:A2:C8:E7:DD:DA:C3:98:7E:48:4F:D1:D6:72:D9:39:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/Y4g-TKLI593aw5h-SE_R1nLZOUk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4g-TKLI593aw5h-SE_R1nLZOUk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E4AA/674CA29E11DB11EABF45DA55C4F9AE02/DF7C7778A97711F0A76BF369C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.27.0/24
103.156.189.0/24
Signature Algorithm: sha256WithRSAEncryption
25:67:f9:76:f2:ad:bb:82:29:91:3d:32:b2:e2:a3:91:8c:54:
f4:6f:25:a9:66:a3:a1:12:86:69:89:06:01:d1:8e:73:12:b3:
24:a1:1e:bc:34:bb:40:88:03:3d:3a:6b:cd:d5:90:c3:c7:af:
e1:62:37:65:fd:b4:fa:84:6f:65:d3:5a:54:e3:95:08:79:8c:
d4:60:f7:f0:99:2d:b8:36:00:3d:40:89:02:4c:3d:e3:64:53:
1a:40:01:5d:a6:40:36:65:63:ec:eb:d4:49:e0:ec:0a:f4:21:
ea:28:e4:d7:a3:85:5d:96:dc:36:e1:7b:8c:6e:45:ab:25:c6:
08:8e:17:90:e0:cd:22:96:8f:a1:0d:02:9c:fa:03:9b:a5:b9:
bb:d1:23:03:7f:72:4d:d4:7e:61:25:d0:f5:84:21:48:f9:12:
d9:aa:2d:a8:70:ad:71:66:60:62:7d:c9:25:7e:83:3a:f7:22:
6d:50:86:e1:ab:75:3c:5d:16:5a:a7:3a:9f:94:4f:7d:a5:f6:
bb:7c:63:68:cf:75:30:0d:e6:2d:3b:df:b9:42:e5:33:27:b2:
6d:6b:79:06:f3:64:80:56:36:61:23:b6:ed:df:7d:81:35:39:
a9:8e:47:1d:01:ea:b3:be:24:1d:7c:fd:bf:15:aa:13:db:0e:
51:ef:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:17 2026 by rpki-client