
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa
File: A152FA389E2211E99CA85B6CC4F9AE02.roa (raw, json)
Hash identifier: PSdpJXiw2qJwGRhfmH3Cf/3/r3CVZrL1qpooaEqdMDs=
Subject key identifier: 25:34:29:16:76:D9:BD:66:9E:40:3D:7F:AD:B0:8B:39:B9:C0:AD:3A
Certificate issuer: /CN=A913EAE6/serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744
Certificate serial: 0F0A
Authority key identifier: 3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:49:06 +0000
ROA not before: Fri 22 Aug 2025 17:56:40 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 139267
IP address blocks: 103.140.164.0/23 maxlen: 24
2404:ffc0::/32 maxlen: 32
2404:ffc0::/48 maxlen: 48
2404:ffc0:1::/48 maxlen: 48
2404:ffc0:2::/48 maxlen: 48
2404:ffc0:3::/48 maxlen: 48
2404:ffc0:4::/48 maxlen: 48
2404:ffc0:5::/48 maxlen: 48
2404:ffc0:6::/48 maxlen: 48
2404:ffc0:7::/48 maxlen: 48
2404:ffc0:8::/48 maxlen: 48
2404:ffc0:9::/48 maxlen: 48
2404:ffc0:a::/48 maxlen: 48
2404:ffc0:b::/48 maxlen: 48
2404:ffc0:c::/48 maxlen: 48
2404:ffc0:d::/48 maxlen: 48
2404:ffc0:e::/48 maxlen: 48
2404:ffc0:f::/48 maxlen: 48
2404:ffc0:10::/48 maxlen: 48
2404:ffc0:11::/48 maxlen: 48
2404:ffc0:12::/48 maxlen: 48
2404:ffc0:13::/48 maxlen: 48
2404:ffc0:14::/48 maxlen: 48
2404:ffc0:15::/48 maxlen: 48
2404:ffc0:16::/48 maxlen: 48
2404:ffc0:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl
rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3850 (0xf0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EAE6, serialNumber=3D34F1EA59EDB086F17334D599E9310D71FE0744
Validity
Not Before: Aug 22 17:56:40 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a443d2-2c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:2b:5f:f7:79:41:c2:08:ce:e6:82:1f:79:
69:d1:36:ce:dd:27:a0:1b:3e:94:48:6e:fa:6c:bd:
a2:4a:43:3e:df:69:ae:61:f3:5b:2f:ab:f7:a8:32:
e2:aa:13:d2:23:d5:d3:1e:91:0c:e9:0f:80:c2:e1:
6c:e6:0e:74:ad:a2:a5:83:40:3e:15:a5:8e:21:b2:
81:a2:78:58:9d:e4:1a:38:82:30:ac:57:90:6e:dd:
c3:c9:2e:5d:dd:1c:96:ea:7e:53:35:62:20:aa:d7:
c5:db:54:23:a6:e5:20:86:d7:be:37:8d:f0:ea:f2:
4e:29:c8:39:4e:18:01:07:a3:a8:51:a1:f0:92:df:
83:b4:73:27:34:8e:4a:35:61:81:e8:2d:a4:5c:8b:
14:ba:ed:c0:74:ad:8c:8c:40:40:53:2d:7c:7b:32:
20:84:bf:2a:45:b9:e1:e0:a7:cd:02:30:b0:ef:7d:
d5:19:34:fc:4f:52:c8:9d:fb:05:6b:2c:27:df:8c:
e9:37:e8:f5:aa:d4:4a:df:a0:44:8a:04:17:ef:57:
d2:62:d4:0f:6a:2c:6f:38:bd:34:a4:80:61:3f:85:
ef:84:7c:19:db:40:b0:15:16:3c:b5:12:85:10:1b:
5b:29:01:bb:14:84:07:ca:e2:6b:77:5a:32:db:0c:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:34:29:16:76:D9:BD:66:9E:40:3D:7F:AD:B0:8B:39:B9:C0:AD:3A
X509v3 Authority Key Identifier:
keyid:3D:34:F1:EA:59:ED:B0:86:F1:73:34:D5:99:E9:31:0D:71:FE:07:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/PTTx6lntsIbxczTVmekxDXH-B0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTTx6lntsIbxczTVmekxDXH-B0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EAE6/7BC293269BF911E9AA6D8453C4F9AE02/A152FA389E2211E99CA85B6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.164.0/23
IPv6:
2404:ffc0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:ae:0c:16:3a:87:c3:6a:1c:52:3e:d5:b0:0d:84:39:e2:cf:
9f:73:c9:f8:23:7f:fb:99:18:ac:0b:f0:e6:38:82:ae:55:1d:
db:76:b9:31:2c:51:89:4e:11:38:c0:32:50:5d:23:c6:58:1c:
92:98:8a:c1:d6:c7:1b:f1:df:16:ff:0c:4d:5f:e5:13:d0:8c:
1a:41:24:ed:0c:45:09:59:48:fa:a0:47:40:9f:3e:d2:07:c3:
c2:40:17:34:19:44:eb:b3:fc:3b:64:fd:19:98:ae:72:8f:3c:
3c:da:01:b7:f0:70:3a:f0:26:60:6b:bb:41:6a:49:36:52:79:
ae:7d:c4:6a:f5:89:c0:b7:c6:88:7d:95:82:80:76:26:3f:99:
fe:73:07:e5:61:0a:f2:1a:4c:33:11:e3:af:59:be:f4:57:c0:
00:54:35:99:d1:48:46:13:ab:cd:6d:c5:39:2c:4f:a5:c9:7b:
31:27:53:2f:98:8b:bf:19:17:6b:74:02:8a:fb:20:7f:71:19:
1d:04:95:be:16:c6:0a:3e:2b:b0:e2:51:ab:4f:c4:8a:7d:35:
0b:9d:9a:ff:b5:01:5c:0c:34:21:da:45:1a:0a:56:a3:86:cd:
94:c3:6d:8c:ab:9d:d6:26:7f:40:d9:37:07:84:18:59:fd:af:
00:1a:f4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:35 2026 by rpki-client