
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/DC7A929EEF8111F0B8F8645F5F6F56BC.roa
File: DC7A929EEF8111F0B8F8645F5F6F56BC.roa (raw, json)
Hash identifier: oXnvHlMxtaLYGYz5MghtoZAARZeUZKQdkFkuL9+XvMU=
Subject key identifier: 20:2A:F9:E7:4B:05:F6:53:00:54:15:7C:90:9E:90:D0:49:1D:F3:44
Certificate issuer: /CN=A913EBFD/serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
Certificate serial: 0BD1
Authority key identifier: B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/DC7A929EEF8111F0B8F8645F5F6F56BC.roa
Signing time: Sun 01 Mar 2026 17:10:36 +0000
ROA not before: Mon 12 Jan 2026 19:15:44 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 63923
IP address blocks: 103.148.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl
rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3025 (0xbd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EBFD, serialNumber=B140AF04919B4513825A6EA57E1AB9E54379E3C8
Validity
Not Before: Jan 12 19:15:44 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a4730c-e321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:61:66:bd:85:f4:5e:85:89:ea:da:aa:fd:
cd:c4:d6:64:f4:47:fe:9f:a5:de:a3:93:f6:19:7c:
4a:35:23:d0:4e:3b:b5:ab:f1:9b:b5:e3:ba:d5:72:
58:c8:aa:ee:b3:42:05:84:9f:2f:61:2f:45:7a:3e:
5e:8e:58:83:82:04:9f:d0:1b:16:6b:3c:82:05:cb:
dc:f1:75:fd:09:8a:e8:9f:15:27:10:ea:f4:4b:64:
c3:29:cc:50:6a:d7:9a:c7:3a:c5:84:18:9b:72:39:
3d:42:dd:9f:8e:4a:4f:5f:98:7f:02:31:2b:93:2a:
2f:59:f3:ee:8d:50:97:d9:93:4d:cf:19:68:db:ee:
51:e6:6f:ef:1d:f2:6d:c8:bb:a1:93:1c:27:97:63:
60:d5:38:f2:fa:31:97:68:79:b8:09:60:fd:c7:9d:
dd:ca:cb:c4:ed:bd:7f:64:cc:62:11:99:cb:8e:55:
68:08:f9:2d:d6:b4:53:a2:8a:be:0b:8c:19:8d:6d:
f1:06:f6:7c:28:a2:26:f0:34:ff:04:c2:9e:72:7a:
f4:77:cc:50:6a:2e:7a:df:06:05:69:bd:c0:9e:db:
02:45:8f:49:ea:c7:64:af:4d:b5:00:12:8d:2f:bd:
66:0d:1a:45:58:5e:84:ee:0a:09:f2:7c:bb:a2:e9:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2A:F9:E7:4B:05:F6:53:00:54:15:7C:90:9E:90:D0:49:1D:F3:44
X509v3 Authority Key Identifier:
keyid:B1:40:AF:04:91:9B:45:13:82:5A:6E:A5:7E:1A:B9:E5:43:79:E3:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/sUCvBJGbRROCWm6lfhq55UN548g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUCvBJGbRROCWm6lfhq55UN548g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EBFD/F7CE629A3A8E11EA80AF0E31C4F9AE02/DC7A929EEF8111F0B8F8645F5F6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.250.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1e:db:97:e9:4c:04:2d:cf:63:76:34:2b:28:05:b2:87:1c:
6a:02:e2:2a:bd:e0:e5:f6:db:7e:24:a5:a1:80:f1:e5:7d:b5:
6a:5e:0a:69:ed:2e:61:7f:95:49:36:05:dd:a7:b0:98:f2:b7:
98:1e:ba:c9:b7:74:d0:ae:5d:54:79:49:14:c5:5f:4a:8d:0e:
1a:5e:dd:ce:2e:6d:71:e8:09:cd:46:87:0f:97:c5:65:b6:aa:
44:52:dd:45:f7:b4:60:96:f9:1f:2a:f5:b1:77:1d:ab:87:6b:
ef:84:a5:b8:75:d1:4e:09:88:b1:08:61:40:9a:5a:c0:65:83:
de:23:25:c9:69:40:55:bf:9c:54:e8:9c:70:80:43:9f:6b:33:
26:44:a1:36:ed:80:c8:a5:44:2b:23:33:28:1e:a4:f4:14:26:
56:27:3a:63:c8:67:83:9c:7a:fb:83:bf:2f:9b:d3:a0:65:7b:
70:c2:fe:f4:ea:27:1e:1a:d6:f1:c3:cd:c5:d1:4e:5d:ea:ad:
01:5e:2f:b9:09:aa:e8:32:ab:72:d1:75:40:29:6e:20:88:60:
91:23:8c:8c:ed:e0:42:e1:55:d3:e4:82:26:20:8a:9f:03:3a:
90:37:22:90:6c:91:e5:b5:08:95:93:37:d9:2d:3e:5c:e0:99:
3b:c6:f1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:40 2026 by rpki-client