
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa
File: 9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa (raw, json)
Hash identifier: 36bHjTlr+0HE0f10oYmhOfC+GpQPqJLk/D3JPOs1dH0=
Subject key identifier: 45:E1:2C:59:C2:9F:2E:72:5F:8C:E5:2E:F5:80:80:E7:47:E5:54:1D
Certificate issuer: /CN=A913EE46/serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Certificate serial: 02FE
Authority key identifier: 63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:04:15 +0000
ROA not before: Sun 19 Oct 2025 04:07:11 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140976
IP address blocks: 103.83.82.0/23 maxlen: 23
103.83.82.0/24 maxlen: 24
103.83.83.0/24 maxlen: 24
2001:df1:1540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:38:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 766 (0x2fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE46, serialNumber=63515B364113848FA554D2842F5841877CF6AF00
Validity
Not Before: Oct 19 04:07:11 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4556f-b8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ed:13:fd:b0:15:4a:e5:db:16:8e:97:3c:15:
7d:ac:b1:e0:ff:15:7b:65:66:ef:3b:a9:d6:23:92:
c8:d7:f9:fd:8e:14:de:b2:14:f0:19:3d:8c:5b:df:
18:71:1c:f9:30:23:e1:f3:1a:31:1b:fb:2e:77:83:
31:3e:6c:38:1e:a0:9e:7b:da:27:cd:ba:9a:cd:cf:
4d:d6:16:e5:42:1f:4a:f5:7e:f4:bd:ac:84:88:a6:
7b:52:9c:56:49:60:a1:80:34:88:a3:a9:03:16:c2:
3d:47:fb:c5:1d:b3:86:84:ec:7c:66:b4:d8:a5:b9:
28:87:fb:a2:00:f7:c0:24:d1:56:9e:29:67:04:dc:
af:b4:2b:8a:8c:65:4e:57:57:bd:5c:7c:14:77:4c:
f3:06:42:66:a8:a1:0f:ba:6d:fe:e8:a7:32:76:18:
79:d5:69:68:e5:c2:db:2c:6f:8a:e8:62:54:71:d4:
0e:ce:19:1d:27:44:52:a4:69:51:d3:1d:65:a9:60:
38:5d:57:20:7d:bc:05:65:3a:0d:4a:e3:a7:be:aa:
e8:b0:9a:c9:b5:37:57:33:b6:1e:7c:3f:e9:8b:ac:
e9:9c:83:31:3f:8c:a9:bf:fd:c0:ce:cb:80:99:a1:
8b:19:03:35:ff:07:45:da:a5:f1:0f:f7:8b:96:6f:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:2C:59:C2:9F:2E:72:5F:8C:E5:2E:F5:80:80:E7:47:E5:54:1D
X509v3 Authority Key Identifier:
keyid:63:51:5B:36:41:13:84:8F:A5:54:D2:84:2F:58:41:87:7C:F6:AF:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/Y1FbNkEThI-lVNKEL1hBh3z2rwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1FbNkEThI-lVNKEL1hBh3z2rwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE46/AE82E12612ED11ED9E4D760EC4F9AE02/9DFFBC7C12F011EDA0DB0B12C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.83.82.0/23
IPv6:
2001:df1:1540::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a3:49:93:fb:38:0d:84:57:5d:9e:4a:8a:de:58:46:8d:ad:
26:46:e6:cf:73:01:3b:f5:d6:55:58:db:98:bc:d5:e2:e1:68:
08:b5:a2:ca:a4:75:b8:11:fe:e7:18:58:63:80:97:bf:3c:a6:
06:8b:42:e3:bc:e8:b1:fd:6c:fd:25:b7:57:7d:48:5a:08:f0:
d0:28:eb:68:43:4c:1a:e8:1b:2d:97:68:7d:25:8f:af:b4:1f:
43:d8:33:23:f7:42:67:7e:10:58:30:05:c9:46:b3:f9:c2:42:
81:bb:d6:1a:d1:94:15:59:09:f3:83:44:2a:72:fe:bd:e1:1c:
31:ff:52:e0:0c:53:e8:41:bd:cd:ec:0d:eb:f0:54:8b:f4:c0:
77:7c:3b:27:6d:6b:ab:69:1c:eb:fa:88:1b:96:b9:fc:87:42:
20:6f:5b:77:db:ed:95:8d:5d:2a:90:89:dc:91:30:3c:f8:90:
59:f0:40:96:94:7c:fb:07:fc:75:dc:7e:7a:b6:78:32:d3:4b:
fe:a8:29:b6:12:73:32:ac:d2:96:2a:ca:52:b2:fb:66:c5:68:
55:73:b8:22:9c:d3:98:da:da:3e:4f:2d:7e:bc:45:11:43:c2:
54:78:2a:aa:e8:44:ae:84:13:68:30:4d:e1:62:43:0e:bf:61:
20:c7:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:43 2026 by rpki-client