
$ rpki-client -vvf rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/800676321BD311EAA341A62DC4F9AE02.roa
File: 800676321BD311EAA341A62DC4F9AE02.roa (raw, json)
Hash identifier: ca3rCU+xITln6FgR3wUziPrzx8A5i4ANvYXJUthQ0/Y=
Subject key identifier: AB:33:F0:76:37:10:D9:B5:41:8E:8D:92:F8:A3:4A:84:22:6B:4D:63
Certificate issuer: /CN=A914877B/serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
Certificate serial: 0C72
Authority key identifier: 7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/800676321BD311EAA341A62DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:55:23 +0000
ROA not before: Thu 20 Nov 2025 18:09:16 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55854
IP address blocks: 103.237.132.0/24 maxlen: 24
103.237.133.0/24 maxlen: 24
103.241.105.0/24 maxlen: 24
202.74.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl
rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3186 (0xc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914877B, serialNumber=7F7D320F2A07E433DDBDFE2857F5D319354517B9
Validity
Not Before: Nov 20 18:09:16 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4454b-a1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:90:f2:ba:2a:a9:e7:4f:b7:a2:4f:31:94:
be:30:a1:3c:3e:80:88:45:a5:7a:11:6c:1a:df:5d:
11:22:73:7f:96:fb:8d:a3:e1:99:a8:84:6b:0d:e4:
14:56:d8:be:55:ae:ff:b8:c1:89:14:65:4b:e6:e4:
3d:37:a0:89:c9:76:5c:74:73:c2:e3:7f:57:2e:57:
d6:c9:df:67:99:ef:2a:e7:24:e8:16:5a:64:b5:13:
81:aa:26:34:1f:99:db:9f:15:b5:6c:cc:b7:1b:e0:
8a:8d:52:34:1d:97:1f:25:72:49:1b:7d:e9:8f:8b:
93:ba:ac:95:44:05:a1:75:13:ef:4e:54:df:1e:54:
e5:5d:ac:fa:7d:60:68:b9:2e:58:7c:8e:aa:86:36:
7f:20:3a:42:bb:de:72:16:8a:20:e2:4f:6d:52:11:
29:5d:5d:10:e1:36:f3:33:fa:73:a9:19:3d:f5:71:
16:24:0a:8e:e3:e4:11:72:af:92:7e:aa:6f:78:72:
4f:92:a0:c1:ba:42:eb:22:8e:3d:a7:47:38:3c:f3:
94:3b:da:8c:36:51:59:32:a0:96:b2:6f:59:51:af:
7c:19:56:66:42:d8:ed:2e:5c:a5:bf:6c:cd:c9:eb:
bc:fd:ea:52:d8:fe:4c:5d:c9:bb:c6:37:a3:da:49:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:33:F0:76:37:10:D9:B5:41:8E:8D:92:F8:A3:4A:84:22:6B:4D:63
X509v3 Authority Key Identifier:
keyid:7F:7D:32:0F:2A:07:E4:33:DD:BD:FE:28:57:F5:D3:19:35:45:17:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/f30yDyoH5DPdvf4oV_XTGTVFF7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f30yDyoH5DPdvf4oV_XTGTVFF7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914877B/2591011E1BD211EAABD0EE2AC4F9AE02/800676321BD311EAA341A62DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.237.132.0/23
103.241.105.0/24
202.74.37.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a4:20:c4:17:a5:a6:a5:fa:28:a1:e7:cc:21:02:2f:db:7b:
cc:ec:ae:19:87:51:b3:59:5b:77:d7:22:cd:87:41:ff:6d:b4:
9b:3f:45:65:04:e3:81:d2:f1:d4:e8:35:e8:3a:61:44:ce:e6:
85:0c:73:ca:13:a1:87:01:c1:16:5a:44:34:71:37:93:fe:57:
b3:93:48:a1:ab:e9:8c:4d:ef:e1:a3:f6:53:ef:36:05:ee:a7:
af:57:08:ef:b8:17:d4:00:70:e5:3e:c6:0c:40:16:5e:4a:44:
4e:c4:69:c7:91:92:03:b0:b7:a7:ca:14:31:36:7a:25:81:37:
ad:0b:f8:06:ef:b3:23:9e:ac:0f:34:68:f2:e1:0b:c7:48:75:
f5:41:0d:c0:44:f1:10:54:a7:3c:66:51:d5:99:d1:9d:fa:5d:
3c:11:8d:76:d3:e8:64:7a:29:c5:62:2c:fc:75:fd:32:a5:fb:
cc:03:2c:53:71:99:00:7a:1c:92:b6:12:89:a0:53:a3:97:d2:
cd:0f:41:cd:1c:32:7e:17:d5:61:87:95:fc:0f:a6:45:e2:e6:
fb:f6:cf:9e:2a:e6:f5:16:de:8f:c6:66:48:35:73:14:eb:72:
1c:9e:1e:46:26:3b:44:ce:f1:a8:db:0e:cd:76:8e:50:8e:1b:
ac:cd:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:24 2026 by rpki-client