
$ rpki-client -vvf rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
File: 2F43497CA16711EFBB0B733EC4F9AE02.roa (raw, json)
Hash identifier: ja+dV8F8droBnCPc3sPIfN0Ul1XNgCG3f5fT9ZFS1Y0=
Subject key identifier: 62:B8:E3:25:99:7A:81:F8:2B:90:E6:EC:96:83:D8:54:45:91:86:5B
Certificate issuer: /CN=A914992A/serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Certificate serial: 025B
Authority key identifier: F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:15:18 +0000
ROA not before: Fri 27 Jun 2025 02:19:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 135060
IP address blocks: 203.34.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914992A, serialNumber=F125A0E6B8EBDC136AB5307D4914710E90063BC3
Validity
Not Before: Jun 27 02:19:53 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a3f596-fd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:50:b4:d6:71:21:78:74:35:40:80:81:23:ef:
f2:16:7e:bb:1c:70:6d:e8:2c:af:fc:c9:e3:62:ca:
b0:cc:2a:91:8b:83:b0:18:e9:9a:d1:8f:8d:24:fa:
65:dc:cb:9b:4c:55:bb:9c:da:e6:dd:b4:da:cc:2a:
43:86:e6:a1:62:49:fa:cd:bf:36:0a:24:66:c2:ff:
cd:73:1f:78:30:a6:59:aa:b9:b6:a3:6d:00:6a:b7:
40:8c:c3:6e:8a:8f:61:35:a5:32:ff:b1:33:8f:ba:
de:33:b7:1d:c0:a9:5b:d9:83:ea:6c:e0:9f:47:1f:
5e:a8:01:b3:03:52:5d:ad:ff:d3:58:67:5b:f1:71:
de:a8:67:3e:30:cc:01:39:21:6a:08:50:62:0d:5a:
82:d3:40:bd:ba:c1:ff:ab:00:16:8c:e4:9b:65:f4:
e6:6e:ef:1f:8a:d0:e5:1c:d4:3c:24:dd:5d:aa:4e:
10:2b:ec:76:63:fe:34:44:d3:91:96:b1:80:29:dc:
1c:97:8b:0f:99:11:cd:e7:c6:a4:f8:d8:fe:41:3d:
77:f9:07:95:73:29:84:aa:a7:b4:8f:66:31:a4:79:
49:3d:06:43:e3:aa:98:8a:af:4b:2e:59:ca:7a:76:
71:2b:8a:03:a6:6d:d1:90:3d:4e:5e:23:19:d7:e4:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B8:E3:25:99:7A:81:F8:2B:90:E6:EC:96:83:D8:54:45:91:86:5B
X509v3 Authority Key Identifier:
keyid:F1:25:A0:E6:B8:EB:DC:13:6A:B5:30:7D:49:14:71:0E:90:06:3B:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/8SWg5rjr3BNqtTB9SRRxDpAGO8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SWg5rjr3BNqtTB9SRRxDpAGO8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914992A/81A30070866311EDA0246B25C4F9AE02/2F43497CA16711EFBB0B733EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.34.177.0/24
Signature Algorithm: sha256WithRSAEncryption
00:65:bf:77:83:d3:89:31:01:33:c1:d7:41:81:86:8f:7c:a6:
7d:c7:83:6d:1d:86:60:e9:ca:0c:16:21:e3:85:7d:60:eb:4e:
6c:4c:5a:59:a8:c7:22:08:3d:05:89:4a:ac:cb:c7:9c:6c:ec:
2e:ce:fe:5c:d1:54:00:37:cf:83:ed:6d:db:76:c9:48:94:67:
7a:01:f9:26:f2:33:85:59:f7:2b:16:a7:d3:05:df:ec:19:0c:
97:1a:f9:02:0f:aa:f4:f1:3b:e7:09:87:0b:a3:9d:8d:07:42:
0b:86:c3:f9:e7:40:79:b3:3c:27:62:08:6c:70:13:1f:f3:6a:
0f:f3:c1:1f:7c:d9:e9:23:19:13:c2:07:13:12:42:5b:05:da:
96:bc:1f:cd:bc:d1:84:0e:d6:82:1b:3e:82:21:4b:6a:11:ee:
9a:e1:f1:a1:be:e9:83:2f:c0:7f:d5:0f:1b:58:ee:58:f5:a8:
c4:f1:9b:05:77:72:bd:27:02:74:b2:49:ee:70:62:7e:42:2f:
c7:85:7f:13:ba:9d:51:ba:9c:c4:33:07:48:5d:d3:0a:31:ab:
80:4f:16:0f:d0:34:1f:17:02:da:8a:ba:1c:24:e3:ad:9a:30:
8a:22:78:71:08:9e:2e:f0:9c:28:11:ed:92:f7:f7:c0:ef:4b:
2c:8e:f1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:17:30 2026 by rpki-client