
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/2907520205DA11EF974A6A0BC4F9AE02.roa
File: 2907520205DA11EF974A6A0BC4F9AE02.roa (raw, json)
Hash identifier: pPoEiuLkBqcxNUTChYxGcgcglq9PUIXg7lfx7G9K8vY=
Subject key identifier: 84:C9:74:47:0A:41:6D:2D:F4:33:76:95:7B:DB:00:EF:2B:E5:C9:7C
Certificate issuer: /CN=A914A49B/serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414
Certificate serial: 0169
Authority key identifier: D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/2907520205DA11EF974A6A0BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:43:52 +0000
ROA not before: Wed 05 Nov 2025 05:19:45 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 152477
IP address blocks: 103.213.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl
rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A49B, serialNumber=D5037AF969C8ACEA01B570FC64ADD4828AC06414
Validity
Not Before: Nov 5 05:19:45 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59417-193f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b1:ed:0b:2a:5b:70:ed:14:d1:78:47:64:c5:
0f:65:f1:67:3b:62:b3:41:e5:a8:c7:13:35:3e:04:
d7:92:1b:96:02:62:5b:5e:25:9c:8c:25:41:35:5b:
b8:98:8b:ca:63:95:74:11:00:f4:fd:3a:5c:cf:60:
8f:09:c9:68:1d:00:83:8b:3b:e4:69:96:c1:ad:7e:
ac:3a:bd:49:fc:7e:21:55:9a:5b:c9:a3:de:31:ff:
a5:d3:af:02:c2:f8:31:a7:83:9b:88:9f:17:13:4e:
47:ca:58:71:13:5d:41:58:0a:c8:90:b3:1e:6d:32:
5f:f2:3b:be:d1:a4:81:de:62:cb:22:c1:c9:89:22:
5a:b7:80:a1:1e:33:0a:ab:65:7d:e1:72:4b:18:f6:
6a:f5:20:2d:f6:92:22:d6:13:8a:c7:16:09:6b:9d:
9f:22:67:aa:d7:4d:1f:19:4f:3a:14:1d:7c:44:5f:
2e:71:dc:64:0e:a3:a2:c6:67:ae:ac:55:61:4a:a0:
cb:2c:bc:a2:bd:db:19:73:17:e7:9d:8a:1a:1d:83:
fd:67:17:c2:ef:44:ec:e4:fe:bd:0e:9c:40:c2:54:
e9:fe:72:69:e7:74:f8:98:af:6a:8b:54:4d:32:70:
95:cb:d7:fa:be:98:73:7f:72:48:77:d0:34:0c:1d:
e7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:74:47:0A:41:6D:2D:F4:33:76:95:7B:DB:00:EF:2B:E5:C9:7C
X509v3 Authority Key Identifier:
keyid:D5:03:7A:F9:69:C8:AC:EA:01:B5:70:FC:64:AD:D4:82:8A:C0:64:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QN6-WnIrOoBtXD8ZK3UgorAZBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A49B/B94F6936015111EF9857C01EC4F9AE02/2907520205DA11EF974A6A0BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.213.10.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:ce:2a:44:83:23:dd:c8:24:f4:b7:ae:4d:e7:62:97:1f:0e:
60:85:65:11:05:91:59:8d:b7:62:64:06:80:69:1a:b3:fe:4d:
a4:8d:d6:1d:8e:42:6c:5d:9d:cd:3b:73:89:38:6c:dd:46:1c:
da:da:17:74:2d:24:d9:b8:4e:df:4f:df:f6:d2:12:0d:a0:c7:
e6:07:87:37:fe:cf:93:26:7e:91:e3:42:26:86:8c:1c:81:ae:
65:07:67:fe:92:af:01:25:c0:e5:83:e9:98:0e:21:a1:01:32:
ac:41:0e:af:ad:4b:6c:1d:11:6e:9c:cc:f8:88:b3:60:58:c0:
1a:aa:8a:4f:3b:3f:92:2e:d7:2e:22:bd:9c:3f:cf:dd:99:72:
57:47:92:b8:53:3a:9d:9f:ca:e0:53:22:be:69:47:ea:64:16:
7f:64:b9:ef:25:7f:a7:cf:7a:97:85:5f:88:b3:4a:be:a1:d4:
77:99:22:02:2e:a9:b3:87:5a:19:3d:cd:f6:92:69:39:7c:6d:
18:04:05:2c:60:32:c9:c6:37:36:0f:80:63:bd:34:2f:4a:ca:
3f:ed:5f:4b:7f:5d:bf:b7:66:06:d3:84:d7:1e:8a:33:3d:0f:
59:b5:ee:46:75:dc:3d:e9:8d:0d:80:95:6b:86:d1:65:8b:cf:
0a:ea:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:35 2026 by rpki-client