
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
File: 7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa (raw, json)
Hash identifier: o6fRayD/nqN2dEBUcuypm1nutFG8wp7LbMA0ZmrlfaE=
Subject key identifier: DA:15:FF:FC:BA:84:96:8E:46:0E:3E:D5:77:7A:1A:B8:99:8B:2E:12
Certificate issuer: /CN=A914A553/serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Certificate serial: 0B4C
Authority key identifier: AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:30:37 +0000
ROA not before: Sat 10 Jan 2026 19:16:11 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136010
IP address blocks: 103.79.216.0/22 maxlen: 22
103.79.216.0/23 maxlen: 23
103.79.216.0/24 maxlen: 24
103.79.217.0/24 maxlen: 24
103.79.218.0/23 maxlen: 23
103.79.218.0/24 maxlen: 24
103.79.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 19:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2892 (0xb4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A553, serialNumber=AB4C3E35AEFC55B5BA358CA406ED9626A4220FD0
Validity
Not Before: Jan 10 19:16:11 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a469ad-07a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3d:57:e1:9e:50:b4:33:41:e4:81:e6:52:fc:
a2:6f:e6:cd:db:17:c8:59:fe:80:19:c3:eb:b7:ac:
65:bb:9a:f6:60:4f:48:47:93:18:fa:bc:90:65:07:
df:2e:f4:01:74:25:6a:90:81:19:4f:6f:06:c9:90:
2a:45:15:f3:5d:22:4e:de:02:b4:46:a0:07:4b:31:
cd:59:7c:e2:9e:2d:46:14:ea:1e:f5:dc:54:20:11:
01:be:41:f3:44:e3:48:4a:71:df:8e:5b:c0:f5:d0:
59:62:81:c0:bb:0d:bf:85:ba:6d:af:a2:97:5c:63:
06:ac:82:f7:95:d4:40:46:67:4b:49:b3:3b:aa:8f:
3f:8d:04:65:c7:a3:f0:e5:d0:76:1b:82:ca:4a:2d:
7b:b9:ea:7a:9f:1d:bd:a0:9d:16:d5:33:aa:45:e0:
f4:22:50:51:38:25:c9:f8:75:31:b9:0a:3e:3a:8b:
30:16:7f:b4:97:8f:bc:e5:9a:f3:f5:6a:b6:16:86:
25:68:d0:b5:53:0b:85:20:3c:a3:5e:fd:31:84:06:
f0:e9:f2:c2:5b:da:ac:dd:dd:a0:81:70:c9:67:18:
2d:39:b0:b2:a9:34:2c:15:04:e1:fe:59:53:cd:09:
e0:a1:be:45:68:41:c4:89:1c:a8:d4:dd:51:0a:95:
63:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:15:FF:FC:BA:84:96:8E:46:0E:3E:D5:77:7A:1A:B8:99:8B:2E:12
X509v3 Authority Key Identifier:
keyid:AB:4C:3E:35:AE:FC:55:B5:BA:35:8C:A4:06:ED:96:26:A4:22:0F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/q0w-Na78VbW6NYykBu2WJqQiD9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0w-Na78VbW6NYykBu2WJqQiD9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A553/95C8A3E457A311EAA935C083C4F9AE02/7E3B7BE6B1E911EC9A0D366FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.79.216.0/22
Signature Algorithm: sha256WithRSAEncryption
53:ff:c9:fc:79:41:dd:3d:1f:85:92:e8:13:55:cf:c8:cd:78:
5a:59:80:d9:79:20:ee:0f:98:77:70:07:dc:bb:b8:a0:4a:36:
df:b3:07:ec:7e:b0:c4:51:c3:7a:82:d7:77:50:a3:46:63:4e:
7d:6b:d3:37:cd:43:7a:0c:da:a7:bf:02:28:6e:8e:bf:f8:49:
94:ca:57:1c:ef:95:38:1b:14:57:13:67:32:40:ed:03:c6:dd:
7c:f8:01:8c:fa:0a:83:cd:a5:3d:4a:d0:58:db:e7:56:a0:1f:
fb:27:bd:93:b8:53:76:e1:38:9d:2b:68:b0:15:4b:b1:a3:50:
4a:39:88:c9:e4:54:e1:10:72:f1:0e:53:53:da:42:fa:be:2f:
5c:72:48:04:d5:ee:a3:d3:99:f6:57:bf:6d:15:fb:b0:6b:db:
ca:4b:31:b2:f5:dd:c7:a9:a2:89:39:fa:ba:4a:68:d2:83:56:
a9:8e:c8:96:4a:8f:4c:f9:98:cc:0b:57:04:03:a1:c8:0b:a8:
55:6c:a3:bf:b9:60:47:f9:b7:79:0b:d7:bc:d4:4f:56:2c:14:
d0:f9:37:dd:82:cf:12:27:b8:d0:40:a9:08:ab:e7:60:c1:cc:
e7:9f:1e:70:1e:25:61:91:0b:68:37:6e:7f:eb:3f:55:3f:2f:
c3:0b:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:42:18 2026 by rpki-client