
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
File: FAB56D7E154711F1A1427AB42F3D8C67.roa (raw, json)
Hash identifier: WCKRxNtVRCoib0BHwRwyRhStDVwj+k0b7CLKol1RkB0=
Subject key identifier: 99:7D:97:1E:B6:92:A2:A7:3A:D4:0D:5D:C7:5E:5C:C4:A7:07:BA:B7
Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial: 0579
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
Signing time: Sun 01 Mar 2026 08:23:52 +0000
ROA not before: Sun 01 Mar 2026 08:23:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139716
IP address blocks: 103.172.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1401 (0x579)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Validity
Not Before: Mar 1 08:23:52 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3f798-340b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fc:71:d9:b3:d6:e8:e3:a1:fd:84:00:03:f5:
5b:f6:c1:86:2c:17:d4:16:ea:25:cf:bf:32:56:1c:
d7:03:6c:ff:20:94:f0:83:ab:c7:de:c4:85:d1:10:
d9:bc:d4:b5:2a:89:fa:23:a1:a7:2b:e2:f9:4a:b8:
68:e1:0a:49:5d:49:f2:bc:7a:4d:77:7c:d7:02:9c:
c7:6a:33:eb:11:e8:11:b4:6e:45:02:be:da:e7:83:
07:c3:5d:85:8a:7f:55:d7:04:a8:82:dd:4a:fd:ce:
e1:05:ad:3c:c0:ae:e2:9a:90:b6:66:ad:ea:9c:3c:
d3:7c:fb:5a:d9:1d:31:2f:1e:9a:45:86:a8:e5:d5:
d8:94:1f:a6:69:ba:a9:fd:3e:3c:aa:b6:66:7c:ea:
5f:a1:1b:30:e7:a9:0d:46:85:3c:0a:68:98:fa:da:
3b:88:a5:15:93:48:c4:0d:16:7d:c2:5f:43:50:8c:
08:9a:43:89:ba:65:3a:03:29:4d:00:bd:49:4d:6f:
78:a1:ac:7f:09:5b:36:0d:11:cc:8a:09:e8:4a:c1:
b2:86:2c:ed:2c:18:7f:5b:f2:fe:e4:f1:86:0d:ee:
10:42:84:18:23:71:2a:b7:b8:a5:70:7f:19:dd:98:
72:23:78:eb:80:48:ac:ae:50:b7:4d:ab:f8:97:1d:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7D:97:1E:B6:92:A2:A7:3A:D4:0D:5D:C7:5E:5C:C4:A7:07:BA:B7
X509v3 Authority Key Identifier:
keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d7:e4:46:c2:8b:06:81:ef:b2:7d:63:8e:d7:25:0e:a4:1a:
ca:1a:3a:dd:5b:d3:6a:6c:e6:79:e1:6c:bd:56:64:9c:40:f3:
60:d7:75:57:7f:4c:63:30:91:d9:94:1c:78:70:d2:61:c4:e6:
51:73:a4:1d:4e:69:82:57:4c:5d:25:f1:11:51:2e:7b:3d:d2:
03:22:fd:f7:3b:2e:30:8e:63:c4:3d:0e:f5:6e:63:16:13:35:
03:9f:69:6e:83:e4:98:38:b5:d4:96:39:48:c8:82:ac:d1:54:
4c:23:be:55:31:57:2a:cf:a6:fd:2c:83:a8:eb:74:33:9c:56:
0c:33:03:cf:c7:dc:85:df:65:f4:a7:75:15:8b:7b:e1:7f:32:
8e:62:11:3b:6a:1c:61:91:bb:fc:e8:c1:75:33:d8:0d:0d:9c:
54:ff:0f:bd:c6:c1:c4:98:e6:b6:a7:27:06:a6:c4:00:ef:5c:
cf:c4:ae:d5:de:ab:32:04:0e:39:78:d1:1b:de:58:eb:11:a0:
22:bf:2c:2b:7c:17:92:42:84:91:13:0a:1d:d5:af:2b:25:c9:
f5:a2:13:d7:60:b8:27:04:eb:de:81:3b:ae:b6:e7:94:55:f5:
17:13:3c:ed:f1:e0:cd:9f:78:be:08:64:58:ba:07:7b:9a:ca:
d5:5c:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:09 2026 by rpki-client