
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/2BE5310AF27E11F082456479676F56BC.roa
File: 2BE5310AF27E11F082456479676F56BC.roa (raw, json)
Hash identifier: A74oNh1ceC9qOKcui3vBhsxESPini5a/hTsdz/DLy4Y=
Subject key identifier: 27:3C:99:8D:E7:70:5E:68:B6:1D:EE:B2:90:87:13:09:FA:23:E2:A0
Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Certificate serial: 062C
Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/2BE5310AF27E11F082456479676F56BC.roa
Signing time: Sun 01 Mar 2026 16:36:16 +0000
ROA not before: Fri 16 Jan 2026 01:54:09 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 24565
IP address blocks: 103.88.139.0/24 maxlen: 24
203.16.230.0/23 maxlen: 24
2001:df6:e580::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024
Validity
Not Before: Jan 16 01:54:09 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46b00-0ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:51:3b:7a:c7:ab:75:c4:fb:34:e7:a0:6c:
19:7f:28:77:fa:d3:e4:40:06:cf:e9:5f:74:81:44:
84:39:ff:e8:49:39:37:bd:7f:e8:4d:4c:56:a7:a3:
b7:4f:07:a4:bc:c9:0b:df:fc:d4:5e:a3:79:ad:db:
a4:20:1f:f1:17:a5:01:c5:77:c0:0d:e0:c3:d5:8e:
ac:61:d1:c1:6d:0d:4c:43:36:6c:f2:de:47:1a:bd:
d7:be:ce:d5:9d:bc:43:61:6d:c0:c6:58:9e:42:d7:
3b:e7:d2:6d:8b:e6:9b:ba:77:32:0f:22:b2:33:29:
1a:d1:e9:d5:cf:a5:40:81:46:a4:38:0e:d6:3b:17:
f4:d6:9a:02:00:47:55:a6:29:f2:57:1f:14:d7:49:
48:05:55:d8:f1:24:78:49:2b:6c:af:5a:21:a5:cc:
f3:6d:4c:eb:64:78:ae:c0:3c:ac:f0:fb:fe:06:5e:
b7:65:d3:a3:f5:b0:84:3d:77:9e:59:0b:17:87:91:
cc:3c:94:19:2a:a5:6d:ef:84:80:03:0d:b5:bc:9c:
0c:8d:f6:a5:5c:a5:57:c9:f8:d7:ac:e3:b9:dc:4c:
55:ad:53:a6:ff:e4:24:0a:d5:f4:e6:78:5d:db:d5:
32:03:ba:14:92:80:81:0a:93:8a:48:18:7f:6d:82:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:99:8D:E7:70:5E:68:B6:1D:EE:B2:90:87:13:09:FA:23:E2:A0
X509v3 Authority Key Identifier:
keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/2BE5310AF27E11F082456479676F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.88.139.0/24
203.16.230.0/23
IPv6:
2001:df6:e580::/47
Signature Algorithm: sha256WithRSAEncryption
7b:0a:ff:50:f4:2f:0f:22:ee:63:dd:a2:39:f0:52:a2:3f:e5:
e5:b9:e4:9d:67:3d:51:a2:77:11:25:d8:37:fe:1c:cc:06:9f:
6a:b8:52:24:bc:7b:11:11:4c:be:b6:45:96:69:90:ef:8b:d2:
1e:75:2a:9c:28:b4:9e:3f:6b:8c:3b:d9:ca:cf:42:df:04:79:
ef:6b:8e:cd:41:19:ae:c9:ea:36:5c:4c:99:7a:61:ad:46:6f:
e7:89:03:f2:92:c7:9c:fd:7a:84:d9:00:ff:d8:84:22:8f:6b:
03:03:ef:0d:c3:02:d5:ff:d9:22:03:22:ca:33:54:ed:6a:dc:
f9:ea:93:8e:44:82:ea:5f:17:04:b5:88:50:bf:fc:15:11:6c:
9c:c0:21:12:40:dc:40:1d:1a:bc:11:ca:2c:f5:be:e6:8e:21:
02:56:0e:28:aa:32:76:a7:97:6e:dd:78:a0:dc:b8:28:a8:c6:
4d:db:c7:30:93:50:89:a6:c8:8f:bb:8c:c4:89:26:b9:64:eb:
57:12:99:e6:61:97:fd:36:e6:df:cd:86:e3:fe:23:f6:ea:89:
8d:97:3f:8e:7e:75:2f:16:d0:39:d3:e5:5b:9d:19:33:6e:b6:
a4:38:d1:38:af:8c:64:84:8e:60:d1:22:de:04:1d:1e:0a:b8:
dc:6c:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:24 2026 by rpki-client