
$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/5007D8DECAB411E889484D32C4F9AE02.roa
File: 5007D8DECAB411E889484D32C4F9AE02.roa (raw, json)
Hash identifier: HLINmslRoe9L2W5d9zauGKp9+SgXzgVdgA5BJAfvBJA=
Subject key identifier: E0:D5:BA:06:5D:73:15:F8:ED:02:06:97:9F:05:E7:EE:BA:8B:B4:FA
Certificate issuer: /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Certificate serial: 34E8
Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/5007D8DECAB411E889484D32C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:37:43 +0000
ROA not before: Tue 02 Dec 2025 15:41:28 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 58739
IP address blocks: 103.30.168.0/24 maxlen: 24
103.243.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13544 (0x34e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Validity
Not Before: Dec 2 15:41:28 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44127-b308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:93:55:95:dd:47:9d:4d:ee:3e:2a:b6:1a:
c2:98:92:61:7d:28:1f:f1:8f:0c:0a:0c:90:9f:39:
66:6c:d9:0b:e8:56:01:1c:1b:52:a5:37:c4:76:87:
94:aa:6c:e3:7e:f1:17:f6:e2:b8:cc:d6:c3:8d:95:
d0:76:ae:83:29:ab:ba:1a:41:5f:a8:7b:7e:84:99:
c1:ed:5a:9c:2e:47:fc:b8:da:71:52:74:1e:35:13:
db:de:9f:b1:1c:da:d3:5e:97:55:4d:ea:da:c6:dd:
6a:33:00:f8:34:3f:f3:11:68:fd:a9:be:10:e7:28:
7f:10:3b:80:e0:f3:51:2a:29:f5:b0:98:1d:8b:27:
fa:76:17:88:8c:b7:f1:f0:6f:c2:63:80:e1:6e:33:
30:96:9e:cb:30:f8:23:a7:97:ad:ac:49:66:e2:74:
ba:eb:67:cd:49:ea:74:41:ff:82:96:5d:ee:28:d0:
6f:a2:a7:83:ab:59:f1:27:d9:8a:86:2c:ee:6b:72:
2d:f7:3c:b3:2c:a0:ec:df:01:85:a4:57:de:a7:e0:
b5:dc:64:73:f9:1d:17:11:cd:23:95:b2:40:95:a3:
8b:df:f2:02:4d:85:68:46:48:b8:60:24:6b:bb:64:
b5:c4:25:cf:bb:69:35:6e:35:a9:70:e4:50:24:76:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D5:BA:06:5D:73:15:F8:ED:02:06:97:9F:05:E7:EE:BA:8B:B4:FA
X509v3 Authority Key Identifier:
keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/5007D8DECAB411E889484D32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.30.168.0/24
103.243.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7c:1c:22:b8:44:66:96:f0:01:ab:ff:a9:a8:10:5f:d2:28:
a2:b6:31:ab:65:28:48:96:87:a6:a8:27:8f:18:e1:93:dc:f3:
c5:35:52:68:fe:52:ef:8d:6c:d9:d6:f5:16:c0:76:0f:07:7a:
36:02:60:a8:fd:da:fa:81:1c:98:69:b9:ea:de:ed:89:17:13:
a0:1c:14:f1:45:f5:c4:7e:4c:fa:21:99:33:19:f9:a2:3b:a7:
81:d6:c3:2f:7e:c4:29:05:19:66:7e:11:82:a8:90:cd:86:c7:
ef:34:c7:39:a0:b9:97:b5:fe:e4:83:46:10:ae:30:81:a5:ba:
2b:f2:fe:75:5f:ab:4b:21:a5:e4:62:81:95:50:4b:38:98:e7:
fc:a9:87:24:cd:16:3f:03:7b:6d:27:e3:18:e2:d5:22:5b:bd:
02:b4:96:18:71:50:ef:51:63:82:cc:84:cf:16:60:d4:a2:b2:
25:1c:6f:80:61:b0:91:75:06:6c:56:81:b1:7a:c5:d4:5b:f7:
41:25:a6:41:e3:3f:2b:c9:aa:fc:4b:b9:72:24:49:dd:f4:bb:
48:88:e6:1e:2e:0c:92:f1:a5:86:a3:91:00:40:25:8b:9b:2e:
92:33:ff:c9:3f:c1:33:0b:15:bc:6a:2d:25:63:9a:53:64:58:
68:5b:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:29:02 2026 by rpki-client