
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
File: C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa (raw, json)
Hash identifier: kdzwoZAMh51JZsHZZa0HJnczi1+crw9wnyc8mMxvPFw=
Subject key identifier: 7E:C3:E3:D9:0D:29:B3:42:0E:61:01:E2:E7:6A:F3:24:14:EC:CF:4D
Certificate issuer: /CN=A914DB69/serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Certificate serial: 01C5
Authority key identifier: F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:23:47 +0000
ROA not before: Fri 31 Oct 2025 03:48:30 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 141210
IP address blocks: 103.173.188.0/24 maxlen: 24
103.173.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453 (0x1c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DB69, serialNumber=F97C6B9F069B6C02CB3D8EAD5AF73E506C08CA38
Validity
Not Before: Oct 31 03:48:30 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a413b3-daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:04:fe:37:db:1f:53:2c:0c:66:59:5d:8a:94:
5d:d2:cf:1c:97:17:c0:cf:15:7a:85:b5:7b:8d:84:
d3:d2:2f:66:a5:18:fe:eb:6d:08:ed:c3:9b:5e:75:
db:ae:70:15:6c:c3:0b:f1:72:4f:43:12:f0:87:6c:
9a:40:e8:58:c9:5d:cd:17:03:ae:b8:40:7e:71:fd:
f5:3c:a1:ed:5d:5c:ed:ae:10:f6:3a:2d:ad:e2:4c:
4b:0a:2a:fb:3d:ec:31:8f:ae:a3:bf:e0:36:00:9a:
55:67:ae:8b:57:35:c8:b3:90:e3:ff:ef:d3:5f:dc:
4e:1e:6e:2b:0a:32:7d:aa:98:dc:3a:77:0b:97:90:
ae:18:c8:8a:ca:91:21:5c:42:3a:0f:31:89:f6:0e:
51:bd:b6:92:ac:1f:a9:3c:a1:70:60:d4:e0:b6:d8:
13:70:cf:36:7e:6f:8a:55:f0:5f:e6:ce:d7:70:c7:
fa:29:37:49:c0:df:00:e8:9f:41:99:fd:92:75:60:
96:58:7a:d4:e5:75:6f:08:4a:21:95:fd:67:39:e7:
0f:8e:7b:6a:85:f6:da:e1:30:9f:b8:2d:bf:9d:55:
a4:4b:cd:fd:c7:b4:02:76:d6:3d:d5:f0:bc:64:09:
b6:1b:4e:77:67:aa:11:e7:80:51:82:74:92:65:cd:
02:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C3:E3:D9:0D:29:B3:42:0E:61:01:E2:E7:6A:F3:24:14:EC:CF:4D
X509v3 Authority Key Identifier:
keyid:F9:7C:6B:9F:06:9B:6C:02:CB:3D:8E:AD:5A:F7:3E:50:6C:08:CA:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/-XxrnwabbALLPY6tWvc-UGwIyjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XxrnwabbALLPY6tWvc-UGwIyjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DB69/DA860CC86E5C11EE9C013361C4F9AE02/C4AA7A3A6E5F11EE9F66E967C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.173.188.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:9b:46:a1:20:27:44:1d:16:97:e0:b3:ac:ab:f1:77:af:bc:
21:5c:de:8d:5e:09:bc:38:56:af:4b:b4:c5:5d:37:5e:d8:16:
20:b1:a3:b0:32:79:42:2b:51:9f:41:22:1d:bc:07:b4:1a:9d:
ba:a6:ed:0f:3a:bb:51:60:8a:c7:b8:53:c1:60:e8:af:36:2d:
ec:a0:e7:e0:05:df:c4:40:dd:9b:f5:da:30:5b:69:4f:64:a3:
51:2e:7c:32:8e:22:60:86:42:69:d9:ec:5b:6e:c2:de:7b:8b:
77:9d:be:b9:6e:92:9b:56:ec:dc:d8:b3:68:30:8f:67:6d:66:
b2:8d:42:0d:4c:96:35:7a:9a:62:72:c9:04:78:9f:b9:f7:f7:
fb:fe:33:ea:74:19:d5:58:df:92:43:0b:3e:27:2e:e1:62:39:
fa:26:0f:09:f8:2e:28:ff:5b:ce:cd:ca:b0:42:33:2a:ec:b8:
da:0c:20:ea:d0:1f:39:6a:7e:ff:d9:2d:2c:24:ff:c9:18:fb:
7a:7e:9f:85:0f:eb:74:02:50:49:90:94:31:2b:56:4a:1b:14:
f6:9c:6f:aa:c8:23:71:72:09:78:18:26:57:16:32:4a:ff:69:
bc:ee:d3:6e:77:52:67:63:02:78:cb:d7:fb:37:f4:fe:5e:79:
9c:d0:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:27 2026 by rpki-client