
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
File: 2541D62A7F9811ED93508538C4F9AE02.roa (raw, json)
Hash identifier: i4z4SLF7zikTyMdvP4trrrkTfOX3ZAKYOCTCXzUWXRk=
Subject key identifier: 79:D2:B6:9D:9A:0C:70:1A:C3:DD:BC:96:76:77:0A:2A:E1:1C:1E:44
Certificate issuer: /CN=A914E1C1/serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Certificate serial: 0306
Authority key identifier: E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:06:06 +0000
ROA not before: Sat 09 Aug 2025 02:39:10 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132561
IP address blocks: 103.58.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 774 (0x306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E1C1, serialNumber=E3F3154D988276A2F541E5EA62818C770BBB80EA
Validity
Not Before: Aug 9 02:39:10 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4017e-e433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fe:7a:92:a0:ed:24:fe:31:5c:a4:04:85:84:
21:dd:cc:95:1c:c7:ec:3a:71:8c:f1:06:6f:5a:09:
98:06:56:f4:75:3e:27:8c:95:2d:18:39:3f:22:ca:
dc:bc:aa:be:bf:09:da:bd:f8:a8:8d:83:3b:52:b9:
b0:45:9e:38:1f:63:41:46:e4:bf:4f:56:bb:9f:df:
73:fe:4f:39:65:c1:8a:9c:bf:fc:55:e5:53:64:b5:
3a:a9:d1:cf:6a:b9:b6:ef:73:5f:ca:6c:4b:0b:5a:
e8:a7:94:4a:05:40:be:db:45:11:30:93:5e:eb:8e:
28:e3:1e:bf:1f:31:51:86:db:0c:6f:9a:59:07:0d:
40:5d:8d:e0:dc:40:67:e5:20:0d:66:ff:6d:3d:0d:
ef:0f:8c:a0:3b:9e:9b:76:25:86:14:1a:f7:a1:2e:
f3:da:8b:b9:71:8b:f5:93:1f:35:27:a7:10:fc:72:
61:2a:01:e4:d5:24:d4:e0:71:24:84:cc:eb:18:ec:
60:32:d4:8d:16:ce:dc:a7:00:4a:62:70:b1:50:46:
26:03:41:a4:41:3f:99:cf:6f:4a:95:6b:2c:28:a9:
54:ca:81:ad:9f:2b:d2:7d:7d:37:dd:ef:13:26:96:
c7:53:44:25:3a:ad:d3:c5:7c:df:93:c6:1e:7b:e1:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:B6:9D:9A:0C:70:1A:C3:DD:BC:96:76:77:0A:2A:E1:1C:1E:44
X509v3 Authority Key Identifier:
keyid:E3:F3:15:4D:98:82:76:A2:F5:41:E5:EA:62:81:8C:77:0B:BB:80:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/4_MVTZiCdqL1QeXqYoGMdwu7gOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4_MVTZiCdqL1QeXqYoGMdwu7gOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1C1/DBE5F2CA10C711ED8BB3B75DC4F9AE02/2541D62A7F9811ED93508538C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.58.180.0/23
Signature Algorithm: sha256WithRSAEncryption
59:fd:98:50:f8:33:23:50:01:1a:f9:cd:fd:07:b2:37:09:52:
33:48:f8:b7:e0:c5:f7:5d:31:92:98:c6:50:37:cf:46:fe:20:
6c:c4:02:25:d2:ae:14:f8:16:5f:08:dc:2c:ab:40:4d:7f:27:
eb:7b:a1:3d:f2:fd:fd:b0:50:a0:28:4b:a1:32:a1:85:ce:b4:
03:3d:b3:c4:5f:8f:7d:b2:98:38:4b:d1:93:10:a1:80:75:ed:
cb:63:53:f2:f7:a9:85:86:80:20:71:e0:ad:01:dc:46:17:b2:
44:13:42:71:93:4c:c8:17:57:a1:53:40:f7:f4:ec:bc:31:fd:
f0:c5:92:93:f3:36:4f:f8:55:05:05:21:d4:0b:48:bf:f5:06:
3d:9c:0f:25:e0:68:ad:ce:1d:45:80:0b:af:af:6e:05:65:5c:
36:3e:d8:ab:d8:42:1d:c6:48:4a:8f:9a:df:a5:be:07:ad:4c:
c4:b1:0f:5c:e3:e0:bb:8b:86:ca:c3:49:c7:bb:f3:9c:ea:3a:
5f:b8:34:b5:b8:68:dd:d4:46:e9:c7:96:ed:f8:33:27:2c:c8:
9a:a0:ff:8b:02:f0:cf:ad:59:ae:0b:fc:19:1d:4c:60:91:51:
08:03:6a:f3:9a:33:f6:0b:9e:e7:b6:89:14:e4:f5:16:3c:fd:
2d:1f:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:21 2026 by rpki-client