
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/375F7DAA0C3911EB828BDC25C4F9AE02.roa
File: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (raw, json)
Hash identifier: hCv4wxJX5+ETdeFNVL5GtKS1rPvCsBD6zv5q8RT353s=
Subject key identifier: 1E:00:C5:50:8C:45:69:EA:C7:E3:A3:1E:95:32:E2:FE:71:CE:7C:9C
Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Certificate serial: 0827
Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/375F7DAA0C3911EB828BDC25C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:38:49 +0000
ROA not before: Mon 31 Mar 2025 21:51:59 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 24572
IP address blocks: 103.2.72.0/22 maxlen: 22
114.110.48.0/20 maxlen: 20
114.111.64.0/18 maxlen: 18
124.83.128.0/17 maxlen: 17
183.79.0.0/16 maxlen: 16
2400:7e00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2087 (0x827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E
Validity
Not Before: Mar 31 21:51:59 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a3fb19-f27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:03:31:8e:d6:be:ae:b1:21:18:4b:49:36:
85:82:0f:fe:af:35:76:eb:27:25:cc:5b:3a:70:51:
9e:61:fa:ea:3a:8f:cb:7d:9e:75:6d:b3:bf:e8:89:
02:11:97:d1:cd:23:1f:5c:43:8b:af:c0:0d:18:a5:
4b:d6:ac:ea:bd:a6:43:af:dd:bf:69:05:3a:f1:81:
ad:32:0c:4c:90:59:bc:68:e2:c5:d6:d0:02:dd:74:
76:e7:30:4e:1e:d8:3f:80:cc:8e:ee:01:3e:e1:c4:
00:e9:2f:e6:14:1e:81:17:e5:28:f7:33:8d:e0:af:
af:67:5b:78:08:ea:d5:7d:9c:88:57:a4:76:6b:c9:
96:81:07:b9:ba:66:36:95:da:ed:81:e6:1b:6e:38:
d9:a9:98:f8:a2:b1:3c:f4:fb:0a:ac:20:d4:e0:13:
c9:e8:64:ad:e5:4d:b2:aa:1c:55:6d:b8:02:13:1c:
a0:f7:a8:ee:9a:72:2d:d8:33:21:3f:41:fc:c7:62:
29:8d:9f:64:b2:71:04:09:da:22:10:25:5c:b5:7c:
46:61:79:4d:45:ba:02:b0:37:9f:e1:06:27:54:dd:
a3:3a:ef:7a:24:59:b6:e0:a0:82:52:e5:0f:b3:2d:
75:c1:24:3c:19:40:15:00:8c:24:89:0e:2a:96:90:
2a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:00:C5:50:8C:45:69:EA:C7:E3:A3:1E:95:32:E2:FE:71:CE:7C:9C
X509v3 Authority Key Identifier:
keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/375F7DAA0C3911EB828BDC25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.2.72.0/22
114.110.48.0/20
114.111.64.0/18
124.83.128.0/17
183.79.0.0/16
IPv6:
2400:7e00::/32
Signature Algorithm: sha256WithRSAEncryption
67:ed:43:cd:93:1f:84:e8:ab:a5:af:cf:d4:1a:7e:a0:fc:d6:
b0:aa:ad:35:b3:44:c1:82:28:1a:b5:02:24:42:8b:67:c1:73:
63:04:b3:1f:e0:24:08:b3:7a:0e:de:db:ab:33:9a:0b:46:89:
c9:0e:cf:a7:92:74:65:55:c6:31:91:e5:e4:e2:18:b1:9f:dc:
9b:8b:14:c9:27:58:f8:04:2e:12:06:7a:7a:6f:d0:71:d1:af:
d5:1c:d7:e4:32:4c:f0:8c:02:7b:ae:b4:10:41:6c:1e:ea:f1:
c6:73:d5:d5:81:28:d9:58:82:2f:de:95:0d:a5:2a:e5:e8:63:
a1:1f:19:c0:d0:db:3c:5c:86:93:85:15:04:00:df:fc:d2:11:
f7:3d:b9:90:e0:b5:2b:81:8f:db:cf:82:54:a1:dd:ba:22:3b:
3b:dd:12:10:db:26:ae:5d:4d:67:ba:76:75:51:23:0c:35:96:
84:97:a6:15:71:aa:80:de:ce:79:7b:8d:d3:47:72:46:8f:1a:
35:08:8c:d3:d8:a5:09:49:aa:58:47:50:e0:da:a9:07:db:90:
15:2a:7e:ed:eb:19:9a:36:b0:4f:61:2c:b4:d7:ef:d5:6d:1c:
b2:8c:7e:12:76:5c:12:47:dc:2e:6c:d7:03:31:53:0c:0f:82:
c9:7c:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:45 2026 by rpki-client