
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/078192DE0E0111F08A256F7AC4F9AE02.roa
File: 078192DE0E0111F08A256F7AC4F9AE02.roa (raw, json)
Hash identifier: 7H7BDYcCX22UqsJsoAkbVUxfSLtBSyWBTwnFSqNyE4w=
Subject key identifier: 4D:8E:56:D7:1C:F3:7F:BD:31:C8:F3:1D:61:EC:67:32:BD:C0:EC:B0
Certificate issuer: /CN=A914E6AA/serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Certificate serial: B1
Authority key identifier: A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/078192DE0E0111F08A256F7AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:12:45 +0000
ROA not before: Fri 04 Apr 2025 23:33:39 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 141459
IP address blocks: 103.160.22.0/23 maxlen: 23
103.160.22.0/24 maxlen: 24
103.160.23.0/24 maxlen: 24
2406:e1c0::/32 maxlen: 32
2406:e1c0:5::/48 maxlen: 48
2406:e1c0:200::/48 maxlen: 48
2406:e1c0:300::/48 maxlen: 48
2406:e1c0:400::/48 maxlen: 48
2406:e1c0:500::/48 maxlen: 48
2406:e1c0:600::/48 maxlen: 48
2406:e1c0:fce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E6AA, serialNumber=A76E05B83454ED1A209025E83D75E405791892C1
Validity
Not Before: Apr 4 23:33:39 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=69a4abcd-6899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:2f:18:0f:c7:02:7d:7a:7f:d9:57:07:c6:
b0:8e:37:c7:48:ee:04:3b:dd:cf:eb:59:46:fe:df:
9e:2b:c4:f2:ce:03:94:73:c0:a1:d5:fc:6f:15:42:
3c:05:c3:ed:81:35:42:38:47:92:a1:79:06:04:49:
8e:39:ea:18:ce:96:e3:da:14:ad:e3:8e:f7:15:72:
4e:55:e4:e9:5b:a6:47:83:03:49:dd:7a:4c:e8:f7:
c0:ff:b2:1f:09:a7:a4:d0:02:a8:b1:d7:aa:38:fe:
56:10:ca:77:3d:76:0f:ac:fa:2d:17:8a:1a:07:36:
4c:ed:02:35:90:9d:54:b8:d2:2a:71:bf:57:db:da:
26:cd:bc:75:46:05:f2:b7:85:94:66:7c:29:11:83:
4f:56:70:b8:00:8a:c3:67:49:80:6f:81:d1:0b:52:
fd:54:b9:fe:d2:8d:aa:72:b8:2f:65:f7:80:8b:6a:
d8:ba:df:88:a5:c6:62:16:05:6b:1a:1c:05:2a:1f:
aa:c5:06:68:14:6d:de:13:9b:a5:d6:b6:95:b0:7d:
61:2f:ed:00:74:f8:8a:1d:25:86:94:60:71:c9:5a:
de:e8:c1:8c:99:69:01:38:e9:81:c1:f8:c1:8b:89:
3b:f8:4f:63:f6:19:2e:e9:36:00:cc:89:f8:6b:12:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8E:56:D7:1C:F3:7F:BD:31:C8:F3:1D:61:EC:67:32:BD:C0:EC:B0
X509v3 Authority Key Identifier:
keyid:A7:6E:05:B8:34:54:ED:1A:20:90:25:E8:3D:75:E4:05:79:18:92:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/p24FuDRU7RogkCXoPXXkBXkYksE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p24FuDRU7RogkCXoPXXkBXkYksE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/078192DE0E0111F08A256F7AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.160.22.0/23
IPv6:
2406:e1c0::/32
Signature Algorithm: sha256WithRSAEncryption
03:64:b1:71:85:56:57:6e:2f:f3:73:eb:0c:83:ef:8f:bb:9e:
5d:a6:af:64:67:bb:92:f3:11:f7:eb:12:55:0a:07:79:25:4b:
58:b7:35:3b:22:52:50:cb:8c:97:c6:3d:58:28:e2:7e:80:19:
17:80:4f:42:37:43:25:43:7c:c6:d6:c1:21:ca:4f:73:b2:d8:
78:3f:30:f5:44:a7:10:35:7b:15:da:a3:10:80:9f:61:32:7d:
9f:04:8f:19:0a:4d:cc:92:e1:cc:52:e6:0f:6a:61:1e:8a:42:
15:a7:10:a9:b3:c8:cf:f3:0f:52:07:a3:06:f5:e4:6d:16:b2:
fe:15:6b:12:d3:0b:7e:0b:fa:7f:55:b0:0b:9b:2b:4b:4f:8e:
d8:f2:93:0f:cf:a1:29:aa:eb:d2:c5:37:43:dc:54:11:0f:4b:
74:23:64:6b:f8:79:3e:a8:b0:ff:1a:e1:7a:5c:e1:42:47:c2:
34:25:c0:bf:64:f6:8d:4a:33:73:c1:4f:03:2d:b9:6f:84:4c:
12:0d:00:4f:33:08:aa:54:9a:0c:5f:d3:0a:b1:7d:d7:54:3e:
9f:e0:7c:2e:49:08:98:cb:46:94:9b:cc:dd:d6:dd:e2:46:7c:
a6:d7:12:38:0a:ca:a1:1c:39:72:b8:9e:7d:f0:3f:d2:26:5c:
66:e2:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:23 2026 by rpki-client