
$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
File: 253B1382106C11F08D824C19C4F9AE02.roa (raw, json)
Hash identifier: eo5Er8iuxT75wLcKVzFBlRXEOJUUc8Rit00G+PSlQNY=
Subject key identifier: C1:AB:81:D1:BF:F1:73:DE:AF:DF:1C:B4:03:68:65:A8:05:78:89:83
Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial: 18F3
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:43:10 +0000
ROA not before: Thu 04 Dec 2025 16:15:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 153621
IP address blocks: 103.77.24.0/23 maxlen: 23
2401:d540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6387 (0x18f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Validity
Not Before: Dec 4 16:15:29 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4426e-5dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:06:c9:94:37:9d:86:d7:d1:b6:73:50:26:
62:3b:27:35:f8:32:7e:5c:3a:aa:41:d1:3e:ea:b3:
d5:e6:38:90:bc:fe:81:14:79:50:e9:cd:6f:1d:d5:
e8:22:de:e7:8c:e5:ac:a9:6b:5e:05:93:75:f5:66:
1a:f2:4f:ae:8b:67:87:90:b7:35:c2:1c:32:80:20:
45:b0:25:e1:da:a2:5c:21:eb:af:18:fe:db:1e:c1:
0a:f3:7a:cb:82:aa:37:3c:cd:0d:59:64:6a:67:57:
92:c0:15:a2:85:ee:c2:dc:18:02:88:12:e8:76:9b:
b3:32:05:16:ca:be:34:72:4d:96:d2:b7:82:82:c5:
e0:61:ea:30:64:96:ae:d4:66:8c:0a:0a:54:f7:1b:
df:3f:03:02:41:e4:de:52:4b:e8:0b:a1:c7:83:98:
09:6c:25:68:a8:5b:db:18:86:e9:99:ba:ef:6c:9b:
34:4f:d5:41:2d:43:60:dc:dd:03:9a:7c:c2:13:7c:
82:4d:60:2e:a1:87:96:74:5c:5f:2a:48:93:7f:06:
0b:8c:c5:4f:71:a1:b5:4f:8a:c4:d4:ff:24:e0:57:
dc:40:63:33:13:3b:e1:e6:2c:25:1a:81:d2:81:1b:
b5:2a:f9:c3:09:ed:1c:13:f9:f8:a6:57:44:ed:10:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AB:81:D1:BF:F1:73:DE:AF:DF:1C:B4:03:68:65:A8:05:78:89:83
X509v3 Authority Key Identifier:
keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/253B1382106C11F08D824C19C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.24.0/23
IPv6:
2401:d540::/32
Signature Algorithm: sha256WithRSAEncryption
a1:5e:26:65:6a:48:cf:38:d7:74:cc:b4:f0:b1:62:8a:cd:56:
24:64:4a:58:ac:6c:bf:46:46:86:e6:10:41:3b:d6:da:32:ec:
0f:ae:92:34:61:34:a1:eb:a3:82:dc:11:0c:92:0e:09:b2:9e:
74:0d:56:4f:dd:b6:1e:5d:5f:4a:c5:f6:84:32:3b:93:87:19:
41:5e:a8:12:96:00:75:61:62:64:ee:28:cb:1b:c2:34:4a:07:
e3:ee:a6:58:8e:c5:a9:87:53:4e:c3:85:40:c0:fc:f3:c8:5c:
46:71:df:ff:8e:91:bf:e5:1a:2a:5f:93:95:d4:20:08:70:a9:
95:2f:2a:65:36:4f:67:db:29:c6:56:c8:b9:0e:64:54:f6:06:
b1:7d:bd:28:34:68:be:7e:e0:7f:e7:f3:34:b7:09:5d:e9:67:
6f:78:aa:df:f0:b3:cd:b7:80:22:63:7c:6a:40:e7:3b:8b:21:
34:c7:83:e4:f4:d4:09:5a:e1:96:06:e2:0e:f2:f3:66:57:cc:
63:16:9a:ac:5a:64:c3:c9:01:e4:43:c7:e5:58:3e:6a:ca:af:
ad:59:58:22:dc:3a:51:88:73:04:3e:eb:04:4a:f1:9c:a5:09:
db:23:5c:74:40:45:bd:0f:24:18:a4:90:fc:ea:46:70:7a:b3:
6d:11:a1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:09:12 2026 by rpki-client