
$ rpki-client -vvf rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa
File: E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa (raw, json)
Hash identifier: mBL1TBP+Msd9AlCfomB44CtyYjx9JeXY/drpx8eClaE=
Subject key identifier: 4D:A0:FD:21:1B:E0:E2:7D:B4:D2:ED:E4:78:C9:A5:92:07:BB:88:29
Certificate issuer: /CN=A914F349/serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Certificate serial: 035E
Authority key identifier: 4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:01:16 +0000
ROA not before: Sun 03 Aug 2025 02:08:48 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 64073
IP address blocks: 103.189.192.0/23 maxlen: 23
103.189.192.0/24 maxlen: 24
103.189.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 862 (0x35e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F349, serialNumber=4D944F30B8C6E691988D302FBA6C2F9C574C04B0
Validity
Not Before: Aug 3 02:08:48 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a4005c-7aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:d0:80:84:b1:92:99:06:9a:c0:d8:47:e1:
f3:59:00:60:5b:a1:f0:07:90:e5:b8:78:30:3a:f7:
af:d7:95:08:b0:35:ec:24:cb:78:05:c7:44:0a:64:
73:0d:68:71:67:8c:e0:99:f1:8b:47:62:92:df:1d:
1f:01:92:0a:3c:77:c7:c8:68:0f:d2:10:e0:22:22:
bb:2b:2a:66:8e:49:8e:bd:31:1d:85:df:c7:31:80:
ef:23:79:a9:6a:9f:12:cc:af:2e:89:a3:5b:e1:16:
ee:80:fc:b5:a5:e1:38:2d:69:d3:6c:8b:0d:06:d0:
66:47:ed:c3:52:c5:83:d9:d2:0e:09:21:d3:1d:55:
70:69:ed:c9:46:33:c6:b0:09:b0:3d:e4:90:26:d7:
05:b4:69:28:fc:f2:0b:12:5b:77:8c:07:ec:51:9f:
e7:72:b7:c0:ed:77:3f:46:66:32:04:b1:8e:2d:c5:
97:9f:05:18:e6:5f:e4:52:80:37:8a:6e:76:6e:d9:
c2:17:39:44:da:19:aa:f9:f7:e3:0d:28:67:71:7d:
3c:81:65:58:58:a5:ef:a6:d5:38:73:fa:bb:e2:36:
56:b4:1d:69:bb:6a:c5:1f:f6:8c:e0:85:35:7e:a2:
21:8e:e8:50:34:00:b5:1a:34:4a:a9:b0:56:f6:94:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:FD:21:1B:E0:E2:7D:B4:D2:ED:E4:78:C9:A5:92:07:BB:88:29
X509v3 Authority Key Identifier:
keyid:4D:94:4F:30:B8:C6:E6:91:98:8D:30:2F:BA:6C:2F:9C:57:4C:04:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/TZRPMLjG5pGYjTAvumwvnFdMBLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZRPMLjG5pGYjTAvumwvnFdMBLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F349/C6F5001AEDB111ECAF435C5DC4F9AE02/E5A22A7CEDB811ECB7BDFF0AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.192.0/23
Signature Algorithm: sha256WithRSAEncryption
82:00:bf:e7:32:10:2d:80:1f:ce:fe:02:c7:d3:64:fa:b1:05:
9a:ea:78:27:82:b3:29:92:05:88:23:2a:46:4d:15:fd:c2:a7:
8e:f3:7e:03:82:0e:4f:c7:7d:18:2c:a6:4b:03:1b:32:a6:3d:
23:08:73:52:b9:29:69:32:61:e7:26:13:80:3e:fc:67:98:b0:
78:47:a5:96:0f:15:d7:6b:db:05:2a:78:a8:21:9e:32:3e:91:
1e:72:8b:a0:4b:c5:85:e9:07:69:d2:8e:a2:e7:b9:75:54:cc:
d6:1f:30:39:3d:9b:e2:2e:21:8d:bd:8d:80:05:76:5c:73:47:
9a:97:cc:a7:31:f3:79:a3:f0:8b:6c:ee:ab:a2:97:a3:3c:89:
d5:b7:f0:98:99:72:70:0e:dd:af:7b:01:6e:99:13:a1:87:97:
66:9d:fc:dd:8a:9c:f9:63:0a:ea:cb:b9:80:23:9a:82:b1:54:
f2:5d:fa:87:5b:9b:e1:f5:0b:cd:ce:57:fb:0b:9c:d9:aa:9d:
c9:cf:c8:98:54:d8:f4:12:14:dd:c8:da:66:24:31:4c:eb:46:
4d:af:45:03:a3:05:a6:fd:bb:40:56:c0:59:a9:f7:41:62:5f:
4f:f2:39:b7:be:0b:95:23:cc:11:c6:da:34:ed:53:90:63:d6:
b2:3f:ba:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:57 2026 by rpki-client