
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa
File: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (raw, json)
Hash identifier: zfsi67ywK534SiQhgr/zUV/GZnBGCY0qZt7fhx8+eS4=
Subject key identifier: D6:55:F5:02:42:A2:2B:BB:F9:B4:3F:35:C0:A0:68:8C:12:16:CF:0B
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 04B7
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:29:26 +0000
ROA not before: Sun 21 Dec 2025 00:21:03 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 135110
IP address blocks: 103.239.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:41:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1207 (0x4b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Dec 21 00:21:03 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48586-9bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:81:82:1c:a8:21:5c:8e:60:03:49:6c:c1:b0:
a9:bf:5b:16:11:89:b5:d0:a8:d4:a2:97:31:06:bf:
36:5b:ee:28:1c:ec:c8:c7:a4:1d:9c:97:bc:98:64:
af:57:4b:19:37:10:48:26:b6:e2:f1:57:25:f2:36:
29:08:4e:ee:21:56:1e:38:8c:bf:96:d0:f8:73:34:
6e:c2:9c:80:94:6e:f5:ef:de:61:57:c6:ae:42:c5:
65:4b:5d:6c:85:45:e6:2d:fb:d2:d7:53:1f:2b:95:
5f:81:97:52:9c:8e:2b:5b:b9:2c:2d:12:9a:8e:ee:
30:c3:0f:7c:49:9e:e7:de:c3:71:2a:8d:b4:98:0b:
7f:2b:b5:bf:71:13:a6:b4:4d:05:3c:57:4f:73:78:
53:84:0c:c6:4b:e8:d8:22:42:8b:d9:e4:41:43:18:
e4:04:72:d2:7a:a7:27:2b:e7:1e:9b:0f:77:76:cc:
80:7d:a9:dc:54:55:a1:98:23:b2:d9:f8:25:1c:aa:
59:e4:95:e8:7e:eb:ae:5d:67:0c:08:fc:90:55:9c:
21:6a:5a:01:e8:c1:dd:8c:04:ec:57:9e:ca:89:92:
ed:a9:71:bb:a2:35:00:ba:8e:17:5a:80:f6:43:91:
1e:26:a5:7f:f4:66:f8:68:d9:27:ec:9c:68:12:37:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:55:F5:02:42:A2:2B:BB:F9:B4:3F:35:C0:A0:68:8C:12:16:CF:0B
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F7D72D3E23E211EFA47D6C68C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.239.102.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:32:c8:d4:70:fd:06:df:60:22:64:b3:41:15:77:8b:2d:71:
7e:cf:ea:b2:2f:f5:e1:7c:86:5f:c6:05:0f:a9:8c:27:05:19:
1d:6d:ae:83:16:7b:f4:d2:4b:60:67:f8:d5:b9:f6:53:56:24:
36:12:0e:cb:35:37:8d:6b:42:75:02:03:2b:f5:ce:b5:6e:b5:
a0:d7:14:a3:cc:8f:13:5c:6f:31:11:8a:fe:20:cd:9e:d1:21:
7b:64:c4:4b:7f:f3:3f:37:f6:8a:89:4c:31:7f:0d:84:2c:28:
51:11:a5:ac:de:2a:01:94:00:1f:0f:d2:4a:44:14:0d:84:54:
ea:09:d3:6a:9e:e6:7a:42:c6:8e:10:f0:73:1f:c6:34:bc:15:
83:03:00:f0:dd:1c:f4:84:92:3e:cd:54:e0:5b:6d:8f:b2:0e:
1b:4d:d7:79:66:76:6c:31:f7:de:08:e8:2b:f5:b7:60:3f:6f:
f2:d8:a2:16:31:5e:16:87:df:dd:39:5e:f4:e7:32:9f:62:25:
a3:29:65:22:8d:46:ca:ed:e4:74:3e:f0:57:5b:d3:59:6a:93:
d0:c7:c4:6c:0f:63:77:a2:78:b9:91:d9:0a:d1:8a:8e:ce:cb:
3b:62:cb:ba:d2:22:32:cc:d3:c7:4a:0e:3e:a9:49:24:b7:0f:
ec:41:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:32 2026 by rpki-client