
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
File: 81C5BFF8192811EA9B88D87DC4F9AE02.roa (raw, json)
Hash identifier: MlGQE6i/naYke0ZwsPc47N+NQobrGaPsNs00jN9E6oo=
Subject key identifier: E7:03:8A:E1:D6:7C:09:59:D3:2D:31:4C:8E:AE:DA:77:EC:3C:7B:21
Certificate issuer: /CN=A916EBCB/serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Certificate serial: 0C74
Authority key identifier: CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:55:00 +0000
ROA not before: Thu 04 Dec 2025 18:29:40 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139771
IP address blocks: 103.145.28.0/24 maxlen: 24
103.145.29.0/24 maxlen: 24
2001:df1:f180::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3188 (0xc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EBCB, serialNumber=CC3690F896EF567311535BC444DF1EB741FD8BB4
Validity
Not Before: Dec 4 18:29:40 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a44534-96d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7d:c0:c3:3e:04:87:d4:a5:34:78:a0:bc:76:
ac:7c:4b:c7:1e:bc:45:5d:75:03:2c:99:b4:ce:e8:
a1:f1:eb:46:94:61:f7:01:61:c7:b5:5c:e7:11:60:
ac:b4:b8:56:e9:95:f2:93:20:27:c5:16:da:a3:1f:
f3:85:e9:8e:68:53:85:75:a4:46:6a:36:da:36:be:
c7:e6:cc:11:db:e1:44:ea:0e:3f:f1:13:9a:3e:c2:
b9:ac:20:84:10:62:1a:fd:0a:87:a7:48:26:38:cf:
22:72:01:ee:74:8a:f8:11:c4:17:a2:6d:1b:4c:2f:
a0:0e:10:75:fd:ff:84:dc:b7:cb:54:01:fd:19:68:
c3:ef:ad:dc:b0:41:76:15:bf:0c:9d:fe:7f:f8:92:
94:1a:a7:c8:c5:51:db:32:35:b3:7f:7b:28:f7:66:
98:ab:a6:96:9c:15:25:b0:69:a1:f7:2d:92:6c:df:
f1:04:5e:8b:98:85:85:02:78:c8:44:88:44:41:cb:
56:4a:db:0d:3d:ed:77:dc:20:a2:dc:13:9b:72:35:
43:68:40:20:ff:b1:b9:92:6a:85:77:3c:a2:25:10:
23:4b:03:6f:30:18:45:63:2d:5d:65:bb:3d:9a:af:
3a:1a:ca:7a:11:4e:0d:81:97:7f:a5:1b:af:cf:c6:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:03:8A:E1:D6:7C:09:59:D3:2D:31:4C:8E:AE:DA:77:EC:3C:7B:21
X509v3 Authority Key Identifier:
keyid:CC:36:90:F8:96:EF:56:73:11:53:5B:C4:44:DF:1E:B7:41:FD:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/zDaQ-JbvVnMRU1vERN8et0H9i7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zDaQ-JbvVnMRU1vERN8et0H9i7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBCB/E8D695AC192611EAA3361C7BC4F9AE02/81C5BFF8192811EA9B88D87DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.145.28.0/23
IPv6:
2001:df1:f180::/48
Signature Algorithm: sha256WithRSAEncryption
69:ae:39:ac:69:a3:c3:70:b2:c5:38:c6:7f:e7:fe:a2:5a:8c:
ce:3d:6f:66:c7:7a:36:0b:3f:2c:1b:d7:e8:19:da:22:64:02:
b0:5b:9a:65:cc:aa:71:d6:61:ac:0d:86:53:c3:62:94:d1:79:
08:a6:61:47:90:06:5b:54:6b:ec:20:f0:56:80:90:47:f0:7e:
5c:7b:10:63:7d:98:53:b7:f7:f2:33:26:5b:bb:44:fe:f0:52:
d8:2d:78:bd:9c:ca:bc:15:b2:20:f4:c6:2c:d3:7a:25:e1:05:
ec:ac:d6:7d:2b:a0:08:93:05:03:17:68:bb:c1:16:3e:6f:c7:
11:17:8e:d5:48:f5:36:87:8e:93:3a:16:8e:87:ae:02:df:9c:
87:c9:db:78:d4:b5:88:01:74:dc:6e:99:97:6b:ab:62:ed:ea:
fb:3a:8b:fd:93:51:00:11:a3:f1:d6:83:5f:00:c0:34:eb:3d:
6f:d2:30:2e:5b:58:46:38:bc:52:55:24:ee:b7:7a:67:41:fe:
27:be:56:57:42:3c:13:50:29:7c:a8:d0:20:7f:36:e6:4a:f0:
d5:60:be:95:fd:10:62:ea:60:99:73:d5:cf:68:fd:fd:af:51:
9d:05:d2:cf:af:da:03:ba:51:79:1c:af:a2:b7:8f:8f:11:89:
df:45:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:43 2026 by rpki-client