
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/80B30FA48F5611EA9C04912BC4F9AE02.roa
File: 80B30FA48F5611EA9C04912BC4F9AE02.roa (raw, json)
Hash identifier: pNPg3NSSNft94Tg0GiIZkhjLfRjC2LjWGia0bcUNgI8=
Subject key identifier: 71:C1:EB:A4:2A:C4:63:74:8A:EB:D5:94:31:97:73:2B:43:4D:EB:62
Certificate issuer: /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial: 35D6
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/80B30FA48F5611EA9C04912BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:34:41 +0000
ROA not before: Tue 02 Sep 2025 15:00:55 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 55356
IP address blocks: 103.112.152.0/22 maxlen: 22
103.112.152.0/24 maxlen: 24
103.112.153.0/24 maxlen: 24
103.112.154.0/24 maxlen: 24
103.112.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13782 (0x35d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Validity
Not Before: Sep 2 15:00:55 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a486c0-7c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:64:ad:97:7a:04:c9:a4:35:7b:28:c7:8f:
e7:25:52:b6:5d:d2:60:38:c6:fb:d2:3e:ab:aa:08:
70:fa:f9:dc:7b:ff:28:af:42:1d:93:59:24:73:c2:
66:b3:c6:b8:e5:df:c2:89:ca:3f:91:b4:cc:9c:0e:
de:ac:d9:4a:d7:dc:f6:91:9f:aa:ec:f6:5f:f1:44:
20:58:24:21:ff:9b:76:00:ce:dc:6b:00:bd:f5:cf:
05:a8:89:8a:ee:1e:78:73:ee:c8:ff:5d:52:41:0e:
5a:e8:60:b2:b1:17:69:c4:a8:01:3d:60:db:c6:8f:
d3:89:67:12:b6:49:45:9d:9b:82:38:c2:36:32:1d:
f1:f3:48:60:de:88:ce:91:b7:3b:8c:fb:35:d2:a5:
2c:a3:cc:47:1b:5c:63:11:7d:c8:41:48:6a:c4:df:
aa:0a:89:3d:81:85:67:09:e3:0f:9a:b4:e3:b5:ca:
39:9b:6d:b2:0b:96:49:c3:7a:0d:8f:a2:e7:00:b2:
53:6a:45:12:1b:4e:bb:33:9e:89:a0:4e:4e:7a:1a:
a0:39:05:2f:4b:39:fd:9b:13:f7:04:b4:f4:d7:a5:
e7:85:cd:db:a0:82:c8:16:89:d6:91:5d:0a:69:ac:
84:57:d1:c1:54:43:cc:e7:68:17:69:0c:ad:56:6b:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C1:EB:A4:2A:C4:63:74:8A:EB:D5:94:31:97:73:2B:43:4D:EB:62
X509v3 Authority Key Identifier:
keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/80B30FA48F5611EA9C04912BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:0a:81:3a:b0:aa:63:cc:8e:a9:5d:b4:16:b5:f9:24:1b:0b:
0a:3c:51:95:7b:e0:8b:d5:96:f1:d9:06:30:12:70:e8:40:62:
ed:90:ee:3e:42:a8:4c:19:b5:3f:b7:71:fe:4a:c0:32:9d:0b:
fb:df:d6:05:4a:80:92:dd:ce:03:ff:8a:f5:0f:4f:4b:46:1c:
95:01:36:5b:c0:41:0f:57:98:9b:41:5f:f9:ac:e2:8e:72:37:
34:6d:ec:28:14:20:4e:73:12:5f:be:7d:20:31:53:a4:08:b3:
78:d7:c2:5b:38:28:3a:43:f7:2c:d9:7a:64:06:70:38:f8:94:
cc:5e:e1:9d:43:6f:1d:54:f4:67:98:94:9b:70:ea:b6:c0:3a:
5c:97:81:aa:1c:a8:95:23:b3:3b:0f:6b:1a:7f:fa:54:fe:e2:
95:0c:f8:14:47:8c:86:19:46:9c:ee:49:f4:90:a7:f2:04:9a:
4c:ab:df:ea:f0:af:a6:e4:dc:a0:d9:41:24:65:77:63:e4:b4:
69:89:04:1b:84:60:d4:85:fc:94:10:9a:ae:ea:c1:34:97:61:
91:a2:34:b3:11:7b:63:1a:ca:fd:87:5a:50:d1:82:43:f7:0a:
a2:e5:ee:e6:ba:ef:54:45:35:c8:0a:b3:6a:e1:c5:91:ee:08:
51:55:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:50 2026 by rpki-client