
$ rpki-client -vvf rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2B7215E2B54B11EA85EE266DC4F9AE02.roa
File: 2B7215E2B54B11EA85EE266DC4F9AE02.roa (raw, json)
Hash identifier: ChWEYoSwPWyO7zRK4VL3WyQc574q+WUYB0OYthzNWRg=
Subject key identifier: 99:8C:31:D3:79:09:DE:63:EF:DE:A7:CE:05:65:E9:D8:4E:05:B5:9C
Certificate issuer: /CN=A919123C/serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Certificate serial: 095E
Authority key identifier: BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2B7215E2B54B11EA85EE266DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:02:04 +0000
ROA not before: Fri 02 Jan 2026 20:17:06 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 16509
IP address blocks: 103.149.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919123C, serialNumber=BB1DED544B27A13719B48FB00373CD49E0DE8517
Validity
Not Before: Jan 2 20:17:06 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a462fc-3f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3e:0f:fd:6d:ce:e5:76:9a:5e:c0:fd:d4:34:
70:db:ce:74:30:4c:fd:6c:41:97:1d:18:96:09:e9:
59:97:a3:38:34:26:c9:05:fe:82:56:77:9c:b4:27:
57:58:dc:a4:15:6a:48:60:aa:ae:24:01:21:37:7b:
e9:a6:61:51:36:11:6c:f1:cb:e5:b0:dc:d0:4b:84:
3c:ba:1e:ba:14:21:5e:b5:12:dc:27:6a:ea:30:5d:
c7:bc:8c:82:47:32:9f:4a:80:ff:eb:8f:86:00:d5:
f5:55:6b:03:44:ed:72:ca:26:5f:22:95:8e:25:92:
06:81:e7:79:56:e0:5e:5c:e7:9f:31:9d:38:da:54:
fd:ab:31:ca:67:d1:51:bf:63:27:89:c5:c8:6b:b5:
69:c2:85:ea:d5:27:3a:0e:d3:ae:85:f1:20:b9:51:
1b:e9:6b:d7:1e:35:9e:17:1e:0d:f2:59:9a:95:50:
26:1a:30:77:90:fa:88:04:32:a3:f4:b8:3e:7a:3e:
5a:43:4d:1f:d8:1f:5f:da:d6:91:b6:cf:ab:37:c3:
a4:3f:57:8e:d1:be:3d:09:cb:90:1a:77:c3:56:48:
64:5f:e7:ab:32:78:c7:a9:7b:e4:17:03:fb:70:e5:
4b:c8:57:d3:ee:59:9d:fa:30:ec:37:82:ce:51:f6:
6e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8C:31:D3:79:09:DE:63:EF:DE:A7:CE:05:65:E9:D8:4E:05:B5:9C
X509v3 Authority Key Identifier:
keyid:BB:1D:ED:54:4B:27:A1:37:19:B4:8F:B0:03:73:CD:49:E0:DE:85:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/ux3tVEsnoTcZtI-wA3PNSeDehRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux3tVEsnoTcZtI-wA3PNSeDehRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919123C/E5621A68B54811EAB1F54066C4F9AE02/2B7215E2B54B11EA85EE266DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.112.0/24
Signature Algorithm: sha256WithRSAEncryption
09:27:68:89:3a:81:8f:9b:e9:1e:b7:29:8b:10:2c:34:4d:d4:
65:7c:43:ef:bd:47:0d:18:36:6c:f5:14:38:0e:c2:9b:66:59:
c3:8d:e3:5e:ea:a8:25:87:c9:8b:0b:29:06:af:c8:ba:c9:d0:
a0:46:fa:6b:a2:8e:4a:fa:99:24:bd:5c:91:7d:a6:80:8f:15:
e1:e2:90:8c:90:e3:47:82:35:be:62:16:97:c9:ac:52:19:ee:
76:e9:92:9b:45:68:5a:2b:48:76:a2:cb:10:a9:11:22:57:bc:
11:92:a5:d8:ea:e0:bc:f5:eb:c0:58:11:58:3a:f5:97:47:97:
ee:b0:c5:37:7c:c7:8e:07:5b:98:ed:94:ca:ac:d0:6d:80:2a:
4e:e2:3c:c9:99:f6:15:3d:6b:99:be:69:42:ff:02:aa:ca:1f:
8c:13:55:fc:f5:94:1e:7a:9b:e3:b0:42:ca:a2:3b:72:1b:78:
e5:92:fe:65:d3:af:45:54:24:2d:cd:92:1b:ab:e4:db:be:3c:
79:93:94:32:e8:5f:62:d3:4e:34:d8:e2:26:c1:ef:c2:18:4e:
08:04:23:10:0d:34:29:6f:cb:9e:c5:41:94:59:0a:f7:e0:8d:
47:ae:f7:ea:77:53:0c:ba:71:c8:65:1f:37:71:f6:af:e4:d6:
61:96:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:51 2026 by rpki-client