
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/1DCABC72C57811EA950A8643C4F9AE02.roa
File: 1DCABC72C57811EA950A8643C4F9AE02.roa (raw, json)
Hash identifier: XhJImk0f3rdjl6tuslw+Eu9p0gwLpm2LdQJmPczKSfg=
Subject key identifier: 63:8C:10:B9:22:22:FE:CD:55:A4:24:19:6C:86:C5:36:59:3D:D2:CE
Certificate issuer: /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
Certificate serial: 08FF
Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/1DCABC72C57811EA950A8643C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:04:41 +0000
ROA not before: Thu 04 Dec 2025 20:02:49 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 139730
IP address blocks: 103.144.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl
rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303 (0x8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
Validity
Not Before: Dec 4 20:02:49 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a44779-7880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:94:22:3c:c9:40:41:3d:c2:9e:ac:3e:2e:
6a:c2:57:7b:fe:cd:47:21:b9:02:ad:da:a1:32:b4:
a0:90:40:c7:d0:74:f6:d8:3e:74:21:3d:d0:28:5e:
c3:ed:7a:f3:06:bb:e2:e0:67:12:81:cb:69:f5:15:
40:9d:e1:e0:c2:c6:26:1b:26:9a:84:22:4e:5a:fa:
25:07:db:81:98:a3:9e:8f:31:e8:32:8f:b1:cb:a6:
7a:14:6d:f1:26:6f:7d:3f:7d:12:7d:5a:96:d8:66:
d4:d1:bc:82:51:dd:e6:16:fe:60:42:03:89:02:d7:
27:5e:e6:79:3a:4c:d9:f6:6a:f4:81:be:2e:85:6e:
48:68:4a:a3:81:16:a3:31:a0:93:e0:47:86:06:b0:
49:82:69:c8:d3:7b:8a:2f:92:9e:46:56:4a:9f:de:
62:b9:c0:f7:87:d2:a6:35:56:0e:66:1a:c3:57:63:
c3:c6:a1:f6:ba:c6:4b:20:9f:ca:04:7b:28:ef:19:
87:a8:19:b5:3b:88:6f:ad:d6:9d:b0:1f:3f:d6:d5:
cd:b7:56:74:1e:28:72:88:ea:64:1a:4b:69:95:ab:
27:6c:f5:73:6c:1e:9d:c8:51:04:da:92:d5:bb:2b:
4a:74:04:27:dc:23:ac:56:0f:9c:a0:43:99:e2:d8:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:10:B9:22:22:FE:CD:55:A4:24:19:6C:86:C5:36:59:3D:D2:CE
X509v3 Authority Key Identifier:
keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/1DCABC72C57811EA950A8643C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.144.68.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:7d:a3:92:58:30:8a:7f:f4:79:62:26:60:f4:f6:b4:eb:8b:
aa:6f:27:19:c7:3f:70:ac:6b:99:a2:d2:ca:97:f2:77:af:a8:
81:80:bc:a9:8b:92:08:6e:1e:f5:90:1a:7f:85:b1:0b:5a:ef:
96:37:18:7c:76:78:99:eb:a9:3d:21:2b:6d:d3:ef:9d:af:d7:
65:e7:9c:74:d5:60:9c:c2:18:da:86:05:1b:56:bd:01:68:50:
3c:e2:5b:24:f9:22:ff:dd:94:8d:72:0a:c0:2e:f2:78:c0:77:
82:e4:e6:30:29:eb:5e:63:ce:f9:1f:de:1b:6d:d8:35:4b:b6:
4e:5b:2c:91:7a:f5:68:d6:c8:50:f9:46:49:d5:4a:4c:9c:1e:
72:7f:1f:1e:3d:64:d2:46:86:0d:9a:e6:8a:09:c3:95:f6:e3:
c0:87:a6:a6:a6:81:35:a1:75:5a:47:8a:70:f2:f4:34:a1:70:
ac:8a:36:e1:0a:cf:ae:8d:e8:46:93:a3:d3:f0:22:60:9a:3e:
f4:82:7a:49:18:6a:39:6e:29:c7:17:99:1d:ba:e3:f1:f7:84:
20:34:d6:b9:e8:51:a0:c8:d9:53:d6:18:11:23:92:2d:a0:93:
88:f0:b4:3b:b3:4f:3f:63:78:84:8b:27:21:b7:f5:85:85:4b:
85:dd:80:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:42 2026 by rpki-client