
$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa
File: 730B201A81E911EEAEFE7735C4F9AE02.roa (raw, json)
Hash identifier: hGkqzz2eI5dLw6JFvYyWs5D2WcjZP64M8Kf1cT/imEo=
Subject key identifier: 40:CA:72:25:D7:70:F5:C9:55:B9:BF:B4:01:26:CF:F5:3D:17:DB:49
Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0
Certificate serial: 01BE
Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:19:06 +0000
ROA not before: Tue 03 Jun 2025 04:42:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 15353
IP address blocks: 103.186.159.0/24 maxlen: 24
2400:72e0:9f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl
rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446 (0x1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0
Validity
Not Before: Jun 3 04:42:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3f67a-1016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:b8:b9:6d:dc:b4:49:b5:de:19:db:6f:5e:
4a:8e:fb:41:97:58:8a:cc:c0:60:4d:30:de:c4:3e:
01:92:2d:a9:4e:70:ae:33:3d:7d:c5:57:99:80:68:
97:6e:4a:fc:82:a4:06:4d:00:1e:39:10:01:db:2a:
c5:95:03:7c:a0:fe:8a:b8:a4:ae:94:1f:92:78:f0:
b7:5d:90:5a:54:c1:53:70:20:e4:db:45:f1:58:2e:
6b:00:08:3d:68:4f:0c:25:0c:07:a7:d5:b5:da:b2:
c0:82:0e:5f:28:5d:db:4a:36:9f:d1:ee:83:03:d0:
4f:a8:7a:53:0e:96:bf:44:69:29:a3:d0:eb:14:15:
a4:67:e1:7a:cc:12:3b:9a:bc:e6:b9:1c:56:df:27:
e9:3d:61:1b:61:97:f6:09:a8:6e:5a:d6:8b:2c:d1:
3c:fb:0f:55:cf:90:f0:c7:d5:db:a2:16:81:33:6a:
1a:19:75:7c:9e:56:79:00:df:6e:14:34:d4:43:37:
cf:19:9e:69:a1:0a:85:e3:3a:8a:22:27:de:9a:a1:
d5:01:59:eb:af:65:15:02:5d:9e:1e:94:3f:31:c6:
56:d6:91:5f:d1:fc:2f:51:c2:7b:1f:8d:86:97:91:
a4:06:fa:80:5d:6d:4f:22:99:c6:e3:a5:d9:a0:96:
a3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CA:72:25:D7:70:F5:C9:55:B9:BF:B4:01:26:CF:F5:3D:17:DB:49
X509v3 Authority Key Identifier:
keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/730B201A81E911EEAEFE7735C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.186.159.0/24
IPv6:
2400:72e0:9f00::/40
Signature Algorithm: sha256WithRSAEncryption
95:1c:da:04:de:54:d2:c5:da:06:4d:aa:2e:9b:ce:1a:30:9a:
06:a1:7f:b9:ca:35:be:c0:12:92:25:05:14:c2:78:71:4b:92:
76:a0:66:2d:ac:78:2e:2a:80:cf:61:9b:c0:28:87:83:dc:e0:
fd:21:2b:e0:3f:d3:2d:ed:0a:20:b8:67:cd:e4:30:c7:04:e2:
b8:d5:f9:f2:c5:ff:ff:6f:a5:59:a7:92:d7:ce:1b:ca:eb:88:
0f:1c:6f:8d:39:4d:3b:5a:11:5c:d7:84:cd:32:09:6f:58:03:
10:eb:6c:4e:a1:a6:91:88:b3:84:66:47:dd:fb:66:10:61:68:
e6:3f:94:b6:de:09:ea:fe:c4:63:09:07:9d:7f:96:37:e2:6c:
de:e9:02:fc:e0:1f:c2:e2:4f:4c:58:e0:3f:2e:06:08:56:c8:
77:c9:32:5b:78:dc:86:5a:3b:3e:a9:67:c4:39:82:32:4f:87:
61:42:b7:fe:be:61:8a:31:c9:d9:42:45:d2:69:5a:1a:c8:b8:
2f:fd:65:e5:7c:1b:ac:90:a1:50:e0:41:d5:4d:c0:5d:02:98:
ed:9e:97:6c:4b:94:1b:39:b4:20:e1:ab:0a:6f:50:1e:f0:e9:
77:09:ad:e9:85:a6:92:8e:78:56:ca:21:38:8a:4a:db:9b:2c:
be:3e:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:18 2026 by rpki-client