
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/2DBBD9E2788D11EEA502B350C4F9AE02.roa
File: 2DBBD9E2788D11EEA502B350C4F9AE02.roa (raw, json)
Hash identifier: EEOuLVOFGIUAdOuI2tNMq9b7RGo51bkfuVm6Dgdj9UY=
Subject key identifier: DE:6E:29:4A:C1:39:AB:5E:CB:6A:62:4A:E8:CB:D3:57:D6:9D:94:1D
Certificate issuer: /CN=A919D08A/serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Certificate serial: 01B1
Authority key identifier: 81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/2DBBD9E2788D11EEA502B350C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:39:41 +0000
ROA not before: Wed 01 Nov 2023 08:03:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151818
IP address blocks: 103.204.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D08A, serialNumber=816A478D86E7E21BF3178510B8585325583430EE
Validity
Not Before: Nov 1 08:03:45 2023 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=69a3df2d-70f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fc:41:d5:27:7d:0a:3b:13:48:50:aa:85:14:
92:e9:7d:df:f3:57:87:f6:8b:89:c4:9e:87:80:c0:
5b:de:f4:1d:c9:4e:e0:45:33:e2:28:e1:63:b8:2a:
30:20:77:25:7c:5a:6f:52:34:10:c0:5c:1b:07:88:
e7:09:ad:2e:59:33:b6:a1:41:6f:2c:24:59:3f:b6:
f7:6a:b8:7a:a1:94:c5:75:5c:2f:58:af:9a:2d:89:
f0:2b:fa:c1:3c:eb:e2:ba:f9:ca:d9:2d:0e:51:ec:
cd:25:cf:00:13:c3:22:d2:11:ce:9b:39:83:57:c8:
41:75:fc:a6:7e:ed:88:43:e6:5a:44:9c:8d:1e:a3:
16:e6:fb:da:0f:d1:53:bd:85:cd:92:72:47:c8:1f:
78:28:0c:92:17:e6:90:65:a2:f4:6f:13:40:e0:d7:
3d:28:46:0c:48:7c:e0:da:91:62:3a:78:e4:2b:6d:
c3:79:3a:a9:30:30:e5:bf:b0:8a:72:c6:c2:40:b5:
f2:39:e3:05:86:92:ca:4b:19:30:a5:5c:e0:5a:f1:
c6:78:6b:46:8b:d3:e0:4c:dc:b1:f6:52:d3:bc:08:
1d:c4:d1:57:9b:97:8d:48:ac:51:a1:89:78:97:25:
b9:df:fb:4a:6a:b7:d5:72:4e:fd:d9:c1:7b:dc:9e:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6E:29:4A:C1:39:AB:5E:CB:6A:62:4A:E8:CB:D3:57:D6:9D:94:1D
X509v3 Authority Key Identifier:
keyid:81:6A:47:8D:86:E7:E2:1B:F3:17:85:10:B8:58:53:25:58:34:30:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/gWpHjYbn4hvzF4UQuFhTJVg0MO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gWpHjYbn4hvzF4UQuFhTJVg0MO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D08A/C0F4E864788A11EEB0692461C4F9AE02/2DBBD9E2788D11EEA502B350C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.204.40.0/23
Signature Algorithm: sha256WithRSAEncryption
89:40:e3:63:6e:29:a2:56:0d:42:bd:8d:32:b5:e4:f9:ed:17:
e8:8f:53:c8:a4:2d:3f:df:93:82:28:f6:0e:54:4b:af:1e:d9:
df:7c:52:fc:81:74:6b:68:a5:81:35:e3:a8:97:e8:9e:f6:56:
16:c1:17:26:dc:be:01:42:79:be:ee:c4:74:69:bd:4c:91:70:
28:88:60:48:90:8c:89:de:91:8a:ac:39:75:96:83:ab:5c:ef:
c0:eb:b0:0c:a5:48:6f:77:d4:4b:97:15:71:60:d9:81:3a:3f:
68:83:1f:00:ed:b4:ff:63:2f:1d:cc:96:e0:ee:9c:da:0c:63:
18:91:75:91:76:fc:96:92:11:ef:83:a0:59:a7:f6:01:d8:38:
b3:42:12:2f:28:58:d0:81:94:41:0b:cd:ad:89:4b:c3:55:04:
c1:52:4b:0a:91:82:4f:61:b6:28:0c:bf:bf:52:09:72:eb:51:
e4:4f:35:a0:d2:ef:82:8c:00:78:3b:1c:12:28:f7:08:e2:d5:
c2:7c:cb:6b:f0:5b:82:5a:79:03:94:34:83:ad:99:89:15:3e:
bf:47:f6:c6:7d:2e:ee:ba:09:0c:38:8f:df:7a:5a:df:db:e4:
8a:4d:5c:c9:15:00:8e:57:2b:91:39:f3:5a:75:01:12:88:fc:
2c:e3:62:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:51 2026 by rpki-client