
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/00C79724968F11EB9A79630BC4F9AE02.roa
File: 00C79724968F11EB9A79630BC4F9AE02.roa (raw, json)
Hash identifier: evzBYalt3P7Z1C145/+ZPloNbKFxFQ0L1echtcdQBnM=
Subject key identifier: 2C:3C:AA:4C:56:4C:BE:23:87:F9:26:DA:C6:57:9D:E3:61:A5:0B:03
Certificate issuer: /CN=A919D72D/serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
Certificate serial: 06BC
Authority key identifier: B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/00C79724968F11EB9A79630BC4F9AE02.roa
Signing time: Sat 14 Feb 2026 22:19:47 +0000
ROA not before: Sat 14 Feb 2026 22:19:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136933
IP address blocks: 103.148.124.0/23 maxlen: 23
103.148.124.0/24 maxlen: 24
103.148.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl
rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1724 (0x6bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D72D, serialNumber=B8F61CABB9119D6C37685F0ABE34AEE26A0217E6
Validity
Not Before: Feb 14 22:19:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6990f503-e2da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:10:43:ef:cc:36:38:e1:19:a4:71:23:18:07:
6c:b4:90:e6:12:2c:87:9b:6d:97:13:54:ec:98:c4:
7d:e0:17:4d:53:e2:08:a9:62:68:fd:ff:a1:a4:27:
e2:89:d9:09:5c:24:e7:1f:1c:1c:a6:65:87:1f:7a:
bf:27:3f:56:0c:db:ca:d8:d6:62:c9:49:a7:61:8b:
ad:9c:d2:fb:02:91:b7:e7:b6:d8:e5:ec:67:d9:e4:
c6:c5:5b:6b:58:4c:ed:dc:20:43:3a:05:b8:c7:f8:
38:5d:ad:8e:b8:24:6a:c9:72:ef:06:31:30:c1:62:
48:a3:9e:98:f9:8b:05:5d:12:87:38:e0:a0:33:20:
93:91:07:d3:56:0c:4e:d7:36:5e:61:ce:2c:63:43:
da:a9:34:ab:8d:61:55:62:4b:53:9d:09:6f:ee:35:
79:bc:41:31:d9:ad:9c:40:8d:3f:2b:b1:8e:79:fe:
dc:41:46:bf:06:55:61:68:1f:35:df:4a:a9:16:ff:
1d:26:83:a3:07:c2:bf:56:32:f0:ca:0d:0c:63:12:
ca:fc:a1:d8:74:36:13:26:28:c4:74:db:07:7f:80:
e2:77:c8:69:f8:3b:44:85:9e:a6:f4:21:1f:8f:f3:
9b:5d:70:d6:18:90:05:60:08:c2:18:f7:c8:ec:08:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:AA:4C:56:4C:BE:23:87:F9:26:DA:C6:57:9D:E3:61:A5:0B:03
X509v3 Authority Key Identifier:
keyid:B8:F6:1C:AB:B9:11:9D:6C:37:68:5F:0A:BE:34:AE:E2:6A:02:17:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/uPYcq7kRnWw3aF8KvjSu4moCF-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPYcq7kRnWw3aF8KvjSu4moCF-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D72D/98BA46B4968D11EB93FA350AC4F9AE02/00C79724968F11EB9A79630BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.124.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:8e:2f:4c:d8:89:be:01:6d:57:6d:f3:bc:96:f4:cb:7b:b8:
ff:14:31:5d:de:d4:33:1b:42:a0:d0:4e:e0:0b:25:92:4d:8d:
f7:0b:14:75:e4:94:69:b3:e8:fd:24:74:ac:dc:cb:c4:ce:90:
5a:61:b3:87:49:88:5b:79:58:96:c5:30:72:68:5c:c7:bc:93:
da:ac:4d:50:46:a2:0a:56:c8:c1:ca:62:57:91:aa:a2:22:95:
12:e1:5d:e7:46:47:53:54:b4:d7:26:96:68:be:fb:9d:17:13:
15:46:25:0c:46:06:4b:92:de:54:6f:3e:e0:d0:27:dd:04:8c:
30:19:4f:2f:96:e8:c2:97:59:36:dd:06:15:07:6e:96:ff:76:
b4:75:7f:87:2f:12:21:cb:0a:7e:fe:80:45:08:32:84:0d:64:
30:94:af:ca:d1:80:2a:e8:6a:11:ea:82:6d:e5:73:89:96:c5:
b6:ef:b5:0e:01:72:5c:83:1a:ac:6a:3f:ff:7e:54:f3:d1:67:
7e:aa:26:98:fe:5b:41:66:4f:4d:e4:41:9f:98:b9:06:2e:4f:
e0:74:e6:85:32:eb:c3:e2:8f:8b:78:52:f4:cf:16:b5:92:4d:
16:10:63:b5:f1:2f:e8:52:62:97:de:9a:20:41:b6:de:eb:17:
07:11:19:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:00 2026 by rpki-client