
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
File: DCD75050315011F0BC916269C4F9AE02.roa (raw, json)
Hash identifier: noPbCtMqAat51qDXsfXwESX0FilH6PPV7bIjyoxZhqs=
Subject key identifier: A3:BE:EF:7A:3E:7D:94:23:E5:33:DD:43:FD:4C:24:D9:7F:FF:B7:96
Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial: 1A44
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:55:28 +0000
ROA not before: Fri 08 Aug 2025 10:45:32 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 9422
IP address blocks: 103.70.132.0/24 maxlen: 24
103.70.133.0/24 maxlen: 24
103.70.134.0/24 maxlen: 24
103.70.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:20:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6724 (0x1a44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Validity
Not Before: Aug 8 10:45:32 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46170-b364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:a5:57:ba:1a:11:0d:68:1a:5a:4c:dc:78:
1e:79:6c:4f:50:5d:71:ee:3b:12:54:ce:e4:15:98:
ad:3c:e5:40:56:30:1f:fa:cc:0e:bb:6d:c1:c6:ab:
a1:63:5d:55:54:22:48:81:4e:7c:69:06:9c:ad:4d:
9d:9c:50:6d:c9:68:85:bd:ee:cc:15:ae:df:bb:fb:
54:74:0f:f9:e2:33:2d:6b:63:72:24:9a:35:9f:96:
7f:17:24:30:eb:17:55:8d:42:89:bd:79:36:45:ff:
62:8f:dc:93:21:9e:d5:1f:6a:a4:c6:82:89:68:5d:
ad:70:04:40:c6:59:e2:a2:d8:13:0a:8d:e2:79:f9:
a0:ab:06:1d:31:8d:83:53:bd:a8:af:1a:e0:16:3f:
6e:93:89:58:a9:2a:7c:e5:9a:09:a6:91:fb:60:4b:
7b:19:d3:75:0d:9b:82:c1:2e:ed:7c:e7:5a:84:34:
b6:19:8b:89:37:2e:df:fe:43:aa:74:38:b1:65:00:
c1:ff:5e:01:13:c1:3b:17:69:2a:a0:25:ee:46:0a:
80:63:3b:47:74:a5:73:23:84:b1:3c:9a:f9:98:28:
ef:39:88:a0:aa:69:71:36:9e:11:5f:a5:c6:05:82:
73:b7:d3:2e:5e:3e:00:27:1f:96:2e:9a:bc:68:52:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BE:EF:7A:3E:7D:94:23:E5:33:DD:43:FD:4C:24:D9:7F:FF:B7:96
X509v3 Authority Key Identifier:
keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:70:9e:92:c8:44:9e:ae:3c:8d:f5:c8:df:32:cb:2d:d8:b2:
11:fc:cc:26:ac:93:b4:d1:f6:2f:84:9b:2f:6f:f0:3b:23:18:
d9:e2:c4:03:c0:84:fd:e7:e8:4f:01:b0:86:5e:12:f2:27:65:
85:d4:61:ee:3a:1b:39:88:95:c8:7e:e6:94:11:2f:08:0d:5a:
c2:b6:d7:68:7b:2c:2e:ed:0c:b5:59:5d:46:cd:ee:a0:3e:23:
f9:39:c6:49:6b:ec:53:05:55:a4:45:be:7b:72:24:9d:14:41:
f5:84:90:c5:19:79:da:6e:38:4e:6d:b6:88:68:52:a6:e6:2a:
5b:fe:7f:91:a1:ff:ca:83:ad:50:55:a8:d3:f8:18:85:60:17:
89:81:13:0d:7a:57:a3:fe:a6:24:c2:d4:3a:9a:fa:ad:9a:ef:
ab:cf:cf:d3:a3:7b:13:fb:49:ce:8a:96:77:00:c3:1b:59:ff:
2c:34:7e:61:bf:90:14:a0:82:c6:21:08:e0:2a:36:40:7b:18:
ec:76:7f:1a:12:14:ee:3a:30:4a:14:0d:74:48:3e:70:54:dc:
80:d9:73:bf:86:54:ca:f5:d7:cd:4b:f9:1d:4b:d2:ba:97:2c:
f0:2a:c5:3c:34:e4:99:24:e1:17:76:3d:ba:2c:40:5e:d7:92:
19:9b:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:48 2026 by rpki-client