
$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
File: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (raw, json)
Hash identifier: DLzpWEcNmQ3lrkTMIfDWdISHEaJklyBDn769urmD8Y4=
Subject key identifier: B3:05:2D:9A:37:62:B5:CE:E8:F1:C1:21:56:F2:32:D2:66:49:29:71
Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial: 01C0
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
Signing time: Tue 13 Jan 2026 02:22:05 +0000
ROA not before: Tue 13 Jan 2026 02:22:05 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 150729
IP address blocks: 103.73.184.0/23 maxlen: 23
103.73.184.0/24 maxlen: 24
103.73.185.0/24 maxlen: 24
2001:df1:dac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448 (0x1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Validity
Not Before: Jan 13 02:22:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6965ac4d-22e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:d4:4a:d3:bc:5b:e3:b1:53:3d:04:5a:4a:
01:dd:bf:04:a8:1f:fc:2e:6a:d8:06:78:66:c1:b3:
e3:eb:01:57:cf:9e:51:f9:5d:64:7a:c7:b4:37:25:
b4:8c:e6:46:73:93:2e:08:88:bd:ac:90:b6:1e:31:
d4:58:18:20:b8:bd:34:02:4d:4f:62:35:91:85:43:
88:94:0a:4f:f0:84:a9:a6:84:3e:13:a7:51:e7:c6:
c3:88:e2:d6:96:6a:ba:ba:99:ff:7e:37:92:e9:88:
85:e6:69:05:f5:f0:82:48:a7:22:b8:bc:54:91:28:
60:93:f2:58:03:62:6f:fd:6c:38:a1:68:87:27:08:
85:c9:89:59:18:cd:30:d5:1e:ad:31:61:9f:20:dc:
5b:e4:33:ca:b8:8a:dc:9c:42:a9:a2:d2:53:65:19:
ea:54:fc:1f:74:0f:f1:54:cf:8c:4f:bd:c5:db:de:
73:15:b0:0d:4f:da:cb:f7:44:e6:cb:6b:75:99:84:
5e:8b:59:f4:ae:19:7d:57:29:02:83:57:8a:40:e9:
34:88:9c:35:6d:e1:74:9a:23:d7:33:8b:30:cf:11:
2a:ad:bd:10:b6:a8:8a:2f:54:51:43:c0:2a:dd:b3:
a7:cd:c9:bf:ab:2a:33:87:46:21:a2:5b:fb:78:49:
a2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:2D:9A:37:62:B5:CE:E8:F1:C1:21:56:F2:32:D2:66:49:29:71
X509v3 Authority Key Identifier:
keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.73.184.0/23
IPv6:
2001:df1:dac0::/48
Signature Algorithm: sha256WithRSAEncryption
56:23:a7:5a:1c:be:7a:2d:83:ae:7e:68:2d:56:01:cc:90:db:
26:f4:f7:ef:9a:09:1c:20:b3:7c:96:d8:9c:9c:18:49:04:34:
3d:b1:ad:f6:5a:8b:e3:2f:42:aa:c6:07:ce:87:95:24:23:d0:
2f:82:70:6f:9b:3d:74:0d:4b:a1:7c:09:ca:ca:b0:1d:0c:5a:
e8:99:35:ca:7d:45:41:aa:b2:64:3b:75:8d:38:b9:47:9c:97:
37:15:0d:a4:dc:80:cb:7c:16:cc:28:6f:6f:50:12:a6:55:cb:
60:de:07:d6:55:99:ea:02:0a:b2:aa:37:76:a7:57:b7:83:cd:
e7:93:e8:10:10:58:47:a4:0c:ef:41:5b:f3:03:02:56:be:b8:
5f:e8:a4:a1:ee:b1:59:d5:23:95:0c:72:d6:05:2e:1d:eb:b3:
b6:1d:d6:4b:16:6b:d8:76:b1:fd:88:ad:53:1f:20:32:f2:21:
f2:5c:d0:96:60:f6:11:eb:6e:2b:22:43:87:9f:36:38:2a:77:
80:42:ce:1d:07:a2:1b:69:9a:39:34:c5:70:cd:30:67:90:fd:
36:cf:f6:10:eb:d1:ca:22:19:9e:69:e0:1c:49:b2:93:5b:ec:
fa:09:4b:bb:71:8d:f8:e0:91:4b:5b:63:52:60:bd:b2:30:c0:
4d:de:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:12:10 2026 by rpki-client