
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/DCEA0362C17C11ED92AD7D85C4F9AE02.roa
File: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (raw, json)
Hash identifier: HR/YddgFvJk+kLQYzt7LQ0V5NEPNgk2haN6DNZL8fWw=
Subject key identifier: 3E:80:7B:5C:FB:74:94:74:73:43:26:A1:A6:4E:AC:4E:AE:A3:2D:8F
Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Certificate serial: 021C
Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/DCEA0362C17C11ED92AD7D85C4F9AE02.roa
Signing time: Fri 23 Jan 2026 02:22:22 +0000
ROA not before: Fri 23 Jan 2026 02:22:22 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 140210
IP address blocks: 103.148.154.0/23 maxlen: 23
103.148.154.0/24 maxlen: 24
103.148.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540 (0x21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834
Validity
Not Before: Jan 23 02:22:22 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6972db5e-0f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:73:62:b6:7d:0d:d9:e5:75:9c:29:c1:4f:
60:67:42:33:b0:41:a3:b2:6d:26:d7:7d:00:b1:68:
87:f2:ef:45:fa:dc:49:26:98:0c:41:b9:57:f7:20:
59:17:79:f0:a6:c7:67:9a:32:f8:bb:78:75:f0:a2:
e4:50:3a:e7:59:bb:0c:de:ab:a2:fd:e9:c4:69:a8:
20:98:2c:6d:aa:6c:14:c4:01:48:dc:42:7f:eb:47:
fe:af:9d:90:9e:21:75:a0:d2:78:ab:9b:de:2c:e3:
8c:6e:ab:53:00:ad:7e:8b:9d:fc:11:a7:e0:12:51:
29:1a:d0:61:55:48:06:7e:a0:34:40:ee:59:f6:46:
e6:5f:f7:52:4b:f6:20:26:de:ea:ff:f4:4b:c9:16:
84:78:f9:0e:5f:c8:18:86:cc:d0:af:5b:19:22:63:
c5:da:e8:7b:44:2a:93:bf:bf:f5:81:15:44:d5:45:
cd:00:99:8b:c0:aa:c7:1f:f2:1f:5b:b5:d7:a7:d3:
8f:f9:7c:ec:97:c0:84:f6:a6:3c:dd:91:77:dd:95:
c3:63:56:d8:56:6f:01:22:a0:e6:7e:9c:5b:35:55:
76:b6:37:ae:b6:45:7d:67:ac:7a:10:e6:49:7f:fd:
aa:62:ea:ba:66:03:13:6e:36:7a:bc:92:15:7d:f6:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:80:7B:5C:FB:74:94:74:73:43:26:A1:A6:4E:AC:4E:AE:A3:2D:8F
X509v3 Authority Key Identifier:
keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/DCEA0362C17C11ED92AD7D85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.154.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:48:2c:14:6b:84:c3:ed:54:4a:c3:8a:85:8b:7a:24:9a:a4:
18:7f:5d:25:d8:d3:ce:7b:25:b7:d2:54:40:71:a6:fc:22:6a:
98:14:55:f1:72:dd:4d:ba:52:4a:db:d8:be:71:22:22:d0:5d:
e1:cc:94:c5:1a:cc:1c:90:bf:8d:42:b0:aa:28:15:c0:ac:2d:
59:fa:e9:65:06:b8:05:9d:f7:6a:2a:0c:67:80:b0:fc:c2:1d:
d7:9d:8f:07:2a:12:04:60:c7:b3:84:fd:de:31:d2:53:a7:63:
c6:e1:ac:5a:c7:c8:d8:7f:82:ac:a9:f8:e7:93:19:f8:38:25:
cc:6e:05:fb:d1:85:3e:d4:c4:62:91:ab:55:6e:99:ca:4b:71:
8d:45:6b:dd:b9:29:5d:e1:a1:ea:ba:e0:07:76:f0:6b:21:53:
d8:95:69:49:cf:5b:3d:c3:52:23:03:e0:d8:71:28:0a:f2:52:
4c:87:2b:7e:3a:50:2a:ec:c7:e5:c8:f9:26:ee:37:25:19:aa:
cf:77:68:f4:18:6b:85:73:05:f8:fc:5b:cc:42:8a:d6:69:c7:
3c:c2:76:95:3e:c6:70:37:87:10:28:f8:1d:19:c9:93:6d:d2:
b8:69:46:1b:0d:15:12:91:a0:d4:d2:c4:90:6d:10:d9:ac:e3:
7c:68:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:28:01 2026 by rpki-client