
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
File: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (raw, json)
Hash identifier: T3ZNiVnesGJpryRivylJyU8MVl8VVN9RqH654rVhbKQ=
Subject key identifier: 29:CF:0E:76:96:DB:DE:51:D0:5B:F6:73:73:5D:D3:05:FF:16:93:4E
Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Certificate serial: 0464
Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
Signing time: Tue 31 Mar 2026 06:34:24 +0000
ROA not before: Tue 31 Mar 2026 06:34:24 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 396982
IP address blocks: 103.63.102.0/24 maxlen: 24
103.207.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:57:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993
Validity
Not Before: Mar 31 06:34:24 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69cb6af0-1c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:07:b9:67:bc:55:d8:04:b5:7a:82:a0:2a:43:
65:fe:92:4c:48:df:a7:f6:45:9f:9e:07:fa:70:0f:
89:10:1c:e3:af:0c:6d:63:20:b1:f8:9c:d6:c6:50:
3f:db:4b:1c:cd:cb:f3:2f:0f:d2:05:5d:1e:88:75:
a6:1e:16:06:39:43:b7:2d:da:9e:7f:fe:82:c8:d9:
ab:5f:10:73:83:8a:3d:a4:5b:f5:5a:55:d2:ab:58:
1d:64:a4:ac:1e:20:5e:7e:a1:78:f0:d3:30:c2:8b:
e0:db:b6:37:c0:3f:47:bb:94:1e:c4:32:17:39:a1:
6b:b3:5c:24:ed:63:98:5b:1f:df:f2:9a:5d:ed:09:
ad:6a:5f:f9:c4:bb:a1:37:d9:3d:e5:23:fc:e8:72:
b0:79:f5:eb:1f:cd:9f:87:c7:a9:4c:4a:3e:46:4a:
6c:30:87:2f:48:4b:6e:74:79:e8:d8:d3:78:f2:da:
10:dc:b8:11:b5:67:7c:59:4b:71:6c:28:98:6b:f7:
e5:b7:55:2e:8c:db:98:f4:c1:21:c3:da:d8:a9:3c:
8c:2e:3d:73:88:27:85:71:5f:f6:ca:e3:29:52:85:
cf:2c:6c:89:65:4d:a7:35:0d:48:6c:af:6d:11:d7:
01:28:1f:0b:7d:aa:6f:b5:bc:f7:59:ac:0f:d2:8b:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CF:0E:76:96:DB:DE:51:D0:5B:F6:73:73:5D:D3:05:FF:16:93:4E
X509v3 Authority Key Identifier:
keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/985276043B6D11F0AFFFDD4DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.63.102.0/24
103.207.158.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:11:12:9a:4f:0b:c4:1b:10:a2:fd:53:da:86:64:b2:0d:3b:
ce:2d:66:5d:0f:67:9a:27:0b:66:28:df:3a:dc:3d:7b:4a:90:
ed:5a:39:e2:56:8d:ad:4e:95:41:a8:d6:48:be:8b:92:17:b0:
97:5e:86:9c:0d:0a:0b:7d:ee:12:d4:42:da:b6:75:f1:c0:89:
51:79:f5:6f:db:86:19:fb:c4:3b:b1:bd:a6:29:dd:62:e6:09:
86:0e:cc:76:64:fa:f5:4a:3b:d3:c8:42:25:22:66:c1:8b:54:
c3:ff:f9:78:16:c9:5b:f9:be:4a:3a:a8:86:34:e0:79:35:6e:
dd:34:6d:9c:24:4d:87:75:23:e3:ce:db:4c:93:50:5e:e1:a4:
c9:5a:a5:ce:80:f4:7b:c1:16:0f:4f:37:5a:34:f0:44:79:84:
6c:bf:10:71:23:e4:de:54:16:6b:c5:a5:51:97:42:d2:d6:58:
6e:ad:c3:ff:2b:c4:fb:82:23:1c:44:91:46:f2:fd:2f:3f:f2:
a4:fb:33:2b:77:84:53:fd:ee:43:64:83:72:6a:67:8e:51:71:
68:cc:7d:7c:e1:ae:e1:68:13:3d:38:26:1e:75:6e:19:dc:74:
d8:35:3f:b5:e5:b3:89:04:66:a2:28:d5:7c:21:10:e4:54:64:
46:9e:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:58:58 2026 by rpki-client