
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/2C257150DBCA11EF920CC12BC4F9AE02.roa
File: 2C257150DBCA11EF920CC12BC4F9AE02.roa (raw, json)
Hash identifier: zXtmaqUd/SHW6AH9S9kiJ2Fq9D/OPbiNASvEOOP5bVI=
Subject key identifier: BA:67:E6:D7:BC:50:B3:EB:6E:40:02:BE:A1:47:21:10:12:3F:5D:AF
Certificate issuer: /CN=A912527F/serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Certificate serial: 0381
Authority key identifier: 37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/2C257150DBCA11EF920CC12BC4F9AE02.roa
Signing time: Tue 13 Oct 2026 01:49:40 +0000
ROA not before: Tue 13 Oct 2026 01:49:40 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 150315
IP address blocks: 103.153.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 00:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897 (0x381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912527F, serialNumber=379BD4E7732F1A8D1C3B222DB7773C1C15419F42
Validity
Not Before: Oct 13 01:49:40 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6acd8e34-6f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:bc:e7:85:11:f7:1d:3a:0f:2e:35:d0:27:
6a:1b:6c:84:8c:03:66:d5:c7:6d:01:e1:a0:1c:1d:
38:d7:99:74:8a:8a:96:6d:69:2a:f5:5b:08:34:3e:
31:cf:d4:84:1a:e1:7a:1e:52:df:f2:10:f4:51:72:
6c:4f:d9:96:65:0f:6f:cb:f3:23:40:54:a0:27:fb:
3b:1d:8b:4b:32:87:b3:73:54:aa:95:42:a5:b8:b8:
bf:d9:9d:aa:30:06:55:53:eb:ca:a4:3a:de:8b:d6:
9c:67:6c:1e:6e:58:44:69:76:46:61:a0:c4:fe:2e:
58:ba:5d:5b:2a:5a:69:ad:96:3e:08:f5:eb:d5:24:
d2:a9:dd:f2:3c:28:90:52:de:ea:69:99:a9:02:b3:
6e:c6:fc:a2:7e:00:9a:cb:3e:c0:80:f1:58:37:0b:
1d:c1:6c:14:a3:72:4a:8c:d4:c6:0b:ad:2d:47:83:
50:ad:1e:ba:d6:7e:9b:e9:8c:0b:b3:56:55:e1:fc:
cb:f6:29:ac:de:7a:ff:63:c1:55:01:65:ff:1b:12:
b8:fb:86:5e:ee:d9:08:29:43:26:da:9a:d9:54:2c:
5b:12:de:fb:aa:f7:5f:c8:7a:b3:52:7f:71:24:68:
2b:1b:22:2f:07:e0:8c:47:13:f2:80:31:0c:be:9d:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:67:E6:D7:BC:50:B3:EB:6E:40:02:BE:A1:47:21:10:12:3F:5D:AF
X509v3 Authority Key Identifier:
keyid:37:9B:D4:E7:73:2F:1A:8D:1C:3B:22:2D:B7:77:3C:1C:15:41:9F:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/N5vU53MvGo0cOyItt3c8HBVBn0I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5vU53MvGo0cOyItt3c8HBVBn0I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912527F/BCFDAFCC10DD11ED80AA2485C4F9AE02/2C257150DBCA11EF920CC12BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b0:e2:0c:0e:84:a1:d1:ce:4a:ff:72:76:40:49:d4:d5:8e:
86:5e:cf:87:f8:bf:64:88:2b:3c:8a:2d:f4:93:03:03:f7:a5:
e3:1e:71:51:a2:bb:3f:cf:e9:8f:3f:50:d9:b2:8a:04:5f:33:
c4:9d:24:e1:b2:5b:cd:bc:cc:cb:17:17:5f:f2:b2:68:98:5a:
54:a8:63:01:59:7b:ef:8a:fc:b3:39:f4:d2:f3:6f:3b:a5:cc:
27:e2:3d:00:7a:07:8c:7f:1a:6c:ae:b1:ae:5a:b1:c7:1d:06:
68:42:52:b4:83:0d:9c:d6:57:f9:7f:dc:52:8c:f4:8c:00:b2:
8e:96:a5:e5:7b:3d:3d:9c:31:1f:b6:ea:d9:f1:66:c4:1d:be:
09:df:b0:b8:13:c2:41:e0:89:fd:ca:06:b2:4b:e3:26:77:d5:
39:0e:9f:31:53:9a:30:20:2f:db:68:cd:fc:ba:14:76:85:2b:
54:77:0d:bd:b7:27:93:d6:27:79:bb:63:47:54:09:26:ca:56:
4d:38:7f:88:76:79:05:71:97:11:7a:31:f1:ba:81:2e:40:53:
13:dd:32:f6:cc:1d:6e:02:a3:f4:e3:68:0b:73:6c:b0:7d:7b:
b4:9f:c2:5c:c3:9e:93:50:2d:51:ee:88:2c:92:c8:2a:02:a1:
04:21:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:15:00 2026 by rpki-client