
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa
File: E7EBC9003EE411ED905A3415C4F9AE02.roa (raw, json)
Hash identifier: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=
Subject key identifier: 3C:AC:57:B6:2A:41:45:1D:53:EB:D8:EE:3E:A2:D6:40:B7:5B:CE:5B
Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Certificate serial: 08A3
Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa
Signing time: Mon 02 Mar 2026 04:53:24 +0000
ROA not before: Wed 10 Sep 2025 21:33:02 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 3491
IP address blocks: 103.155.8.0/23 maxlen: 24
2406:60c0::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 20:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750
Validity
Not Before: Sep 10 21:33:02 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a517c4-0f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:fd:aa:b8:77:36:4a:bd:93:17:41:69:b5:
cb:9e:82:3a:e5:c9:f0:e1:96:a0:f5:48:f8:37:51:
23:87:1a:46:5a:5a:7e:e7:10:b2:fd:b5:b8:70:a6:
35:18:da:0d:ec:3c:db:e4:d2:15:4e:8c:ca:ed:a9:
3c:5f:94:62:16:d6:48:8b:3b:6b:d7:2f:7d:b6:0c:
3d:cb:44:5d:43:73:9e:c8:ab:04:0d:8e:18:35:d7:
2f:e3:93:d7:d6:32:27:24:b9:73:60:8f:0d:4e:c4:
60:22:f6:9b:cc:a5:92:b9:07:fa:27:50:53:ad:88:
a3:e9:7f:76:ea:9a:14:44:04:02:c1:12:4b:5f:4a:
a1:27:71:e3:18:bb:da:70:ff:ed:4a:e2:97:7e:3f:
b7:a8:10:28:e4:f1:31:0f:0d:6f:4b:e6:59:ab:f8:
59:c1:60:ec:dd:02:a3:8d:58:83:bd:dd:dd:e8:f5:
31:40:b7:0d:9c:06:a6:74:be:0f:f8:9a:9d:70:67:
5f:24:e0:b0:38:63:3d:df:84:ee:38:0d:4d:c4:4f:
04:fb:6e:71:48:4a:4f:3d:a2:02:c9:d4:2f:44:ef:
55:d2:d6:15:cf:b2:1e:81:14:a3:7f:2e:03:c8:56:
80:19:21:2c:ed:54:ac:17:e7:c7:b2:88:6b:ff:e7:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AC:57:B6:2A:41:45:1D:53:EB:D8:EE:3E:A2:D6:40:B7:5B:CE:5B
X509v3 Authority Key Identifier:
keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/E7EBC9003EE411ED905A3415C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.8.0/23
IPv6:
2406:60c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:b9:3c:2f:e2:91:20:5e:4b:d3:08:e7:2c:af:a2:c1:05:23:
cc:43:99:0a:6d:c2:58:1f:c1:87:66:5b:b7:24:36:52:8a:ad:
4c:06:a3:0a:dd:f4:03:68:f2:48:5e:d9:43:ed:a6:c6:47:98:
bb:cf:66:86:09:ff:33:96:7b:3e:0c:1c:87:7b:76:40:94:dc:
0d:d7:f7:63:d2:7e:dc:e9:5f:19:cb:77:27:8b:c2:ae:20:ef:
62:ec:30:22:c9:fc:3f:68:65:78:ef:07:1e:04:31:dc:90:0f:
5e:70:a9:81:12:74:31:00:27:62:7d:50:ff:d4:7c:99:6c:95:
91:a4:73:07:22:e5:9b:9a:75:e5:cf:9a:be:f4:d0:56:7d:58:
a5:0b:36:a9:c8:6f:b8:07:31:37:7d:b9:c3:0f:a8:c2:c8:c9:
2c:92:b4:a8:9d:d4:09:83:a4:18:c1:ca:4a:bd:a0:00:94:dd:
40:8e:f9:2f:0d:9d:93:0d:bc:de:5e:4e:46:39:7c:01:52:e5:
c0:17:4e:63:ae:77:9c:04:b6:09:29:b0:c0:fa:b1:b8:96:42:
d3:03:ac:72:39:25:af:84:af:36:11:b1:b7:80:77:cd:1c:ea:
a4:5d:73:75:16:2c:b2:1c:16:7d:48:3f:a8:b7:88:22:39:45:
36:89:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:36:50 2026 by rpki-client