
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/430E7F9CACBC11EBB0651B63C4F9AE02.roa
File: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (raw, json)
Hash identifier: yORei5KpH6OrXSTxn5SzQbTbq4XYVihJ7MoNWsI4oTo=
Subject key identifier: EA:4F:1D:08:D6:5E:F3:5C:4E:25:64:0F:50:CA:6F:23:7B:27:0B:9D
Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial: 086D
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/430E7F9CACBC11EBB0651B63C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:46:10 +0000
ROA not before: Sun 31 Aug 2025 21:13:18 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 135386
IP address blocks: 103.153.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 20:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Validity
Not Before: Aug 31 21:13:18 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a46d52-ca8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:dc:50:a6:2b:c0:29:c4:d8:ec:e6:8a:d9:55:
65:00:22:e4:54:79:66:7d:3e:ef:78:6b:87:47:2d:
f0:2e:32:39:d8:05:85:65:9d:08:b8:35:7c:5d:56:
8d:c6:6a:aa:9c:04:31:3d:13:3a:6b:b9:8d:4a:20:
41:76:d6:00:b6:d1:7c:6f:1d:77:56:8b:0e:f2:ad:
14:e7:a9:15:80:a7:f7:5f:6a:61:a2:01:c8:77:a3:
05:08:52:b5:be:d4:84:85:b1:ee:0d:e1:83:5e:54:
23:87:d7:da:bb:64:94:e0:b3:f5:de:47:eb:65:99:
c4:a4:e7:ff:d9:aa:06:12:55:55:74:13:8b:70:43:
d9:3d:f4:44:22:7e:93:3c:a0:1f:07:0d:d0:6f:f9:
c9:1d:ad:fe:16:be:dd:e1:2a:95:36:f3:59:45:fe:
ae:9b:79:18:e1:0e:ed:cf:2f:06:3c:c9:63:c3:16:
e0:6f:69:f2:db:b0:a8:d4:b6:50:d1:32:fe:1c:94:
71:f2:65:19:d1:6d:6d:ea:77:d7:64:5d:d5:c1:54:
14:74:f3:d7:70:3f:ba:a4:26:f3:ee:61:dd:f8:af:
71:d3:8a:a1:22:d3:03:a5:3a:1e:82:4e:e3:0e:01:
d6:61:58:e3:e2:78:27:20:16:3c:e0:4c:68:d3:c0:
da:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4F:1D:08:D6:5E:F3:5C:4E:25:64:0F:50:CA:6F:23:7B:27:0B:9D
X509v3 Authority Key Identifier:
keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/430E7F9CACBC11EBB0651B63C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.138.0/23
Signature Algorithm: sha256WithRSAEncryption
61:5d:b4:38:e2:b4:49:96:63:a0:ff:bd:0d:84:34:1c:6f:58:
e4:83:2a:c2:d5:22:95:df:e8:0e:e5:43:84:cf:9b:ab:04:d6:
8e:9a:40:57:30:92:a9:a5:c5:bd:88:44:16:a0:a6:83:ce:07:
c9:6c:13:04:d9:5f:b6:6c:9c:e3:71:b0:07:77:9d:2e:2a:63:
d1:e6:1a:9e:0e:17:df:17:11:fa:ea:18:26:62:cc:02:fc:79:
ee:e3:c1:ed:f2:08:44:bb:c9:18:8f:31:c7:39:f6:7f:ca:cf:
68:e1:a3:c4:79:93:b1:9f:ee:89:b3:29:b7:5d:0e:22:74:ec:
bb:39:33:da:40:17:25:a3:41:3d:37:43:f3:36:71:ac:57:c9:
d6:f3:67:bd:b6:e2:21:77:a9:73:bb:f0:3d:cd:0f:ad:c1:ba:
d5:f5:6b:4c:4b:ba:a8:78:b7:d9:ac:09:25:ae:ff:46:b1:91:
bd:6f:dc:a7:ff:8a:45:17:7f:17:bb:e0:58:b2:71:c3:84:ea:
07:c6:9d:34:fa:60:1c:e0:69:36:f4:5a:8f:9e:bb:2b:45:36:
25:9e:a8:7b:ac:71:7b:4f:2e:92:54:8b:1f:16:0c:5a:22:92:
7a:5d:ad:79:68:72:29:26:91:ae:26:ca:83:71:80:f3:42:0e:
37:59:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 13:06:53 2026 by rpki-client