
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
File: 2DC89280AB5E11F087B3A63DC4F9AE02.roa (raw, json)
Hash identifier: raMlWqDhjQC1kyKcLB1NtSmvdSNAXI5T6+IpnIwsYFY=
Subject key identifier: 8E:EB:8F:89:BF:39:00:66:14:DE:EC:E1:07:1F:15:81:58:78:8D:A6
Certificate issuer: /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial: AF
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
Signing time: Mon 03 Aug 2026 08:58:27 +0000
ROA not before: Mon 03 Aug 2026 08:58:27 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 38186
IP address blocks: 103.147.12.0/24 maxlen: 24
103.147.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 07 Sep 2026 07:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Validity
Not Before: Aug 3 08:58:27 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a705833-1af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5f:77:c2:ff:00:2e:05:5d:1c:c5:b2:d0:27:
b7:07:78:2d:b0:61:8e:ba:72:df:5d:03:bf:a1:65:
16:e1:8c:56:e3:46:e1:48:99:f0:55:94:5f:0e:4f:
12:6c:8e:4f:55:e4:5a:04:59:42:ff:d1:3a:1f:8e:
d4:89:ce:fd:1d:3f:eb:66:e0:b3:d9:01:43:bd:57:
5c:37:05:15:01:8f:e0:07:32:2b:4b:42:80:6a:4d:
d1:b1:8b:1f:dc:f5:68:4e:e6:40:92:16:fa:95:4b:
69:5d:ba:98:7e:ee:e3:cb:71:69:ec:87:13:a5:ee:
3f:36:74:6f:7a:b5:f3:34:e6:3b:fd:ff:44:66:09:
c7:c3:f9:8e:70:8b:26:37:90:51:07:1d:da:cb:9e:
0b:f5:fc:77:56:a1:62:2d:e2:ae:14:55:f2:23:e3:
2b:3c:bc:ef:3d:cc:72:75:02:c2:ce:69:da:be:40:
94:d4:46:c7:a9:37:19:88:d5:1f:7a:de:35:f8:64:
af:dc:42:ad:66:dc:4d:21:29:8d:e6:80:b1:08:b4:
69:5a:5b:e1:66:80:7f:0a:6b:cd:55:2b:12:bb:dc:
fd:c0:12:21:bd:bd:ee:03:96:79:b9:9f:49:66:1b:
aa:b7:49:1c:a5:fd:1b:da:4f:6b:3c:f0:aa:6c:6b:
2e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EB:8F:89:BF:39:00:66:14:DE:EC:E1:07:1F:15:81:58:78:8D:A6
X509v3 Authority Key Identifier:
keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.147.12.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b1:00:33:61:b7:df:d0:76:8f:55:bd:9b:0a:9f:eb:88:17:
cd:fb:ad:20:a5:21:1d:fb:25:a9:11:8f:00:f8:62:4e:11:1f:
de:50:a9:ee:76:06:cf:ab:ef:ae:9e:cc:60:3e:d0:0c:0c:20:
2a:bc:1b:3e:aa:3a:f8:6a:24:f3:17:3d:ea:b7:6e:76:ff:9c:
a6:bd:1b:03:94:3f:25:d2:a0:94:1f:53:69:a3:95:7a:7b:c9:
ec:85:51:9f:11:6f:66:9d:8e:a3:fb:53:bf:0f:80:84:d0:e4:
76:96:53:fd:56:18:4f:21:10:4d:f3:65:67:22:02:c6:f7:93:
10:13:f6:ad:1f:38:21:1a:ab:e8:ea:7e:53:69:c8:82:0e:71:
91:1f:4e:91:66:f5:8a:0a:e0:6f:b2:b1:61:d7:2d:03:37:d9:
3a:67:69:c9:02:4a:4e:27:d6:2d:e9:4c:f5:13:c4:de:3a:f4:
89:dd:27:14:4c:f0:6b:af:d1:b0:48:2f:37:61:df:bd:86:56:
84:73:eb:ab:03:2b:cf:3b:9b:b1:9e:72:0d:23:b1:af:12:ee:
78:33:87:aa:8b:01:b8:f5:40:0d:c5:01:6f:c9:25:16:11:61:
97:69:e9:43:92:82:b4:18:02:dc:11:b6:41:4b:66:08:c8:80:
f5:26:2d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:00:02 2026 by rpki-client