
$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/E3D288CA6BC311EDB9791958C4F9AE02.roa
File: E3D288CA6BC311EDB9791958C4F9AE02.roa (raw, json)
Hash identifier: ZcRLBxk/Q866NeF+jJVHP1VCi2fP9N3TlKCJBZZM0ng=
Subject key identifier: EB:0D:66:F4:9D:08:D4:13:EF:BF:1F:93:5C:FC:E6:32:FC:12:A1:1C
Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial: 0B67
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/E3D288CA6BC311EDB9791958C4F9AE02.roa
Signing time: Wed 04 Mar 2026 19:25:25 +0000
ROA not before: Wed 04 Mar 2026 19:25:25 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 55020
IP address blocks: 103.148.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 18:59:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2919 (0xb67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Validity
Not Before: Mar 4 19:25:25 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a88724-4f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:d2:e3:d9:ed:35:89:4b:35:8f:53:8a:2f:
f6:a0:15:19:eb:5e:6c:44:13:98:b7:d2:7b:fd:d6:
c0:57:63:41:22:a8:c8:ef:e7:cd:7f:c8:40:d2:3d:
37:c6:27:22:0b:93:b7:a1:41:ea:3b:a9:ef:86:68:
4a:8a:0d:a8:f9:c8:6b:08:88:0d:a2:96:57:bc:aa:
50:13:c0:83:97:ff:28:36:d3:fd:3b:81:12:4f:dc:
6d:e5:d9:5b:91:c6:03:eb:70:14:12:51:38:f3:bb:
ad:80:01:78:da:21:75:b6:e3:43:f8:ef:31:6e:86:
fa:1d:16:b3:01:77:d2:02:7f:10:b5:7a:14:42:b8:
14:08:50:3a:2b:77:e1:8e:81:66:79:70:0f:8e:8f:
25:1e:da:71:7a:5e:13:71:c8:61:78:2a:d3:f1:49:
7d:bb:29:88:68:03:f0:81:34:0d:96:bf:72:48:88:
35:10:5b:1b:bc:4c:7c:6a:53:7a:1b:03:06:1a:98:
b2:c4:f8:74:26:cd:7c:11:2f:bc:e5:41:54:cf:bf:
44:7e:4e:a7:58:b2:29:cc:f5:18:42:d4:13:27:53:
51:0b:5e:64:ca:b3:43:d3:76:ef:69:86:59:0e:80:
ee:d0:12:39:4e:1e:3b:9c:31:4c:d1:82:2a:5d:e9:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0D:66:F4:9D:08:D4:13:EF:BF:1F:93:5C:FC:E6:32:FC:12:A1:1C
X509v3 Authority Key Identifier:
keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/E3D288CA6BC311EDB9791958C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.148.150.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:2c:0a:13:3d:75:98:27:21:d2:31:3d:e4:42:5e:60:c5:6d:
b0:b1:53:16:93:8e:c4:61:b2:b4:06:99:ed:b4:b0:70:33:55:
9b:00:38:17:75:42:6a:50:bd:85:85:f2:59:25:0e:64:dc:5b:
09:5f:e0:da:03:c7:54:61:48:95:da:3b:f7:c9:fd:83:26:0a:
74:b5:bc:f1:61:32:d6:54:d8:31:ea:d6:b6:79:12:ea:1e:c6:
2e:13:dc:26:19:51:33:6e:64:d7:58:bc:81:8c:6c:4c:8e:aa:
4a:12:6f:dc:52:53:6f:1e:f9:3f:85:da:ab:7d:53:17:79:53:
8b:9f:f5:bd:90:0b:d6:8d:78:84:c5:99:57:91:6a:07:1f:07:
1c:66:4c:d0:e3:10:47:a5:ab:01:fe:98:2f:ff:94:d1:bf:e2:
04:5a:a1:06:ba:95:31:75:2f:13:8b:0a:97:63:83:7d:3e:d2:
ea:aa:b2:c6:93:f7:e9:e7:f3:00:ac:14:a4:6b:0e:87:f4:28:
1e:79:be:5f:69:eb:f7:61:e9:a3:45:06:b8:84:90:f9:96:4c:
44:ed:4d:13:09:f4:97:7b:3f:7f:71:ad:c4:4c:4d:e6:83:4b:
0c:a8:9f:12:1a:a4:c2:b8:1f:bf:49:cb:0e:14:2f:70:2b:03:
71:64:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:05 2026 by rpki-client