
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa
File: A89C497E6D1911ED9C34360FC4F9AE02.roa (raw, json)
Hash identifier: QZecKaYBLYT3JXclTT713l0j3wlbFJ4L6rdtm9fLrr0=
Subject key identifier: B6:57:82:D7:AB:77:2D:11:E8:93:4F:A0:2A:B0:06:E7:1D:43:8E:C2
Certificate issuer: /CN=A913F478/serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
Certificate serial: 0269
Authority key identifier: 56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa
Signing time: Mon 02 Feb 2026 05:59:58 +0000
ROA not before: Mon 02 Feb 2026 05:59:58 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150447
IP address blocks: 103.17.148.0/23 maxlen: 23
103.17.148.0/24 maxlen: 24
103.17.149.0/24 maxlen: 24
125.253.128.0/24 maxlen: 24
125.253.129.0/24 maxlen: 24
125.253.130.0/24 maxlen: 24
125.253.131.0/24 maxlen: 24
2001:df1:5bc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl
rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F478, serialNumber=568F765CCAB42C5230798E68FBC37C8AA49F5F44
Validity
Not Before: Feb 2 05:59:58 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69803d5e-8c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:7d:33:b6:63:45:8e:12:5e:74:41:04:09:
f6:21:47:36:7f:4d:7a:d8:34:9b:b9:67:58:68:62:
60:10:78:8f:b1:b6:37:06:48:7c:c7:48:ea:f2:c6:
07:45:3c:fc:97:b0:09:1b:0e:38:84:bc:9a:9b:14:
fa:0c:99:9e:8d:50:ea:5b:90:82:6f:6a:76:bb:fc:
3b:f4:98:0c:89:43:d4:2b:43:71:77:fe:36:03:c7:
24:ba:d8:e1:20:97:d3:bd:0c:dc:11:70:03:56:25:
b2:b1:09:35:62:dc:ce:d7:b4:c1:a6:f9:6e:b8:e9:
09:27:3a:48:17:0d:e2:10:f7:43:4b:ac:75:7a:ea:
c8:8a:6c:91:dc:72:14:42:54:ab:eb:d3:d5:2b:69:
38:43:38:52:75:8d:9c:9c:b9:89:2c:a0:5d:40:d2:
ec:14:44:25:16:87:aa:27:14:d0:28:63:93:a7:94:
7d:8d:01:ad:3b:ad:f7:7d:ed:f0:52:b1:31:29:be:
8e:75:22:3f:0f:38:d3:d3:99:bc:43:f0:c4:53:61:
df:70:06:b4:6d:37:47:ab:18:41:0d:05:b4:b8:8f:
71:32:d2:12:88:d3:8c:54:af:40:9b:41:d3:0c:cc:
58:b6:28:6d:30:20:98:27:ba:85:c4:e5:64:9f:2b:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:57:82:D7:AB:77:2D:11:E8:93:4F:A0:2A:B0:06:E7:1D:43:8E:C2
X509v3 Authority Key Identifier:
keyid:56:8F:76:5C:CA:B4:2C:52:30:79:8E:68:FB:C3:7C:8A:A4:9F:5F:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/Vo92XMq0LFIweY5o-8N8iqSfX0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo92XMq0LFIweY5o-8N8iqSfX0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F478/499A915E6D1611EDBE12050CC4F9AE02/A89C497E6D1911ED9C34360FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.148.0/23
125.253.128.0/22
IPv6:
2001:df1:5bc0::/48
Signature Algorithm: sha256WithRSAEncryption
2c:f5:ad:fc:9d:5e:ae:28:fc:bb:ef:dd:6a:d7:72:09:f6:97:
90:18:fb:0e:a7:79:f9:05:43:c3:1e:ad:2c:c0:b9:84:cc:81:
a8:3a:27:de:82:84:be:17:dc:ec:95:28:7d:55:68:f1:e6:46:
05:c7:f5:9b:70:58:ae:11:18:c2:e7:84:c7:89:ba:45:32:93:
b8:5b:87:28:c0:32:d1:bb:4f:19:e5:d1:fb:1e:32:a2:6b:76:
42:26:56:81:4a:0e:34:00:79:d8:91:6b:22:2e:55:0e:f7:ff:
75:14:59:47:b4:d1:b0:88:da:df:26:ca:72:94:c9:b6:ab:42:
aa:80:b2:ff:70:40:23:a3:73:1c:b8:f3:8a:b6:95:e0:f4:34:
a2:7e:db:9a:3a:37:b3:83:be:66:25:90:77:c2:d1:3e:74:cf:
f3:5d:fc:50:ae:d2:45:03:c4:65:06:cf:20:05:8a:bd:98:69:
c5:04:13:c4:4a:8f:34:88:96:51:69:74:c1:42:e9:f6:71:7d:
5b:18:ff:31:98:b0:53:42:94:d0:ae:b7:ac:52:69:01:57:a0:
34:1f:57:47:32:3d:64:b3:3f:bc:09:e3:9f:70:0d:e6:0b:96:
ff:7b:4c:45:c0:06:b9:e3:f7:55:36:d3:b2:e8:5e:a0:f4:a7:
e6:6d:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:37:54 2026 by rpki-client