
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa
File: 1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa (raw, json)
Hash identifier: 0HpT0bON0GmwZ3HDIXvnmn4pvemwXudiqqeGl2I5uF8=
Subject key identifier: B7:94:83:92:7F:DF:25:68:62:70:1F:49:FB:37:97:78:BD:AD:5C:04
Certificate issuer: /CN=A914C1AE/serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Certificate serial: 03D8
Authority key identifier: E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa
Signing time: Thu 29 Jan 2026 00:20:47 +0000
ROA not before: Thu 29 Jan 2026 00:20:47 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 149524
IP address blocks: 103.182.148.0/23 maxlen: 24
2001:df0:7cc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 23:46:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 984 (0x3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C1AE, serialNumber=E768FCC8B967D6F1C881E0D49A0C4208DF07FB37
Validity
Not Before: Jan 29 00:20:47 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697aa7df-1b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:58:c6:55:9a:01:af:8e:da:9e:d7:96:38:
34:85:d1:96:4b:22:99:e5:38:37:01:22:a0:ed:2d:
1a:67:0c:f8:44:df:67:45:5b:45:0d:09:c2:1a:ce:
30:4e:d9:b0:60:b5:82:a8:fb:c0:66:a5:c9:b6:5c:
4b:e5:01:cb:1c:b0:1c:50:c4:bd:f7:b2:c4:6e:6d:
04:03:35:6f:2b:ac:15:9a:89:98:f7:89:4b:41:c3:
94:c3:36:af:86:ad:87:5b:e0:4b:8b:bb:dc:ab:8a:
b5:9b:bb:6c:dd:a1:00:b5:13:ea:e0:a1:db:1d:92:
da:9a:22:1c:af:ca:bd:79:87:c1:bb:14:0f:80:18:
89:1d:f1:fa:1b:1e:af:dc:80:eb:47:e9:fd:51:22:
11:87:88:9c:4a:21:28:63:33:c9:53:da:db:ba:2a:
77:72:04:32:e0:5e:09:07:19:15:95:6e:1e:05:ed:
be:28:4d:49:d4:65:f5:fe:9b:03:5e:df:ef:82:93:
71:98:f9:76:02:df:36:5c:93:41:67:55:bb:f8:05:
37:74:f9:cd:0f:a4:8c:8d:98:4e:c0:d6:13:fb:b3:
fe:e9:94:da:b0:ce:50:c6:0a:ad:3e:69:fd:93:38:
80:e0:1e:fd:14:9a:1a:5c:5d:57:51:49:53:8f:40:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:83:92:7F:DF:25:68:62:70:1F:49:FB:37:97:78:BD:AD:5C:04
X509v3 Authority Key Identifier:
keyid:E7:68:FC:C8:B9:67:D6:F1:C8:81:E0:D4:9A:0C:42:08:DF:07:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/52j8yLln1vHIgeDUmgxCCN8H-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/52j8yLln1vHIgeDUmgxCCN8H-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C1AE/58D992DEB67611EC8F537847C4F9AE02/1D3CD16AB67A11ECB02F1D5FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.148.0/23
IPv6:
2001:df0:7cc0::/48
Signature Algorithm: sha256WithRSAEncryption
43:1e:30:a3:13:1d:72:76:cc:92:d0:85:13:22:cc:89:64:da:
eb:ad:a2:f7:b0:cf:51:99:4d:d6:d4:7b:e6:3b:3b:8b:e6:1c:
ca:fd:2c:ec:7e:72:fa:cb:f5:6e:43:cd:07:f1:e8:a6:46:5b:
c4:43:7a:c5:58:c7:d0:7c:56:e1:14:0e:32:bf:3e:0e:9e:17:
a6:5f:d9:b0:27:ca:be:1d:44:d7:84:cc:a6:42:fd:0a:4e:5a:
d3:e2:8c:44:57:0f:19:b6:f5:a7:15:c2:59:12:8d:31:72:ee:
c1:cf:c7:ce:b3:63:d2:2c:1b:54:12:ee:2d:d1:ff:be:cb:c5:
a6:c7:18:b9:76:33:06:4e:e0:c2:92:17:e6:e6:65:f3:de:4a:
95:53:73:48:53:66:d5:64:f7:20:65:6d:07:1d:0f:b0:dc:9a:
9a:f1:b2:50:26:9b:f5:90:f5:1a:ce:be:42:65:fd:e1:e9:b0:
bc:03:59:22:f7:c6:ef:f9:36:17:ba:e1:e4:89:4a:8e:3c:71:
37:8d:11:72:9a:7f:1e:61:0d:47:5a:9f:1a:b6:d9:9c:eb:54:
cf:1d:b8:f3:31:03:c9:ab:2c:5a:75:d5:25:11:0b:81:4b:20:
a1:25:1b:36:d8:0b:7a:d8:47:c4:56:26:25:1f:97:f3:5d:fb:
cf:11:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:58:56 2026 by rpki-client