
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa
File: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (raw, json)
Hash identifier: q0abZtXbwM+RdYlxyf43KbPihkwSPUUbTGx0xSv8PcQ=
Subject key identifier: 0D:6E:DB:89:21:EF:0B:B3:D5:C6:7A:8B:99:68:E6:DA:DF:2A:24:C4
Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial: 018E
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:11:01 +0000
ROA not before: Sat 05 Apr 2025 05:10:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18013
IP address blocks: 103.149.152.0/24 maxlen: 24
103.149.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Validity
Not Before: Apr 5 05:10:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a5a884-a65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ec:7d:cb:08:68:d5:b9:46:41:f7:c2:cd:03:
35:cc:c8:89:10:c4:e9:c7:4a:03:bf:91:58:37:53:
97:14:bb:86:14:58:51:2c:93:57:7d:34:47:77:e6:
4f:85:f4:39:09:ba:a2:e2:cd:49:d2:84:b9:5e:49:
69:c4:13:3e:e3:08:bb:c8:3d:3e:ce:b3:60:4a:aa:
e3:c5:77:a3:a1:69:58:a0:04:96:f0:f7:1a:7b:9f:
ff:a3:59:ae:53:1b:82:91:3f:51:d2:79:15:c9:71:
b3:54:0a:53:a4:66:ff:ce:ed:d9:2a:7e:6b:63:35:
a3:2d:45:56:c2:17:8e:d4:85:3d:e0:56:30:f2:3f:
e7:f4:fc:3f:d0:26:eb:9c:08:82:57:1c:1f:f6:f9:
a3:b6:e3:e3:f6:2a:13:a1:06:14:a4:00:1b:84:0a:
f7:24:3e:fe:6c:93:7c:18:fd:df:d1:24:d3:67:17:
b8:0e:76:f0:49:e0:21:e3:61:ab:30:fa:de:96:bc:
65:55:9f:4e:a6:97:9e:cf:ba:68:c7:dc:85:37:d3:
75:a1:1d:87:f6:f9:43:4f:c6:67:d1:80:85:fe:43:
ca:94:cf:54:52:c5:17:ee:37:75:bd:b3:47:af:98:
c6:56:94:69:e1:91:9b:9a:92:76:68:4d:70:e6:68:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6E:DB:89:21:EF:0B:B3:D5:C6:7A:8B:99:68:E6:DA:DF:2A:24:C4
X509v3 Authority Key Identifier:
keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.152.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:c5:6b:44:f0:69:77:27:ac:71:2b:76:bf:38:ba:28:c5:9e:
c6:e9:ec:a4:cf:e2:17:4a:b3:63:ec:b0:59:c5:d7:67:ef:23:
ee:ae:92:89:b3:0e:ae:7f:98:2d:0b:95:0c:17:77:a1:4c:ef:
92:9c:5f:cf:5e:6b:c7:e2:c4:44:68:40:73:3b:c4:61:35:8f:
6a:c5:f3:fa:18:c6:bb:4c:96:f0:36:6b:bb:86:f1:64:28:e2:
3e:82:0d:9a:97:28:7e:3c:70:ea:6a:7a:73:0c:5f:17:ec:6a:
b6:8d:0b:5e:02:40:90:f5:01:c9:80:24:8e:05:d4:2c:92:f8:
b6:41:d1:44:5d:bb:a0:f6:1a:92:a9:e4:64:50:75:c6:91:2b:
42:c5:e8:cc:3e:55:17:bc:74:c3:72:2c:32:27:30:ac:cc:56:
c6:a5:58:fe:8a:f2:97:b4:f0:db:07:2e:7c:3b:8c:aa:ea:ca:
8a:db:7c:55:11:99:25:3f:4d:33:f7:ee:01:9d:39:34:5f:e2:
ff:95:27:49:2c:4f:c9:41:40:5e:20:b3:55:a6:39:94:c5:d1:
ea:1c:75:79:49:e5:c7:f8:80:6c:10:29:3f:5a:c2:a5:fb:24:
04:f2:49:be:84:08:6b:3f:e4:7c:82:e0:d0:d9:d8:72:db:a4:
fa:c9:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:18:44 2026 by rpki-client