
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/F7B3707C806911EF8C30A03DC4F9AE02.roa
File: F7B3707C806911EF8C30A03DC4F9AE02.roa (raw, json)
Hash identifier: aiqE7GBN+l3YOlzTvalxpxvHOLBHG0Z/5JCvpwlar2o=
Subject key identifier: ED:64:B2:9E:06:DA:46:2D:67:02:1C:15:42:90:16:E1:61:00:52:76
Certificate issuer: /CN=A914D9C3/serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E
Certificate serial: 0124
Authority key identifier: 1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/F7B3707C806911EF8C30A03DC4F9AE02.roa
Signing time: Sun 05 Apr 2026 05:39:59 +0000
ROA not before: Sun 05 Apr 2026 05:39:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138987
IP address blocks: 103.185.219.0/24 maxlen: 24
2001:df0:9ac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl
rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D9C3, serialNumber=1E5C107EFD03CF13D214A39A6A2CE8DDAD30470E
Validity
Not Before: Apr 5 05:39:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69d1f5af-208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:15:1d:00:d4:35:2a:ba:a9:f1:50:c7:39:
89:97:b1:0c:d3:a2:13:90:54:79:4d:ca:13:28:0c:
c5:eb:26:e4:88:92:d8:b8:c8:e9:02:6f:fc:47:2b:
cb:85:8a:fc:16:0a:6a:35:94:d9:05:28:2e:fe:d3:
34:0f:2a:bd:92:78:a3:b8:49:cb:a7:89:ff:6e:4c:
7e:0a:38:00:a2:de:d6:93:2d:b7:ac:1e:70:98:e5:
66:e8:1c:f1:19:03:34:e4:7a:4b:3f:e9:d1:ed:10:
ff:f4:f8:fe:9d:b6:d9:06:04:51:f2:dc:e3:02:ab:
e6:ed:bf:8f:3c:15:5a:16:8c:10:27:25:e6:bc:dd:
a7:08:5c:57:19:1e:dd:22:ca:29:4c:a9:68:38:3b:
1a:2a:c0:a3:8d:ca:3c:8c:c3:d3:29:ae:e2:f2:36:
4b:04:cf:3c:ca:01:86:74:6b:77:94:4d:99:ba:81:
e4:eb:cb:31:aa:4c:86:d6:42:45:52:1d:bb:91:d9:
47:40:fb:49:9c:fd:b9:fe:3d:db:60:48:5b:b6:aa:
ec:e7:4d:cf:fc:4a:1e:92:c3:a5:21:ef:4f:e3:c9:
b8:20:5e:5a:c1:27:3e:f0:f0:f5:a4:70:4f:a2:ac:
55:90:6c:57:5a:4f:fe:16:fe:6e:5a:82:2f:ed:99:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:B2:9E:06:DA:46:2D:67:02:1C:15:42:90:16:E1:61:00:52:76
X509v3 Authority Key Identifier:
keyid:1E:5C:10:7E:FD:03:CF:13:D2:14:A3:9A:6A:2C:E8:DD:AD:30:47:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/HlwQfv0DzxPSFKOaaizo3a0wRw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlwQfv0DzxPSFKOaaizo3a0wRw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9C3/45CC82CC806911EF82C9773CC4F9AE02/F7B3707C806911EF8C30A03DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.185.219.0/24
IPv6:
2001:df0:9ac0::/48
Signature Algorithm: sha256WithRSAEncryption
02:5d:ce:ff:d9:7d:03:4f:3d:95:ad:c5:64:ed:01:03:cd:83:
38:7f:4e:f8:f4:b2:ec:3b:2c:83:bc:2d:31:ac:c6:22:32:9e:
87:98:81:a6:34:73:ff:df:85:fa:bf:dd:1c:d6:44:c7:3a:cf:
80:98:ca:2f:20:2d:8b:83:2a:0a:e3:0e:53:80:31:a9:37:39:
5b:ed:57:de:53:6f:b2:cb:ee:3e:7f:86:58:26:e9:48:02:cf:
1a:91:1f:74:8c:d1:b9:35:7a:68:22:3a:3b:18:c3:4f:e2:07:
ee:a2:92:7a:7e:1f:02:7b:01:19:6b:fa:ec:b4:73:18:66:4f:
c3:c3:14:da:30:c7:19:e3:b1:28:6f:10:4c:0d:ee:31:b0:8f:
03:ba:6c:a1:5f:24:d8:66:49:78:d2:46:6c:ce:ce:04:c9:8d:
48:1d:aa:b5:2d:f5:b6:3d:94:f4:41:a4:15:61:fd:30:f1:e9:
b9:e7:6a:81:b3:d7:78:fb:b3:e9:ad:d3:a8:67:f7:07:d2:cd:
66:5b:14:a3:ea:f3:0f:34:80:84:ca:b1:69:92:82:9d:4b:fd:
85:67:09:ea:5a:41:36:91:a1:2a:d8:72:64:29:bc:e0:96:94:
ae:1d:0a:35:a3:38:f1:e7:45:77:22:56:3f:52:b4:f4:8f:45:
5b:23:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 11:03:31 2026 by rpki-client