
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa
File: A7E24C00ABF411F0A0B37937C4F9AE02.roa (raw, json)
Hash identifier: LbBS+EYlpmA67fkMLKgg4SD3EO+91MGCCTOWRrb0obs=
Subject key identifier: 20:6C:74:F1:F3:1F:12:63:41:94:EA:47:7A:C4:91:06:A4:DA:46:AA
Certificate issuer: /CN=A916B53B/serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Certificate serial: 012F
Authority key identifier: 8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:41:10 +0000
ROA not before: Sat 18 Oct 2025 07:32:53 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 26658
IP address blocks: 103.12.48.0/22 maxlen: 24
103.72.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B53B, serialNumber=8D9717727D6E8EEB23807B313C058D0356FFE162
Validity
Not Before: Oct 18 07:32:53 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a58565-d393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:3d:02:e0:75:55:ff:7c:fd:63:77:7f:14:
a4:b4:e9:a8:d6:08:0a:17:90:ce:f4:53:8d:13:6b:
d1:b5:3d:1a:d6:60:be:fe:64:72:f7:00:0f:57:22:
1b:f7:8e:73:91:97:2c:58:ea:a8:de:82:1d:48:c9:
64:49:dd:df:54:e4:87:33:58:a2:84:ec:91:6e:69:
68:af:fc:40:7e:2d:e0:b9:9c:94:ed:83:12:59:33:
69:07:15:3c:55:81:3d:8a:44:97:cd:fc:19:b6:d6:
6f:6e:bb:1c:46:37:9f:89:50:3e:47:e4:52:71:4b:
8d:3b:26:1b:71:11:ab:19:ed:ef:de:02:f6:73:61:
9e:5a:7a:ba:38:06:63:6b:43:af:3b:0f:6d:67:fe:
b5:50:ad:2b:c5:8d:ab:00:0f:f6:8b:e6:9e:38:d9:
0b:e4:7a:b7:09:64:4b:75:f9:2d:de:7f:0d:2e:30:
d5:c2:12:ba:06:da:f2:c8:96:2b:a5:20:4c:a8:97:
0e:14:77:5f:c8:89:3c:36:3d:ec:d2:9f:a9:d4:fb:
af:41:a5:20:14:da:9a:08:75:ac:15:f1:8b:13:10:
46:fc:69:f3:ea:5c:43:20:42:bd:96:27:46:7a:3e:
d2:7d:05:07:e8:06:ab:7d:58:5a:4a:fc:3a:28:6c:
51:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6C:74:F1:F3:1F:12:63:41:94:EA:47:7A:C4:91:06:A4:DA:46:AA
X509v3 Authority Key Identifier:
keyid:8D:97:17:72:7D:6E:8E:EB:23:80:7B:31:3C:05:8D:03:56:FF:E1:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/jZcXcn1ujusjgHsxPAWNA1b_4WI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jZcXcn1ujusjgHsxPAWNA1b_4WI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B53B/20323A8259DD11EFBAD4C286C4F9AE02/A7E24C00ABF411F0A0B37937C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.12.48.0/22
103.72.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:de:e6:7e:0b:20:04:dd:3e:82:bc:c8:61:cb:9c:cf:27:28:
92:72:4f:03:4e:05:11:56:fa:20:4e:9c:11:74:62:6d:17:74:
e7:1e:14:c4:ba:31:e5:e9:ac:80:c2:e7:c8:98:e5:ac:79:7c:
d6:82:0b:7c:77:f9:68:04:3f:b0:12:22:bd:7e:51:fb:f0:d6:
f5:93:24:5f:02:a2:95:44:71:b2:ab:08:7b:4e:c4:20:1a:d2:
dc:fe:e9:2d:26:df:c0:d7:5d:9e:b7:54:30:db:6b:b4:cf:3d:
be:97:9a:37:8d:0a:4f:db:05:4c:e8:b5:40:5c:97:6a:52:af:
7c:d6:d5:b5:e0:58:a4:94:18:36:9c:27:b4:be:96:19:21:4b:
63:e9:76:65:ae:0c:dd:52:5c:a2:cf:d1:bb:05:e5:e3:00:55:
ff:41:d1:4e:92:71:6d:62:dd:7d:83:16:19:2a:f4:e6:67:5c:
aa:0d:5a:68:ac:e9:71:04:cb:6f:a1:47:7d:03:3a:f5:0d:34:
9e:d5:c4:bd:ca:00:d7:c6:17:4e:a9:cc:00:ae:c0:74:f6:6e:
b0:2e:ab:be:e2:21:d1:59:f7:a2:fd:df:33:da:93:ca:f9:c4:
f8:dc:fc:7a:5a:5c:25:7b:e0:ea:48:81:78:47:2c:36:d5:32:
ab:04:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:28:19 2026 by rpki-client