
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa
File: F148BE6E511611EE85A7E634C4F9AE02.roa (raw, json)
Hash identifier: GqZMFA0L7ACjbBy6EEKhCEh6yrXjeUh2/sYjzUSadNQ=
Subject key identifier: 14:FA:43:91:85:47:EC:62:67:04:C5:88:7E:2D:53:5D:C7:EA:93:AF
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 15D5
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa
Signing time: Mon 30 Mar 2026 17:20:38 +0000
ROA not before: Mon 30 Mar 2026 17:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137557
IP address blocks: 103.113.44.0/22 maxlen: 22
103.113.44.0/24 maxlen: 24
2402:b740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5589 (0x15d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Mar 30 17:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69cab0e6-c05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:90:cb:13:31:aa:46:87:db:3d:1b:41:df:
88:86:00:e8:ed:ef:da:e0:d6:2a:af:00:87:49:aa:
8e:70:57:f9:04:cd:3c:4c:ee:4f:74:64:79:28:9a:
2d:ab:46:cb:cd:5b:eb:90:21:87:89:ec:39:0c:f0:
1c:38:ec:05:d1:f4:b8:80:ff:9b:16:d0:71:5b:d1:
89:86:b3:b9:f7:b3:e8:30:30:0c:29:54:06:cf:f2:
37:09:8d:2b:77:90:c0:26:68:47:b0:ff:24:91:8d:
8c:fb:dc:ed:f6:09:64:90:29:33:09:8e:a3:13:bb:
b4:ff:1f:89:f9:e5:6c:86:35:ed:1d:5c:7f:a6:b7:
37:69:6d:0c:60:bd:d9:98:92:50:85:d0:07:2c:26:
a3:f6:04:1c:f1:c9:48:03:44:04:44:40:6b:df:da:
a6:13:f6:42:b8:45:d3:86:ac:e9:11:81:5f:87:a4:
b4:00:fc:70:ff:46:90:f2:9e:a3:a4:1f:6b:78:0c:
a6:51:d2:79:51:1f:e9:eb:db:95:8a:f4:cd:d3:f8:
d7:6f:59:8c:19:a2:c4:4a:c0:e2:d9:39:f3:8d:9a:
58:19:30:b2:cd:9b:c6:6e:23:7c:5f:00:9e:3e:92:
83:30:cd:90:f9:22:11:2f:a3:cc:b8:4c:ca:52:52:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FA:43:91:85:47:EC:62:67:04:C5:88:7E:2D:53:5D:C7:EA:93:AF
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.44.0/22
IPv6:
2402:b740::/32
Signature Algorithm: sha256WithRSAEncryption
bd:5f:ad:db:c1:64:15:05:a8:da:21:e6:93:d5:5c:ab:76:c7:
0a:7c:53:d1:f0:c8:ae:0f:3f:97:5b:21:1b:7e:19:55:e6:c6:
68:66:6d:8b:a3:8e:84:07:9a:b7:89:38:cb:eb:c8:52:29:36:
5e:2d:fa:1f:02:d3:69:49:14:b3:7b:14:e6:86:8a:a4:0f:5c:
ea:61:c5:0a:0f:2a:75:c2:5a:8d:95:41:16:2b:f8:b4:4c:a4:
ff:51:3f:29:11:89:86:2f:0d:0e:cd:35:33:05:f3:cf:a1:5e:
17:50:35:2e:ca:55:cb:a6:30:f1:99:54:94:ec:63:43:7b:e7:
0c:63:88:b6:a5:c4:42:c9:e2:6a:8e:45:63:60:5c:0d:90:ef:
92:c5:c7:df:73:9a:3e:58:65:45:4f:ac:16:29:4d:04:50:d1:
5d:e4:38:aa:0d:9a:d8:6e:31:a0:6a:05:11:37:58:a6:85:75:
96:05:da:c4:e9:25:b4:8b:96:68:27:80:4a:94:ef:b4:26:56:
f4:13:38:f2:ff:2f:92:20:cd:6c:2c:d9:9d:33:1d:d6:7c:92:
75:bd:fe:9c:97:69:f0:eb:7c:ec:fa:50:c3:ee:49:97:6a:e0:
cd:29:6a:88:f1:5f:bd:df:72:78:bd:78:f5:83:4f:42:05:de:
a3:cc:1d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:53 2026 by rpki-client