
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/2DCC2988982711ED9D75C85AC4F9AE02.roa
File: 2DCC2988982711ED9D75C85AC4F9AE02.roa (raw, json)
Hash identifier: O+JwB/SEAHAqD7WtU6nBxA0f+/QZlJ1WVpx3bHligPk=
Subject key identifier: D7:7D:26:40:BE:69:B0:0C:01:58:87:66:45:EE:3E:BC:17:89:47:F0
Certificate issuer: /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial: 08A3
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/2DCC2988982711ED9D75C85AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:23:42 +0000
ROA not before: Sun 04 May 2025 21:01:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9829
IP address blocks: 103.149.58.0/24 maxlen: 24
103.149.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2211 (0x8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Validity
Not Before: May 4 21:01:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4761e-ef4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:b7:5b:c4:25:d0:8f:9f:39:cb:9b:fa:6b:
93:95:c0:81:8a:24:82:63:8d:e3:d6:d4:26:ec:b9:
8a:d5:1d:4f:34:5b:b5:4f:02:94:56:46:59:b2:71:
77:97:80:3d:38:4e:73:74:73:c9:c5:a4:8d:40:99:
c9:3f:bf:36:51:55:e4:44:75:95:65:dc:d4:dd:25:
3b:22:a8:26:97:17:9a:a1:3e:32:31:d7:9e:da:eb:
c5:fb:14:3e:15:a7:c2:d0:5f:36:b3:8f:72:20:a8:
c7:43:f6:e0:a9:53:c9:b6:20:6c:a8:89:9b:42:66:
a3:61:ec:88:31:0a:07:8d:23:5c:cd:0d:ce:ef:90:
5b:e5:36:ab:e1:d4:ec:a2:f9:3c:b3:04:25:09:7f:
13:c4:56:aa:12:01:60:0c:3f:62:c4:5b:4f:18:c3:
ab:39:95:c6:7f:c2:b3:6a:a4:68:e0:8d:b1:cf:22:
0c:6e:0a:5f:38:b4:9a:42:57:c1:1f:76:7b:ae:b9:
a3:7e:e4:06:27:6d:14:e4:01:a4:d0:d1:f0:87:ca:
4f:c8:fd:75:07:05:08:8d:d1:5c:92:f9:f9:c2:b5:
74:8d:37:ab:01:a2:29:70:20:f1:ce:de:45:e0:4f:
8f:f9:36:bc:e0:4f:c0:5c:74:31:f9:51:2f:fd:54:
30:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:26:40:BE:69:B0:0C:01:58:87:66:45:EE:3E:BC:17:89:47:F0
X509v3 Authority Key Identifier:
keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/2DCC2988982711ED9D75C85AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.149.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:b9:91:a0:47:02:0b:49:3a:63:8d:02:cb:6d:27:1a:f9:8b:
6a:d7:7f:ee:02:7c:88:3d:e6:4d:76:05:64:8e:2d:87:f5:c5:
6c:a8:a4:b7:3c:85:9e:33:4b:a6:81:77:fd:74:a8:64:3d:3a:
82:5b:fd:83:03:57:44:9b:7b:35:f3:51:b9:49:44:16:b5:7b:
10:50:ee:3a:69:95:d9:30:8d:6f:d9:ef:91:a7:91:57:3f:0c:
d1:f4:e5:12:61:27:3e:18:54:34:24:70:26:5b:57:58:ab:ec:
52:50:e5:f2:9d:22:fd:f3:36:e1:d1:b4:b6:e6:fa:cb:d8:ab:
38:98:a0:b0:be:3d:ae:4c:30:b4:f5:84:76:1d:29:6c:2b:cc:
55:31:5d:b9:de:a9:b7:19:1c:fd:95:0b:02:02:f6:f2:50:fe:
e7:b0:52:82:dd:b0:71:26:9f:61:62:10:af:8f:77:60:9e:26:
ad:38:83:b8:6c:62:70:4a:73:13:b9:ed:ae:f5:3a:a9:7b:15:
6b:26:6f:c6:27:1a:ae:06:26:84:60:13:29:2a:c4:ef:22:4c:
6a:50:b3:e2:53:ce:05:d7:ce:3d:a3:56:20:98:bf:bf:8b:56:
55:f3:5a:93:c2:7a:24:d5:a2:4d:b0:19:c3:59:e3:59:c0:a4:
fc:b0:47:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2
QzNBMEUxQzkwHhcNMjUwNTA0MjEwMTI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzYxZS1lZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz5K3W8Ql0I+fOcub+muTlcCBiiSCY43j1tQm7LmK1R1PNFu1TwKUVkZZsnF3
l4A9OE5zdHPJxaSNQJnJP782UVXkRHWVZdzU3SU7IqgmlxeaoT4yMdee2uvF+xQ+
FafC0F82s49yIKjHQ/bgqVPJtiBsqImbQmajYeyIMQoHjSNczQ3O75Bb5Tar4dTs
ovk8swQlCX8TxFaqEgFgDD9ixFtPGMOrOZXGf8KzaqRo4I2xzyIMbgpfOLSaQlfB
H3Z7rrmjfuQGJ20U5AGk0NHwh8pPyP11BwUIjdFckvn5wrV0jTerAaIpcCDxzt5F
4E+P+Ta84E/AXHQx+VEv/VQwEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNd9JkC+
abAMAViHZkXuPrwXiUfwMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy
ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUU4M0IvNzkyRDE0OEFGMjgxMTFFQThBNkZDNjZEQzRGOUFFMDIvMkRDQzI5ODg5
ODI3MTFFRDlENzVDODVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5U6MA0GCSqGSIb3DQEBCwUAA4IBAQBruZGgRwILSTpjjQLLbSca
+Ytq13/uAnyIPeZNdgVkji2H9cVsqKS3PIWeM0umgXf9dKhkPTqCW/2DA1dEm3s1
81G5SUQWtXsQUO46aZXZMI1v2e+Rp5FXPwzR9OUSYSc+GFQ0JHAmW1dYq+xSUOXy
nSL98zbh0bS25vrL2Ks4mKCwvj2uTDC09YR2HSlsK8xVMV253qm3GRz9lQsCAvby
UP7nsFKC3bBxJp9hYhCvj3dgniatOIO4bGJwSnMTue2u9TqpexVrJm/GJxquBiaE
YBMpKsTvIkxqULPiU84F1849o1YgmL+/i1ZV81qTwnok1aJNsBnDWeNZwKT8sEf4
-----END CERTIFICATE-----
Generated at Sun Mar 15 01:44:39 2026 by rpki-client