
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
File: DCD75050315011F0BC916269C4F9AE02.roa (raw, json)
Hash identifier: it0EUJuF/f2xwJeSJJN9QRAuHCVD+ovbX5Fq/ZrMmKg=
Subject key identifier: EC:6E:75:3D:7D:83:4E:9E:90:65:1D:33:77:55:77:6C:10:A9:69:73
Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Certificate serial: 1A9A
Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
Signing time: Tue 14 Jul 2026 17:16:50 +0000
ROA not before: Tue 14 Jul 2026 17:16:50 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 9422
IP address blocks: 43.255.57.0/24 maxlen: 24
103.70.132.0/24 maxlen: 24
103.70.133.0/24 maxlen: 24
103.70.134.0/24 maxlen: 24
103.70.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 16:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6810 (0x1a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5
Validity
Not Before: Jul 14 17:16:50 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a566f02-6c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:c9:80:c8:44:39:4f:c5:fe:cc:54:7f:7d:
cf:28:cb:9a:c5:bc:a6:29:89:07:6a:6b:c8:b6:9b:
13:f4:7f:93:fe:a0:e1:5d:ee:d1:c8:ca:95:a4:8e:
bc:66:09:d0:31:2b:2d:24:34:c3:a6:c3:35:11:9b:
f3:15:8c:57:fc:aa:f1:6f:40:1f:b3:67:db:ca:79:
b8:de:38:23:92:18:8e:c7:23:48:2a:05:e3:dd:98:
29:56:2c:43:00:0e:e2:91:e5:18:e4:b1:e4:53:b8:
73:6a:64:ac:6d:99:c7:25:3f:2e:9c:9f:05:d0:5a:
76:91:71:05:30:55:44:5d:6f:26:fe:56:9f:15:42:
52:c9:56:47:84:86:02:df:2b:4b:96:4b:17:ad:f9:
57:ab:e5:0d:64:d3:2a:bc:64:20:b7:07:39:cb:da:
19:50:2c:02:d6:57:e0:6c:10:41:6e:1d:29:ae:d7:
a9:d8:ba:0e:8a:3f:c4:ac:1d:01:c3:c7:0e:a1:8a:
eb:c7:3d:5a:b5:a8:14:d0:63:e5:6d:55:35:32:b1:
58:80:bb:c8:d4:d3:fd:54:ca:42:5f:9a:96:90:ba:
64:46:9b:46:37:c9:97:39:a9:3f:c1:36:04:48:bb:
80:49:cb:6b:72:03:89:92:9d:a5:87:c2:be:67:4b:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:75:3D:7D:83:4E:9E:90:65:1D:33:77:55:77:6C:10:A9:69:73
X509v3 Authority Key Identifier:
keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/DCD75050315011F0BC916269C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.255.57.0/24
103.70.132.0/22
Signature Algorithm: sha256WithRSAEncryption
29:a4:0b:91:94:7b:9b:f4:a4:5a:9f:8a:f1:7a:ec:10:89:da:
7a:72:36:de:6e:99:51:04:7b:c7:1e:65:46:3d:12:50:7f:02:
4d:d0:b7:e1:fb:5a:14:cb:9f:86:92:d5:1a:f0:df:69:53:cb:
dd:97:eb:93:06:46:0e:39:7f:b1:e7:77:3b:8e:a1:fc:0c:0f:
04:e2:97:5f:4c:f1:a0:cc:91:fc:2e:5e:0a:91:5d:04:44:d1:
cb:93:29:a6:a3:41:dd:2a:37:5c:4b:85:3b:bd:42:18:0e:c7:
b5:08:ee:24:87:f3:45:3b:ac:be:a4:b9:fd:af:1a:8c:4a:1c:
76:6d:af:1b:14:2f:91:a3:53:28:e6:f5:23:e3:a6:95:c7:39:
41:3b:19:2e:4d:31:67:63:7a:c2:df:1a:17:85:db:30:dc:a8:
2f:10:5d:ce:06:5b:ee:cf:28:bb:20:5b:67:e7:2a:9c:6a:25:
cf:bf:7e:59:04:88:ea:1a:7d:4e:b1:3f:83:cc:d0:59:b5:f5:
58:9c:9d:e3:e1:9d:45:57:d8:15:0b:c8:9f:84:1a:d2:9b:4a:
87:21:45:a8:d1:a6:57:f6:fd:f5:d8:68:f9:8f:93:91:f2:3f:
45:e9:1a:04:a5:f9:40:69:22:0e:1b:59:f8:0c:c2:ae:2e:84:
0e:46:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:57:13 2026 by rpki-client