
$ rpki-client -vvf rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa
File: 38E02CDC04EE11EE89900876C4F9AE02.roa (raw, json)
Hash identifier: 1Glvhcf7GkoJCunHDpP45q9GMuetf4Sccyte1OOh3sM=
Subject key identifier: C5:1A:23:BC:94:FB:EA:06:08:F1:F2:7A:5C:65:C0:D6:61:B4:8B:14
Certificate issuer: /CN=A911285C/serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Certificate serial: 0292
Authority key identifier: AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:15:12 +0000
ROA not before: Fri 31 Oct 2025 02:16:26 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 55850
IP address blocks: 103.172.232.0/24 maxlen: 24
103.172.233.0/24 maxlen: 24
223.165.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:19:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 658 (0x292)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911285C, serialNumber=AC912CEFA758A1199C1BEDE06B14A9EA398975F7
Validity
Not Before: Oct 31 02:16:26 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a46610-04c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:b2:b9:e8:ef:f5:87:a5:a1:57:9e:88:c3:
c4:1f:cc:ed:49:2c:56:27:c7:62:0b:ad:95:aa:c6:
0e:f4:1a:85:5c:b9:12:a2:5c:6f:97:9f:61:c2:2c:
a4:4c:3b:37:c4:5a:ca:3a:37:ff:e3:bc:0c:08:79:
55:e4:85:38:50:4b:c0:49:c3:27:09:2d:70:13:ff:
9a:28:85:3c:15:43:49:02:73:d7:a5:02:98:46:62:
54:3c:f4:a7:e2:b5:6b:88:8f:70:22:eb:74:37:6f:
43:e0:8d:a8:ca:ee:9f:5c:4c:50:8b:c3:f4:ba:48:
c1:aa:be:73:2f:74:a0:3e:cd:32:54:4e:54:9d:bd:
b9:be:b9:48:d9:31:56:b1:61:4e:63:4c:f4:68:e7:
74:85:23:60:a4:2f:a6:39:a3:b5:93:29:e7:41:a7:
e5:53:18:4e:6d:30:fa:f6:24:b8:20:d5:e6:3b:37:
82:c8:b3:9f:04:4a:ca:bc:b1:c6:90:81:e8:b2:1b:
22:b1:d9:5e:eb:52:3f:16:fd:e1:81:7d:81:41:ef:
9f:bd:06:36:cc:63:df:73:08:7d:5f:53:a5:be:55:
b7:77:5a:be:47:8a:71:89:ec:cc:1b:9b:61:cd:c0:
cd:2d:ed:8f:de:4e:99:dc:f0:cf:6f:bf:a0:16:4e:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1A:23:BC:94:FB:EA:06:08:F1:F2:7A:5C:65:C0:D6:61:B4:8B:14
X509v3 Authority Key Identifier:
keyid:AC:91:2C:EF:A7:58:A1:19:9C:1B:ED:E0:6B:14:A9:EA:39:89:75:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/rJEs76dYoRmcG-3gaxSp6jmJdfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rJEs76dYoRmcG-3gaxSp6jmJdfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911285C/0A68B118608D11EDAF2C6567C4F9AE02/38E02CDC04EE11EE89900876C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.232.0/23
223.165.16.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1a:89:42:ce:71:d7:05:44:e4:1e:e5:1b:40:8d:8d:49:f2:
8e:38:e9:0a:9a:81:b1:73:e9:8a:25:91:68:16:d2:9b:55:1d:
54:36:d7:04:c1:ea:8d:70:88:a7:fb:f7:b3:d0:f6:b3:3d:7a:
1b:47:4d:1e:70:de:c6:c5:8a:27:96:b8:a0:d0:22:11:91:1d:
9d:b7:47:99:08:6c:dc:57:a6:ed:19:58:8f:75:e6:ff:20:3e:
d9:9e:c0:6a:bb:09:26:9f:af:92:a3:15:a8:27:e2:45:52:89:
ca:5f:08:d6:4e:e0:31:f6:88:07:2c:c5:2d:57:f6:3f:8a:af:
c8:d2:da:af:90:28:25:86:cf:20:b9:c6:88:45:9b:02:27:3e:
5e:79:95:d2:38:74:61:6c:da:fa:59:76:f6:c6:29:1b:a5:79:
1f:b6:e3:59:7e:fe:88:4b:09:06:ca:80:55:93:58:41:cf:5f:
aa:03:61:2f:8c:77:3b:28:c1:c0:c7:81:13:d0:1c:1f:be:fa:
69:81:45:fd:ab:50:c3:f6:da:7a:35:24:e1:34:c7:82:17:9f:
1a:1a:45:e6:59:58:65:56:7f:8e:ce:ea:e2:41:ba:96:b8:d6:
a3:5c:89:af:37:a6:28:46:78:7f:96:b4:8a:66:60:44:03:0f:
ad:58:d5:91
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICApIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4NUMxMTAvBgNVBAUTKEFDOTEyQ0VGQTc1OEExMTk5QzFCRURFMDZCMTRBOUVB
Mzk4OTc1RjcwHhcNMjUxMDMxMDIxNjI2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjYxMC0wNGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvfCyuejv9YeloVeeiMPEH8ztSSxWJ8diC62VqsYO9BqFXLkSolxvl59hwiyk
TDs3xFrKOjf/47wMCHlV5IU4UEvAScMnCS1wE/+aKIU8FUNJAnPXpQKYRmJUPPSn
4rVriI9wIut0N29D4I2oyu6fXExQi8P0ukjBqr5zL3SgPs0yVE5Unb25vrlI2TFW
sWFOY0z0aOd0hSNgpC+mOaO1kynnQaflUxhObTD69iS4INXmOzeCyLOfBErKvLHG
kIHoshsisdle61I/Fv3hgX2BQe+fvQY2zGPfcwh9X1OlvlW3d1q+R4pxiezMG5th
zcDNLe2P3k6Z3PDPb7+gFk7nFQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFMUaI7yU
++oGCPHyelxlwNZhtIsUMB8GA1UdIwQYMBaAFKyRLO+nWKEZnBvt4GsUqeo5iXX3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjg1Qy8wQTY4QjExODYw
OEQxMUVEQUYyQzY1NjdDNEY5QUUwMi9ySkVzNzZkWW9SbWNHLTNnYXhTcDZqbUpk
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JKRXM3NmRZb1JtY0ctM2dheFNwNmptSmRmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTI4NUMvMEE2OEIxMTg2MDhEMTFFREFGMkM2NTY3QzRGOUFFMDIvMzhFMDJDREMw
NEVFMTFFRTg5OTAwODc2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBZ6zoAwQA36UQMA0GCSqGSIb3DQEBCwUAA4IBAQBiGolCznHXBUTk
HuUbQI2NSfKOOOkKmoGxc+mKJZFoFtKbVR1UNtcEweqNcIin+/ez0PazPXobR00e
cN7GxYonlrig0CIRkR2dt0eZCGzcV6btGViPdeb/ID7ZnsBquwkmn6+SoxWoJ+JF
UonKXwjWTuAx9ogHLMUtV/Y/iq/I0tqvkCglhs8gucaIRZsCJz5eeZXSOHRhbNr6
WXb2xikbpXkftuNZfv6ISwkGyoBVk1hBz1+qA2EvjHc7KMHAx4ET0BwfvvppgUX9
q1DD9tp6NSThNMeCF58aGkXmWVhlVn+OzuriQbqWuNajXImvN6YoRnh/lrSKZmBE
Aw+tWNWR
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:21 2026 by rpki-client