
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/543AF5B283D911E78F2FA066C4F9AE02.roa
File: 543AF5B283D911E78F2FA066C4F9AE02.roa (raw, json)
Hash identifier: VmS/Q3+6coESHGoEMtOrtTGznEUVw0iY/NUTCTx6zGg=
Subject key identifier: 12:37:8F:8F:FD:D5:0F:09:86:06:3F:51:0E:2F:84:57:1C:97:35:BE
Certificate issuer: /CN=A911A0C0/serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Certificate serial: 19B0
Authority key identifier: 16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/543AF5B283D911E78F2FA066C4F9AE02.roa
Signing time: Tue 10 Mar 2026 16:20:10 +0000
ROA not before: Tue 10 Mar 2026 16:20:10 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 17882
IP address blocks: 103.80.210.0/23 maxlen: 24
103.206.152.0/23 maxlen: 24
203.217.138.0/23 maxlen: 23
203.217.138.0/24 maxlen: 24
203.217.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6576 (0x19b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0C0, serialNumber=16064EAB81AE1873A1019D092896F9227A5EEF45
Validity
Not Before: Mar 10 16:20:10 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69b044ba-9810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:98:c7:08:95:56:1d:41:7d:ec:e4:e2:c2:
1e:1b:b7:a5:8f:e7:8c:61:e9:b4:8e:f4:06:62:7d:
c5:f8:43:ad:a0:1b:3d:d2:96:47:62:da:b8:5b:ab:
c7:8c:a8:5c:0a:58:a8:a6:3f:ea:f2:e6:c2:17:87:
6f:0f:aa:89:d0:a0:0f:8d:0d:18:d9:4c:fb:d3:d9:
d9:30:37:58:25:c9:c4:1f:4e:0a:7a:2a:47:22:59:
2f:f9:9e:0a:b0:ae:8c:c1:bc:0e:db:5e:97:bf:5b:
70:3c:d0:42:0e:ad:90:8a:0d:e0:31:79:46:75:98:
9d:7b:3a:da:8a:9e:b6:75:a4:b3:bf:96:d0:84:f3:
a5:4c:18:3b:fe:a7:b9:b7:a3:0d:4d:75:b0:fd:8f:
ed:9a:86:cc:94:51:b1:80:06:4f:c7:32:a0:97:dd:
d7:50:22:e8:a3:3e:af:e3:89:b1:cc:d5:e3:db:70:
bd:d9:46:e3:9e:b3:04:b1:db:b0:f1:9c:f2:c3:eb:
f8:1f:77:8a:9f:60:99:61:9c:8b:4c:1e:34:40:4e:
2b:1a:ee:cf:de:cd:8e:77:56:0a:8c:b1:4a:f7:1a:
3f:45:b8:95:32:9a:0a:55:ff:49:0d:0a:a6:a5:a9:
5a:93:58:2d:92:c2:39:f7:82:b0:bc:3f:c9:35:f4:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:37:8F:8F:FD:D5:0F:09:86:06:3F:51:0E:2F:84:57:1C:97:35:BE
X509v3 Authority Key Identifier:
keyid:16:06:4E:AB:81:AE:18:73:A1:01:9D:09:28:96:F9:22:7A:5E:EF:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/FgZOq4GuGHOhAZ0JKJb5Inpe70U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgZOq4GuGHOhAZ0JKJb5Inpe70U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0C0/0B30467083D811E7B75F2565C4F9AE02/543AF5B283D911E78F2FA066C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.80.210.0/23
103.206.152.0/23
203.217.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ca:83:de:b3:c4:ca:a9:3b:14:18:63:a7:6e:53:35:be:f1:
2c:12:84:17:f2:41:22:14:c9:19:cc:02:4a:23:b1:a7:fd:fb:
1c:cd:ae:70:19:5b:55:8e:1c:81:7f:89:e2:a8:25:25:b1:83:
06:ab:14:9d:7a:f6:2a:60:98:4b:ef:4f:63:64:3e:f1:8b:03:
25:f7:6a:60:38:50:27:31:6e:36:40:b7:2b:09:1f:71:aa:b3:
43:96:13:ac:81:d4:42:7a:0a:09:34:b2:10:f7:d2:98:27:cb:
9e:f4:ca:40:cc:0d:9c:16:8e:a6:b5:4e:63:7f:1a:8a:5b:93:
bc:f0:55:26:36:a4:bf:af:87:91:f7:a1:bf:7a:ee:9b:76:5c:
50:33:71:f1:1a:0d:3d:5d:aa:70:26:2b:29:0c:8a:1b:3a:7e:
4c:e0:4b:0e:e1:8f:54:2e:6f:5f:06:03:07:f9:b1:b6:f4:59:
ff:8c:42:49:78:52:f3:bc:59:fe:e7:44:aa:b0:0e:d6:4e:e5:
de:92:18:09:3c:b2:9a:8b:4c:f4:6c:2a:a2:dd:75:58:8c:4d:
c0:c4:ca:45:29:fa:1b:71:68:11:23:3c:1a:e0:e0:d5:f5:7b:
74:51:4d:e5:30:6b:a0:1c:a2:a3:fc:c7:1b:2d:a4:1c:ba:9e:
c7:be:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:34 2026 by rpki-client