
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
File: ABC4A34EAFB511F0815FDC37C4F9AE02.roa (raw, json)
Hash identifier: sTzRTjegS6pXcKJix4GmDLpe4+EUgN+B0F9yGltkFT4=
Subject key identifier: 5F:25:D3:42:15:B3:39:B1:AE:E5:2F:15:F1:5B:59:EF:61:B2:35:9F
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 08D8
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:43:16 +0000
ROA not before: Thu 23 Oct 2025 02:12:05 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 40605
IP address blocks: 43.225.38.0/24 maxlen: 24
61.4.111.0/24 maxlen: 24
103.253.110.0/24 maxlen: 24
103.253.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Oct 23 02:12:05 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a488c4-7074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:33:b6:73:66:8c:6b:40:41:fc:ec:2a:3c:
49:42:d9:36:7b:34:30:5a:ea:01:3e:e0:b8:56:91:
ca:26:6a:bf:9a:3a:19:ad:a7:c6:7b:5c:60:7d:80:
02:9c:80:8d:2b:56:e8:20:7c:ee:6d:32:12:d4:ed:
f9:0c:2e:bb:41:81:67:eb:4f:e7:ed:b3:ea:af:cf:
b8:76:d2:ca:69:7b:86:0b:78:3b:ee:60:ca:60:26:
50:3e:5e:57:c1:b7:c3:02:65:c3:14:5d:18:ea:e0:
14:a8:1a:92:5d:14:34:08:3d:fa:bb:8e:a7:3a:a8:
a6:7c:b8:fc:3b:07:22:c1:3a:92:1f:7c:32:5a:e4:
e2:da:ac:fd:4f:fc:03:af:e8:17:b3:f4:88:35:46:
30:de:c7:ba:6b:bd:b4:a3:49:b0:db:8c:96:0b:67:
55:ab:39:3a:ef:4b:14:32:8e:7d:d5:64:45:a0:60:
da:39:a3:d9:3c:80:ee:bd:7a:9b:0f:e5:95:2a:eb:
47:85:21:19:3b:f7:13:7c:94:2e:0b:af:9f:d2:c0:
59:a9:f0:f8:4a:3c:e3:41:ea:37:97:01:cf:1c:de:
1c:18:ed:ad:a5:2d:fc:14:72:86:0f:37:9a:b8:43:
7a:ce:5a:2f:e1:f5:17:e8:b6:85:d4:e0:f8:8b:9e:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:D3:42:15:B3:39:B1:AE:E5:2F:15:F1:5B:59:EF:61:B2:35:9F
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/ABC4A34EAFB511F0815FDC37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.38.0/24
61.4.111.0/24
103.253.110.0/23
Signature Algorithm: sha256WithRSAEncryption
12:02:35:32:62:13:d2:cd:b7:97:c7:6d:c8:72:72:34:11:64:
0f:3a:c1:bd:8f:00:92:fb:d0:49:cd:32:41:eb:01:10:6c:32:
85:f5:6b:da:9e:85:4a:2a:89:c6:33:0f:bb:08:5a:12:6f:5c:
d3:45:69:bb:6d:9e:50:a6:02:9a:aa:91:d6:98:39:24:ef:97:
ad:f8:f0:a1:fe:94:d6:cf:57:4a:6e:eb:99:78:a1:63:54:d7:
e6:98:48:b3:0a:6c:31:62:29:a3:35:84:aa:f1:f7:48:17:fc:
a3:0b:c7:bb:99:e3:1a:c4:94:d5:87:d7:2f:cf:2e:0a:dc:32:
10:0a:50:e9:47:90:9a:75:4b:5f:7c:7e:27:1e:df:c2:55:9d:
d9:3c:fa:e5:42:b9:be:eb:99:bb:ce:2e:62:e7:e0:55:8c:bb:
d0:a3:18:19:84:f2:2e:dd:c0:92:de:9a:ad:6f:86:b0:2c:c3:
9e:cc:3d:d4:47:fc:25:01:84:de:fd:f8:aa:59:2e:1c:70:5f:
4b:d2:cb:1d:84:3e:f5:e3:35:82:a7:38:37:60:f3:38:a8:06:
99:3e:70:a1:00:29:ab:11:17:ee:b2:a7:ad:11:49:4b:f8:94:
63:0f:3e:fb:7d:83:bf:04:b2:b7:e5:c7:93:29:01:50:11:ca:
5f:fe:7f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:00 2026 by rpki-client