
$ rpki-client -vvf rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/2A44CEFE311111E98C69B181C4F9AE02.roa
File: 2A44CEFE311111E98C69B181C4F9AE02.roa (raw, json)
Hash identifier: SI73iX7YVYH0Z3qx2ioj4CoqGRWdJrbUA/hXufqjWIY=
Subject key identifier: 51:7D:F1:B3:43:93:11:E8:B0:E2:72:B4:59:82:F9:D8:8C:98:06:9C
Certificate issuer: /CN=A912216A/serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Certificate serial: 1114
Authority key identifier: 00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/2A44CEFE311111E98C69B181C4F9AE02.roa
Signing time: Mon 02 Mar 2026 17:21:29 +0000
ROA not before: Mon 02 Mar 2026 17:21:29 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 138616
IP address blocks: 103.136.168.0/24 maxlen: 24
2001:df7:c900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 17:12:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4372 (0x1114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912216A, serialNumber=00961B8F63ADE9D19F3ACF42833AC5D9C9C7278F
Validity
Not Before: Mar 2 17:21:29 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a5c719-811f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:82:2d:e2:df:59:be:25:c6:39:c4:0c:81:
d6:13:48:b3:29:a5:e5:58:e5:ec:83:a8:72:a4:1c:
f0:ef:0b:7e:8d:0c:76:e5:57:94:41:0d:9c:88:da:
ce:fd:10:8d:56:18:63:48:0e:b8:6d:90:71:4c:c8:
cd:36:96:b7:e3:10:a6:01:46:cf:cf:7a:aa:40:fb:
c0:09:54:bc:34:74:8f:4d:dd:b3:f8:ca:ac:0f:e0:
74:d1:23:1e:f4:87:6e:f8:12:16:ef:f7:8e:8d:71:
70:e0:cd:b7:59:33:03:c9:04:d1:e8:9a:7b:8a:45:
59:99:a3:6a:ea:d4:91:40:a2:66:39:6d:b2:da:46:
b4:0a:09:56:87:cf:df:10:1e:08:3e:88:18:d7:22:
9f:9b:d0:a3:8b:2d:dc:77:a2:7b:fe:bb:02:ab:49:
c7:dc:4b:38:a6:ef:50:31:69:07:5d:ac:1d:91:68:
fe:8f:1c:a0:c0:de:d0:1f:0f:66:d0:54:90:7a:9a:
da:71:2e:fe:b6:2e:21:38:47:74:58:7f:61:e2:bd:
83:dd:d7:cf:83:8e:da:7c:30:d9:97:4a:c6:c4:f4:
22:95:63:80:37:17:39:13:fe:9f:5a:45:02:b0:9d:
53:d0:4d:a4:15:90:ea:ca:6f:3d:3a:f8:20:01:f6:
2e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:F1:B3:43:93:11:E8:B0:E2:72:B4:59:82:F9:D8:8C:98:06:9C
X509v3 Authority Key Identifier:
keyid:00:96:1B:8F:63:AD:E9:D1:9F:3A:CF:42:83:3A:C5:D9:C9:C7:27:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AJYbj2Ot6dGfOs9CgzrF2cnHJ48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912216A/FC51C9E8310B11E9BB82FE72C4F9AE02/2A44CEFE311111E98C69B181C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.136.168.0/24
IPv6:
2001:df7:c900::/48
Signature Algorithm: sha256WithRSAEncryption
54:06:56:5e:77:46:0e:31:a8:0b:a5:6d:74:33:d6:29:25:06:
fd:09:4f:12:2d:5e:98:35:a1:12:dc:f3:36:9a:72:5b:c9:36:
ff:a1:ac:3d:b9:ee:c0:94:10:8a:0a:48:db:68:9f:4a:4d:7c:
11:5b:7c:20:69:87:f8:d9:c9:55:b0:a3:17:c0:80:b0:35:c9:
36:f9:36:3d:d5:fb:f0:19:a2:e9:b8:13:77:39:25:39:3b:36:
e5:c1:ac:da:01:42:b6:b6:09:1e:6f:59:57:e8:db:67:b8:3c:
f3:7f:8f:51:20:0e:ed:37:63:e0:48:dd:d8:4c:24:8c:df:d6:
cc:33:9f:47:4f:2b:79:94:df:b0:84:83:7f:69:7c:4c:99:16:
47:d1:61:0c:dc:1e:3c:11:53:d6:6a:ab:64:f2:24:cb:ea:b9:
85:5a:b0:f2:7b:f7:f9:78:f4:3f:ed:f5:68:1f:ae:9c:ea:6b:
d4:4c:93:d1:e7:2d:ea:82:dc:6c:75:fd:71:46:87:79:5f:f7:
39:3c:e9:b9:f1:f5:21:bd:c7:6f:27:87:93:6e:5c:49:6b:ce:
7b:04:6c:2b:fa:3c:0b:37:7e:2a:be:6f:52:1b:94:2a:0d:d3:
18:cd:fc:c1:ad:69:e1:8d:3f:47:be:2b:69:6c:ef:73:20:dd:
2c:dd:86:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:29 2026 by rpki-client