
$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/E54ED53A8D7311F0B0F9AE62C4F9AE02.roa
File: E54ED53A8D7311F0B0F9AE62C4F9AE02.roa (raw, json)
Hash identifier: enRJxihzGDKlwH32sa2QER4m7NIQqKEvGoMLqlIsbII=
Subject key identifier: EC:26:A5:EC:8C:7F:49:61:E3:22:B3:89:1D:1C:06:E9:3E:48:55:E1
Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial: 08B9
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/E54ED53A8D7311F0B0F9AE62C4F9AE02.roa
Signing time: Mon 02 Mar 2026 05:17:50 +0000
ROA not before: Tue 30 Sep 2025 21:22:58 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 141154
IP address blocks: 103.155.98.0/23 maxlen: 23
103.155.98.0/24 maxlen: 24
103.155.99.0/24 maxlen: 24
2001:df4:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:23:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Validity
Not Before: Sep 30 21:22:58 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a51d7e-690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:e2:fb:ab:68:4f:be:5b:ed:39:9a:00:17:
2d:9b:2e:b9:c9:1c:e3:71:dd:db:80:30:af:d0:f9:
f7:cb:30:fd:c1:2d:44:23:f7:43:73:ee:24:c2:92:
fb:e9:45:ea:5d:96:b5:88:b5:a2:a4:e9:b8:cf:b6:
73:cd:e6:d1:17:76:49:fb:cf:f4:c6:50:d6:25:7d:
23:8d:ea:63:e8:a4:5a:4e:60:0e:c7:9e:14:5f:c2:
5e:fc:1d:17:b2:68:45:46:0d:37:4b:de:da:ae:d0:
53:27:4d:c3:d9:b7:4c:ac:17:2c:e2:c9:cd:25:52:
23:41:a2:19:22:8a:b4:ca:41:db:7e:15:19:b8:ca:
69:da:19:87:a3:fd:9f:3b:a7:28:a7:3b:9d:cb:a4:
06:f6:50:45:c6:06:08:cd:ec:21:f2:b2:9b:2e:d3:
2a:c7:20:a7:1a:68:51:37:7d:61:79:4f:a8:bf:54:
3f:49:08:f9:4f:9e:47:12:e6:35:21:3f:2b:a8:37:
49:22:1a:72:4a:60:75:24:af:13:0b:2a:b0:96:3a:
41:73:01:04:0b:f8:6f:81:fd:31:22:d2:22:4c:45:
b1:ca:6a:e7:39:df:1b:16:80:a8:fd:72:bb:94:cd:
dc:1f:a3:d8:a7:41:98:e9:af:d7:0c:75:4c:4f:97:
9f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:A5:EC:8C:7F:49:61:E3:22:B3:89:1D:1C:06:E9:3E:48:55:E1
X509v3 Authority Key Identifier:
keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/E54ED53A8D7311F0B0F9AE62C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.155.98.0/23
IPv6:
2001:df4:c080::/48
Signature Algorithm: sha256WithRSAEncryption
64:e7:7c:bb:f0:59:bb:18:62:08:f4:57:ef:36:9c:18:02:88:
b9:04:08:57:48:0d:78:48:47:7a:44:49:59:4c:03:4a:f1:cc:
83:cb:23:7b:c9:7b:34:97:0f:2c:81:35:74:ac:0f:58:b6:31:
25:9c:54:4e:a5:90:fe:41:98:d6:71:3e:fd:ba:1f:4d:9d:17:
d9:72:6e:62:fb:89:a0:dd:04:11:1c:d4:80:57:39:e9:2c:77:
12:5e:55:f3:19:ac:80:11:99:7f:e6:06:44:56:2c:67:1e:47:
bf:7e:03:fa:49:0b:5e:a8:2a:23:b0:dc:82:d5:e0:46:90:e9:
10:23:96:52:c2:a3:4e:d2:fe:d1:fb:41:21:d5:9a:10:4c:4e:
bd:c8:3b:75:ce:6d:d8:50:56:c8:8b:21:e7:37:f8:64:7e:58:
4e:62:47:6f:c0:d6:2d:46:cf:f9:fa:17:d0:2a:77:ed:5c:e7:
df:bf:51:a3:ca:af:c6:32:f4:0d:41:d7:c7:c1:1b:1b:0b:df:
2c:7f:12:f4:3c:15:4c:d9:f6:44:9a:39:7a:a7:3e:fb:cc:2a:
56:2a:51:b6:39:ff:2c:6c:10:a0:6d:ae:a7:a6:99:4b:f8:b6:
d9:14:e4:43:77:7f:a3:b0:2e:d4:34:90:9c:04:65:8d:7b:df:
d3:54:56:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:20 2026 by rpki-client