
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/680F0EA2284411EC8826F928C4F9AE02.roa
File: 680F0EA2284411EC8826F928C4F9AE02.roa (raw, json)
Hash identifier: oiLr2Ru1DYuL64/uOeAPIHRwlt1uV7B6bu1q+HXMs94=
Subject key identifier: 44:B4:BF:F0:46:F0:D1:D1:20:FA:36:C9:71:C8:AA:84:1C:BD:98:C0
Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Certificate serial: 055D
Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/680F0EA2284411EC8826F928C4F9AE02.roa
Signing time: Mon 02 Mar 2026 12:29:05 +0000
ROA not before: Thu 25 Sep 2025 00:16:23 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 146948
IP address blocks: 103.171.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373 (0x55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Validity
Not Before: Sep 25 00:16:23 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a58291-6825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:ba:71:72:05:30:86:3d:d4:18:38:80:cc:
18:c6:20:9e:98:7e:7e:0e:2c:f1:fc:5f:8c:90:e2:
f6:fe:2a:02:fe:65:46:5c:ed:e2:c6:83:7f:3a:07:
5b:64:c8:7d:13:8e:02:79:74:fb:e1:eb:80:65:d2:
37:e6:f6:d6:f9:ca:88:7a:8b:7a:6d:6f:3f:21:a4:
40:85:76:76:59:ac:ad:2d:93:40:8f:ae:8b:63:70:
c6:1c:36:f2:a9:dc:40:94:d3:0e:35:9a:83:b3:08:
1f:3e:52:db:c0:c8:3d:20:17:6c:fe:f7:5e:af:fd:
c9:f2:c6:0a:42:c6:bd:90:33:76:6c:fa:43:81:f0:
15:de:30:85:85:5a:5c:e8:ae:c0:17:f2:65:9d:63:
61:fc:71:7d:54:89:91:7b:c4:59:de:a6:02:b9:99:
6d:e3:9c:43:b3:cc:04:9f:c4:b6:7f:4a:81:b5:de:
87:08:20:20:c6:27:4c:e3:43:70:33:10:cf:13:f9:
3d:4d:d4:f9:9c:ef:06:be:aa:ca:91:43:85:51:c6:
3a:9e:7b:29:45:54:49:ec:77:2a:0c:2f:e6:95:81:
df:81:6c:fb:96:58:be:ee:96:a7:a5:59:db:0c:93:
e3:3c:fa:17:c8:49:7c:6f:41:91:40:89:ab:aa:b3:
98:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:BF:F0:46:F0:D1:D1:20:FA:36:C9:71:C8:AA:84:1C:BD:98:C0
X509v3 Authority Key Identifier:
keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/680F0EA2284411EC8826F928C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.249.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d8:8a:67:cb:3f:14:a8:fa:58:33:3f:ff:6c:ec:d1:63:d0:
b0:1a:52:cf:06:a7:14:17:4e:d6:89:12:52:7e:5b:19:f4:e2:
3b:47:4b:5d:f4:38:8d:5d:b6:3e:ec:eb:ef:02:16:48:41:c5:
cc:e7:10:e5:96:e9:00:b3:89:29:d9:62:ef:93:c3:cf:b1:52:
46:71:92:dc:86:45:db:99:d8:02:b5:da:78:7e:b2:66:b0:e8:
0c:85:f6:74:2d:38:12:1b:c0:d4:fe:58:8d:2c:4d:81:9b:8f:
4d:6f:e4:26:9a:93:7e:94:0a:77:15:2e:64:fc:82:7d:03:fc:
b3:a7:a2:31:d3:e0:34:19:9d:e4:6a:ea:8b:1e:cc:d4:90:b3:
87:96:39:1f:f4:53:d2:9d:d2:c2:59:ff:7c:47:3a:ab:a4:28:
31:76:c8:ca:71:67:82:08:48:c4:20:e7:c2:76:c0:70:25:44:
d0:04:7b:68:70:db:44:42:a4:f1:46:35:12:7d:2a:c4:04:d3:
7f:76:11:4b:ac:49:51:fe:aa:74:a9:18:cb:76:e8:12:36:9b:
c5:89:a9:da:58:f2:d6:8b:40:13:ba:34:c3:04:9b:b7:32:8a:
d7:ba:fe:0c:7d:c3:4b:8a:d8:62:3c:49:23:81:ff:44:18:fa:
59:26:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:30:11 2026 by rpki-client