
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/680F0EA2284411EC8826F928C4F9AE02.roa
File: 680F0EA2284411EC8826F928C4F9AE02.roa (raw, json)
Hash identifier: iC5os5vddQmmGDYKqQ64QyRuxbvGKmCbZ5ebEZb5rTI=
Subject key identifier: 23:94:E7:42:BA:5E:D5:6F:B7:3D:9F:3F:1C:EB:F6:5F:55:BB:54:33
Certificate issuer: /CN=A912A3BE/serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Certificate serial: 05AD
Authority key identifier: DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/680F0EA2284411EC8826F928C4F9AE02.roa
Signing time: Fri 31 Jul 2026 00:44:22 +0000
ROA not before: Fri 31 Jul 2026 00:44:22 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 146948
IP address blocks: 103.171.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:46:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A3BE, serialNumber=DE78F43D57C0BE722247432D6BAAF7A27C1A5B9A
Validity
Not Before: Jul 31 00:44:22 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a6befe6-7f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:bb:03:7f:0e:68:54:06:c2:22:74:a5:b6:
d5:85:35:09:2a:8e:23:5b:43:78:9a:e0:81:77:41:
93:98:df:ea:31:fd:92:50:70:80:c7:70:ea:51:04:
4f:3b:52:c4:a4:95:1b:c9:de:57:c5:44:d6:f9:c2:
04:0f:56:ba:08:60:cb:07:64:14:ea:53:be:3f:11:
d1:fe:c8:66:5b:e3:7d:ba:28:20:cd:5b:e8:9e:50:
74:ec:3b:66:7e:a1:02:dc:30:64:cc:ad:34:73:46:
5f:02:64:8c:f7:eb:eb:fa:99:3b:20:51:0e:75:b2:
05:ea:80:e2:09:50:93:5d:83:ee:0b:d4:6e:a2:3b:
c7:0d:b1:32:67:0a:12:d5:86:6a:af:cd:f6:d7:0c:
1c:8e:0c:da:f3:cd:1b:22:4b:a7:83:41:f4:e6:12:
b6:0f:ee:5b:22:49:ea:f9:1d:bd:d3:1d:21:82:4a:
f6:fe:91:1f:cc:bc:28:36:96:a5:33:c6:e1:fb:1c:
7d:68:f1:4a:c6:3e:c1:e5:11:26:ac:81:c0:37:22:
9a:34:c8:13:26:b2:c4:0f:90:d0:e2:5d:24:09:76:
e5:7a:14:1c:93:88:ee:e4:03:51:dc:65:dd:64:77:
02:16:a6:b2:ef:26:80:13:d3:7f:5b:b9:f8:cb:90:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:94:E7:42:BA:5E:D5:6F:B7:3D:9F:3F:1C:EB:F6:5F:55:BB:54:33
X509v3 Authority Key Identifier:
keyid:DE:78:F4:3D:57:C0:BE:72:22:47:43:2D:6B:AA:F7:A2:7C:1A:5B:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/3nj0PVfAvnIiR0Mta6r3onwaW5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3nj0PVfAvnIiR0Mta6r3onwaW5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/2E43C3EC284011ECBE216F40C4F9AE02/680F0EA2284411EC8826F928C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.171.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3d:2a:69:33:98:14:dc:e2:42:d1:8d:43:bb:3d:f3:8a:64:
8b:eb:0a:de:21:74:e1:7c:86:3c:05:28:79:44:b0:17:d5:9e:
a4:c8:9a:c8:c0:89:95:05:b2:74:e5:dd:bf:2f:cf:f2:74:32:
9f:85:63:78:2f:a6:b6:22:94:49:c9:50:3b:64:33:45:4f:0b:
0b:41:c5:10:54:d5:a1:a3:ad:79:03:73:36:29:a3:44:fb:7b:
29:31:50:5f:81:40:ee:a8:e7:bc:c5:c5:f1:bb:7f:20:4c:e2:
71:4f:65:c9:58:35:89:c5:a4:ee:42:9c:68:37:66:00:37:c4:
a5:62:a4:ca:c3:c8:6a:82:a6:09:ca:d4:9b:6d:b9:f3:4c:2d:
ba:d2:cc:ba:23:e3:36:80:76:03:95:44:ad:1a:69:12:e8:2b:
2e:c2:b0:e8:f5:dc:43:6a:5a:44:9f:7d:c7:6e:26:17:65:52:
99:38:cf:eb:8f:26:1b:90:6a:0e:93:f4:bd:63:8f:5f:0f:66:
a5:8e:22:4e:e4:9f:cd:7e:2a:72:44:34:44:82:41:2c:80:fd:
6b:e5:8e:d1:0b:55:d8:ec:e1:b4:9c:5c:eb:4f:ea:af:ea:fd:
97:12:cc:af:de:a8:5d:51:49:36:b0:45:e6:41:64:2f:c0:7f:
c8:24:8f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:06:06 2026 by rpki-client