
$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa
File: 753CE1E6814411F0AF823466C4F9AE02.roa (raw, json)
Hash identifier: yzIzUBPrHypmilwZ97hmXQLxuQTPjTDzfB9emwk1+Is=
Subject key identifier: 1A:17:57:E0:99:71:B0:E7:59:04:EF:C6:11:8D:FA:75:79:63:20:50
Certificate issuer: /CN=A912CDC5/serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Certificate serial: 070A
Authority key identifier: 1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:56:13 +0000
ROA not before: Thu 30 Oct 2025 22:12:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138572
IP address blocks: 103.133.96.0/22 maxlen: 22
103.133.99.0/24 maxlen: 24
2404:4ac0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1802 (0x70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=1AEB9951B584E1E21BBFC52CCE89094113C6FCA7
Validity
Not Before: Oct 30 22:12:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4538d-0989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:12:d2:89:1e:f2:34:88:4f:7e:04:f6:b5:
0a:d0:a3:dd:9f:bb:5c:bf:9e:d6:4a:73:5b:11:1d:
ff:89:c3:e6:28:e7:15:01:da:1d:46:d0:dd:2f:97:
54:aa:55:31:f3:00:0f:38:e5:3b:82:9c:b8:48:d5:
54:61:74:fd:3c:0c:29:f9:cf:09:7e:5d:18:34:98:
0d:d1:9c:e8:99:ca:cc:0c:2c:59:a2:be:37:b7:c9:
c3:b9:6d:6c:17:80:6b:57:6d:71:8e:2e:af:54:7b:
c6:20:b9:c8:cd:f2:69:c5:3f:45:9a:9a:e4:9b:1f:
4e:9e:ae:35:7a:d5:26:07:cc:6d:cf:63:37:a8:cc:
9e:fe:d0:f0:67:85:45:f8:8f:ea:26:81:b7:0d:ba:
48:b8:b3:ef:9d:1d:9f:d3:3a:2c:0f:04:32:3b:b4:
0b:79:aa:11:fe:1b:0d:8e:92:1f:8e:12:47:ca:6b:
b7:64:93:07:f6:64:e2:6b:33:1a:14:e7:d9:79:57:
a7:0f:5c:ba:59:b1:eb:5b:cc:16:d2:df:1f:98:fb:
a9:aa:86:d6:b1:6a:77:d6:42:6b:88:9c:ae:5b:b6:
f2:12:1b:87:db:b7:8e:a6:f2:e3:33:66:9e:32:93:
42:6f:55:c7:ad:2a:b6:94:f4:bf:a9:7b:2e:54:d4:
86:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:17:57:E0:99:71:B0:E7:59:04:EF:C6:11:8D:FA:75:79:63:20:50
X509v3 Authority Key Identifier:
keyid:1A:EB:99:51:B5:84:E1:E2:1B:BF:C5:2C:CE:89:09:41:13:C6:FC:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/GuuZUbWE4eIbv8UszokJQRPG_Kc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GuuZUbWE4eIbv8UszokJQRPG_Kc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/F3DF588C80B611EBBECBF379C4F9AE02/753CE1E6814411F0AF823466C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.133.96.0/22
IPv6:
2404:4ac0::/32
Signature Algorithm: sha256WithRSAEncryption
79:13:36:98:71:a1:ff:84:df:ee:af:4e:ff:c9:0a:c6:25:69:
80:17:bf:8b:9f:15:a7:63:f8:4e:cc:b1:4f:47:46:1a:cc:27:
db:62:3d:b2:3d:8f:92:a5:a8:ba:2e:82:35:03:a3:0a:86:22:
e1:74:d3:7a:06:6e:e1:6b:34:0b:74:c9:1a:49:fd:c0:06:18:
24:43:c3:b2:a5:69:ae:ea:04:72:90:c7:8d:22:56:f9:36:a8:
ee:a9:17:01:69:e1:04:e5:84:e2:80:38:b8:2a:c4:76:04:2d:
08:7b:72:92:d3:ee:73:52:fc:40:c2:1b:cb:ff:56:36:81:b1:
ee:f5:d9:2b:d9:4e:95:fc:89:4a:b4:46:f2:83:0d:26:5a:b6:
5c:02:a6:a7:a7:63:f3:79:17:ea:b4:81:ab:20:65:1f:4d:99:
41:c1:b2:82:52:2a:9b:da:51:7b:75:cf:25:68:32:46:80:ba:
80:51:aa:65:58:53:7a:c3:1e:fc:e3:66:9e:6d:80:93:57:ed:
bc:34:19:d2:9f:50:d5:d9:8e:67:c3:75:11:40:7d:73:0e:d6:
29:03:d9:10:85:28:b5:cd:fc:14:37:bd:4c:c6:0a:cf:c8:d4:
2c:1c:8d:d4:ff:84:54:15:40:35:6c:1a:e4:f8:16:a5:d9:8b:
7e:72:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:28 2026 by rpki-client