
$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/73F5DB88BC9C11EB9AC8E073C4F9AE02.roa
File: 73F5DB88BC9C11EB9AC8E073C4F9AE02.roa (raw, json)
Hash identifier: LkWBUiZRF9C2VJ1E3RZPIAtHdVr7r2jvAKoSLz3FinE=
Subject key identifier: 81:A0:36:06:BC:ED:20:A4:82:FE:AF:4A:A7:BF:C5:E6:FC:D5:8B:CD
Certificate issuer: /CN=A912EFA6/serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Certificate serial: 0663
Authority key identifier: 39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/73F5DB88BC9C11EB9AC8E073C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:50:06 +0000
ROA not before: Thu 26 Jun 2025 22:52:34 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132220
IP address blocks: 103.219.148.0/22 maxlen: 22
103.219.148.0/24 maxlen: 24
103.219.149.0/24 maxlen: 24
103.219.150.0/24 maxlen: 24
103.219.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1635 (0x663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912EFA6, serialNumber=3958C78EDB2CBDA46B66A67EB934AA7BD3C3865E
Validity
Not Before: Jun 26 22:52:34 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a40bcd-0e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:0b:91:00:36:bf:a3:d9:d5:30:34:f2:90:
25:c1:ca:ea:8f:7b:92:08:5f:0d:0e:00:54:89:33:
c5:32:85:79:29:fd:85:6f:fd:53:b8:92:48:79:8f:
17:29:4f:7a:49:16:8f:db:7f:6d:62:0e:d5:0b:34:
64:8a:8b:ba:20:d3:1f:39:de:79:1c:eb:41:ea:8a:
ef:82:62:51:e8:06:94:9d:bd:4d:4b:cc:0d:e4:0d:
f6:37:2f:83:ca:d1:0a:c4:f0:6b:a9:36:ac:f0:e0:
df:d1:9d:85:b0:82:99:70:6d:ee:d0:d8:8e:2d:d8:
ff:00:58:a9:40:06:44:4a:4b:26:46:c0:ce:f2:d1:
8f:4c:61:5b:b5:d6:ff:ee:80:db:0f:4a:4b:67:d0:
06:3b:4b:f8:c7:63:65:d3:65:d2:c0:4b:d9:cf:9d:
ad:16:06:cc:59:4f:7e:11:0a:76:76:b3:d1:2c:07:
7b:a9:4f:8d:3f:aa:35:b9:68:e2:7f:9e:cc:2e:1f:
44:a5:77:52:20:22:ee:c2:06:c8:a1:34:75:9a:1f:
9d:30:5e:b8:66:7f:b4:be:aa:0e:d8:b3:f3:d0:2a:
17:a2:58:40:6a:22:f0:a5:89:bd:05:00:3a:72:8f:
6a:cd:ee:41:63:5f:21:44:58:bb:e7:69:9e:34:a7:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A0:36:06:BC:ED:20:A4:82:FE:AF:4A:A7:BF:C5:E6:FC:D5:8B:CD
X509v3 Authority Key Identifier:
keyid:39:58:C7:8E:DB:2C:BD:A4:6B:66:A6:7E:B9:34:AA:7B:D3:C3:86:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/OVjHjtssvaRrZqZ-uTSqe9PDhl4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVjHjtssvaRrZqZ-uTSqe9PDhl4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFA6/0616E842BC9B11EB96F35F6BC4F9AE02/73F5DB88BC9C11EB9AC8E073C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.219.148.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:c6:75:60:3d:0d:6c:cc:61:74:a8:81:27:b5:ce:da:e8:00:
83:3e:76:6c:8c:ad:97:b0:14:6a:6f:5a:19:db:fa:f0:68:58:
ee:eb:ea:32:7e:e4:97:73:ac:bd:57:37:dc:06:4a:a7:41:10:
91:5f:d6:59:1c:e0:15:7c:36:92:70:6b:c9:4a:34:96:26:ea:
fd:b5:51:15:27:1a:44:97:85:14:82:8b:05:9d:d4:ce:3b:6d:
80:9c:36:a4:18:b3:89:18:0e:27:06:07:49:e3:bc:0a:6f:3e:
e8:1e:65:32:12:04:9f:3c:21:ee:20:7f:66:6b:16:e6:26:83:
59:24:c2:72:69:85:0b:56:29:f6:89:fb:73:af:7c:34:04:2a:
39:15:45:55:e9:1f:58:e3:67:be:15:d4:89:c0:2a:a7:58:e4:
b2:36:84:e1:cb:cc:30:c4:67:f8:fd:00:74:e2:78:66:df:94:
88:08:47:32:75:10:d0:81:b6:d4:72:a3:c3:f1:2a:b2:da:d1:
c5:a0:e3:c1:05:4b:d4:01:a3:61:a0:f6:16:90:f0:db:4a:6f:
18:3f:a8:af:13:bf:2d:9b:21:f8:a7:1c:8a:a5:4f:ed:68:e7:
41:6e:32:92:79:22:d5:62:00:e7:29:14:0b:8a:85:1b:56:66:
5e:53:38:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:17:22 2026 by rpki-client