
$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
File: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (raw, json)
Hash identifier: mj1933/3n6toouA33PYerjmiVEAl8MHe43vblZwNmME=
Subject key identifier: 70:08:B5:A3:BE:6A:1F:0F:1E:FD:83:21:74:20:77:EF:A2:31:BD:4C
Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial: 01DC
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:18:58 +0000
ROA not before: Tue 13 Jan 2026 02:22:05 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 150729
IP address blocks: 103.73.184.0/23 maxlen: 23
103.73.184.0/24 maxlen: 24
103.73.185.0/24 maxlen: 24
2001:df1:dac0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 02:54:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Validity
Not Before: Jan 13 02:22:05 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a41292-37aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:1c:26:58:4e:f9:44:71:b8:d9:2b:42:f7:
11:90:2d:a4:fc:ad:c2:13:a5:4b:6a:84:2e:e2:4e:
d3:5e:44:f6:37:62:40:ad:c3:ba:1c:c9:97:7e:5c:
31:b1:fc:8f:b8:9d:44:35:2e:d8:9b:03:d9:2d:5a:
8b:3d:eb:d2:f7:6d:2a:5d:c4:89:6e:0e:1a:ea:ec:
0c:e0:7d:f1:53:82:0b:6a:9b:b8:89:24:f5:ba:b8:
af:8a:a4:07:73:3f:ae:96:19:ac:00:15:76:c5:63:
cf:9e:6a:e9:62:47:80:5d:43:14:34:eb:e4:e8:20:
68:c6:7d:a1:aa:fd:26:d3:88:a8:82:cd:08:24:52:
52:aa:c3:43:b1:d3:2a:2d:f8:b8:5c:b9:69:c9:72:
9d:7f:cb:a7:64:b0:89:fd:cd:dc:f6:77:2c:08:69:
46:9d:57:11:fb:cb:f9:76:db:6c:85:ae:bc:f8:45:
65:ed:7e:14:cd:fa:6d:b5:d0:db:ee:03:7d:f6:76:
77:60:f8:b0:bf:13:20:a8:de:8c:19:14:b0:15:4a:
35:0c:91:ab:d4:4b:a6:2b:75:cb:e7:cc:a0:8c:5d:
ce:ad:30:93:2e:ff:00:33:db:80:ed:f0:24:2b:89:
e4:27:fa:1f:51:f0:49:68:d2:90:2f:1d:bd:70:8b:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:B5:A3:BE:6A:1F:0F:1E:FD:83:21:74:20:77:EF:A2:31:BD:4C
X509v3 Authority Key Identifier:
keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/0CE4B8C6474911EEA995D74FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.73.184.0/23
IPv6:
2001:df1:dac0::/48
Signature Algorithm: sha256WithRSAEncryption
82:35:78:42:ab:c9:ea:a8:fb:44:ea:6e:d1:70:4a:09:4e:bf:
66:97:40:0a:75:4c:95:a4:3d:d1:dd:4e:19:e0:c5:05:7a:df:
b7:b3:6e:02:04:a4:28:25:5f:fa:c4:65:5a:4b:7a:cd:b2:de:
d9:59:04:4f:4b:28:5b:5d:55:b0:44:11:f2:b6:a8:41:7a:a4:
1b:30:a2:ce:42:74:ed:42:74:f7:7c:ea:74:8f:5b:3b:1b:f4:
7a:9a:72:8d:30:1d:47:aa:98:e0:6c:84:99:75:02:1b:19:49:
38:93:f6:34:0c:72:d0:7d:69:16:1d:96:c2:6c:98:23:de:74:
c0:81:ae:2b:a0:5b:1e:74:14:33:b6:d5:49:94:8f:95:10:61:
dc:de:77:ed:1f:3a:b1:58:3c:a7:a2:94:12:b2:2b:64:ec:a2:
98:d5:50:30:de:8d:29:c8:35:51:45:63:12:f8:b8:ff:18:1b:
94:82:fd:5b:65:3f:17:93:34:b5:f6:bd:ad:16:4e:87:45:19:
28:64:bf:ef:78:64:53:d3:11:82:55:1d:85:1f:70:fa:56:4f:
71:ca:c0:94:22:02:2f:46:86:c0:4c:4d:f1:f4:b1:f5:af:63:
6f:e8:45:38:8a:b9:e5:fe:dc:fa:2c:70:59:b3:98:0d:87:54:
fe:03:ee:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:04:48 2026 by rpki-client