
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/48BB49E8763A11EFA077F11CC4F9AE02.roa
File: 48BB49E8763A11EFA077F11CC4F9AE02.roa (raw, json)
Hash identifier: SC9hgUP5qkpQyGiq0/C+uNw+SG+aKNsI2Or0GyWgnHo=
Subject key identifier: 62:C1:18:16:5C:B2:87:78:1D:5C:30:E2:12:68:08:0F:9D:AB:60:EF
Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial: 1F83
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/48BB49E8763A11EFA077F11CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:19:11 +0000
ROA not before: Thu 06 Nov 2025 15:53:56 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 209242
IP address blocks: 114.129.43.0/24 maxlen: 24
2400:c760:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8067 (0x1f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Validity
Not Before: Nov 6 15:53:56 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a4750f-45df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:72:9e:36:05:94:12:17:f7:ce:58:24:d0:08:
b6:b3:bc:5d:19:d9:fb:39:c9:18:d0:53:bf:39:19:
6a:73:da:da:41:f3:f4:ff:c8:46:79:80:68:89:5e:
fe:98:d2:25:a8:41:bd:80:c9:0c:bc:b8:35:51:c5:
e6:c0:ea:fe:72:82:0d:70:88:15:66:06:4b:d9:01:
a6:e0:f6:29:53:7a:36:d8:85:d8:13:2e:c0:d8:2e:
ae:d9:e0:25:f2:4a:53:a6:fb:66:f2:d7:7a:5f:e9:
91:45:de:4c:45:15:2b:54:b4:3f:7d:7c:f3:6f:e2:
1c:21:38:33:47:03:10:b3:c8:78:c4:62:21:5f:50:
ce:73:0b:59:18:e2:06:9f:6c:0e:f0:d2:f4:2b:cd:
07:59:cc:31:91:10:1d:b9:4c:a8:77:24:b2:c6:da:
4e:d7:62:ce:8c:2a:59:cb:82:01:8c:c6:2a:a7:0c:
47:39:04:98:15:e9:94:bd:4a:08:1a:c2:9e:8f:3e:
5f:2f:84:ac:70:78:0d:21:cd:66:4a:0b:53:4c:5f:
79:3e:5a:88:a8:74:90:e7:d8:b9:20:ba:e1:ad:35:
0a:7a:b6:d2:7f:2b:05:44:fa:d7:3c:dd:7a:d4:31:
49:51:f3:38:f0:9b:f2:93:f0:f6:d3:26:d5:84:49:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:18:16:5C:B2:87:78:1D:5C:30:E2:12:68:08:0F:9D:AB:60:EF
X509v3 Authority Key Identifier:
keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/48BB49E8763A11EFA077F11CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
114.129.43.0/24
IPv6:
2400:c760:a::/48
Signature Algorithm: sha256WithRSAEncryption
0f:a5:52:e7:9b:4f:ef:fb:51:95:3b:f8:ed:3b:3c:91:82:0a:
90:12:a9:1d:2a:5e:80:51:96:eb:5e:1d:99:af:00:6b:c5:5e:
22:04:84:78:d7:f2:9f:82:41:84:da:32:97:0f:16:ab:b0:ce:
33:25:03:5a:c2:92:bd:73:39:16:0b:9f:ea:8e:4c:51:47:b3:
25:64:af:c3:7f:6e:43:48:ca:32:c2:28:c8:47:f1:aa:00:d7:
d4:49:97:75:78:de:05:74:71:28:65:a4:11:32:51:0c:6b:27:
25:7a:68:d2:87:42:1a:2e:0d:ad:9e:22:3a:38:bd:57:29:78:
6e:2a:a2:f4:5d:15:32:bb:b7:d7:a4:e6:b4:d8:cf:0d:63:cf:
1e:17:e4:5b:ae:03:6d:89:9e:2a:45:48:db:db:88:2c:eb:2c:
98:29:3f:93:4f:12:12:b8:10:56:42:c2:d9:e0:a1:88:67:a5:
7c:8f:24:19:51:aa:ab:f2:16:78:63:b5:47:d9:20:8a:bf:4a:
3a:26:b1:02:11:1b:73:50:86:95:ac:61:aa:7d:68:77:45:a1:
7f:02:41:15:c0:9b:02:62:f1:4e:69:31:82:12:2a:05:50:39:
bb:4e:4e:19:7e:a4:ae:ee:67:5e:3b:be:a2:c8:84:25:83:42:
a9:ba:69:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:47 2026 by rpki-client