
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa
File: 61F1288A76B311ECABA1A612C4F9AE02.roa (raw, json)
Hash identifier: z7KyT6HnbJ6UMz7BQC748vvaSmuWe8c14BvsShCGtbY=
Subject key identifier: 31:E6:A1:A6:9A:97:D3:BA:02:8A:D5:AA:FE:B9:DD:16:CD:BC:5F:17
Certificate issuer: /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial: 048F
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:21:25 +0000
ROA not before: Tue 18 Nov 2025 23:15:26 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147298
IP address blocks: 103.174.138.0/23 maxlen: 24
2400:12a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167 (0x48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Validity
Not Before: Nov 18 23:15:26 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a44b65-74ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b4:1e:34:e0:a7:77:da:3c:75:5a:be:8d:d9:
84:35:1b:fd:6a:fa:a2:00:82:99:ae:42:16:2a:b8:
82:58:2e:6f:36:cf:ee:d8:10:e2:b8:cd:b4:80:7b:
9e:08:8f:76:e2:69:ad:98:3b:ff:2a:34:75:3b:2b:
ea:3e:78:a4:75:e9:70:f8:b3:63:ac:44:16:ec:ad:
3e:f1:4a:aa:0d:8b:c8:36:2d:53:30:fb:c6:d1:f9:
cf:1b:43:65:ad:d1:94:74:e6:25:4e:10:27:21:e9:
bf:a4:f3:36:17:46:57:ba:a0:b1:35:c6:7d:49:62:
5b:1b:12:9e:7c:78:8a:e7:cd:ed:84:d5:5f:4f:4a:
65:96:6a:cc:a6:6c:d9:a1:5e:27:ba:fc:dd:15:a5:
c5:d3:e7:85:48:fe:f5:3d:5d:4d:89:b3:6b:75:cf:
4c:37:6f:fc:f4:c2:01:da:1d:f3:6e:e6:89:0d:d0:
a0:f4:b7:44:f6:77:1f:ba:6a:c2:10:b5:cc:c1:dc:
09:e3:c6:9e:ea:25:d6:0a:1e:fd:d9:3a:2a:3f:09:
78:8a:fe:95:4e:fd:9c:be:28:af:e6:29:e5:b6:17:
23:7b:e6:9e:e7:15:f6:de:93:7f:25:a0:bc:06:16:
2d:f4:b1:85:2b:3c:91:c9:f9:5d:ed:fe:c5:b7:cb:
74:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E6:A1:A6:9A:97:D3:BA:02:8A:D5:AA:FE:B9:DD:16:CD:BC:5F:17
X509v3 Authority Key Identifier:
keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.174.138.0/23
IPv6:
2400:12a0::/32
Signature Algorithm: sha256WithRSAEncryption
57:08:15:f4:ea:a9:ce:b1:74:03:b1:3e:1c:0e:d4:c9:20:8c:
84:ed:af:96:c0:7d:e8:b5:64:ff:bb:e9:8a:8b:86:4e:6e:b8:
99:2f:80:52:2f:bc:61:f1:64:61:7a:4c:73:76:99:d9:5e:91:
7d:5a:4f:3d:34:6d:b9:ee:1e:ab:c7:ce:bb:cc:db:ce:d7:19:
24:60:37:ab:54:39:d2:e1:ff:3c:59:6d:ac:65:21:ba:86:ec:
02:6c:a8:11:7b:9c:b4:c3:5f:7e:6d:58:9c:7c:37:70:83:bc:
c4:40:88:30:40:42:78:3c:8c:00:fc:22:bd:6c:28:07:c2:28:
b7:43:4a:16:61:3f:a9:1e:5b:a7:2f:f6:ce:d8:73:99:12:bd:
1e:92:73:fb:72:ae:0a:8a:ee:ad:08:d1:ad:28:aa:35:44:ed:
be:4d:09:d1:cc:0e:70:ba:3b:08:93:f4:46:9e:56:c9:e8:4a:
37:ba:17:1f:14:25:8a:f9:21:5a:bc:af:88:1c:54:b4:da:db:
2b:24:9f:5c:98:39:00:99:e7:4c:d8:54:48:fd:ed:f9:93:14:
82:1b:b6:48:74:a8:42:51:99:f8:dd:6a:f1:95:f1:12:d7:3a:
31:99:5d:15:1c:d4:4d:c2:11:47:38:29:f5:70:76:76:71:60:
38:d9:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:09 2026 by rpki-client