
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/ED7C0BCC287211EFA1483A2FC4F9AE02.roa
File: ED7C0BCC287211EFA1483A2FC4F9AE02.roa (raw, json)
Hash identifier: y+oCb7jxR3D55AFcUV4IpcRd8DG8LNASO4m3mEiRdoA=
Subject key identifier: 8E:52:C6:47:CA:67:B6:AC:E3:B7:79:F6:8F:AB:E9:18:0B:59:7B:E0
Certificate issuer: /CN=A9140BED/serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Certificate serial: 0159
Authority key identifier: 41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/ED7C0BCC287211EFA1483A2FC4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:21:35 +0000
ROA not before: Mon 29 Sep 2025 06:03:06 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151990
IP address blocks: 103.70.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140BED, serialNumber=419F27A4CFECF461DB82F6F906764FB6D65F23CF
Validity
Not Before: Sep 29 06:03:06 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a59cef-1f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:06:f9:15:c3:ce:ca:e5:84:51:50:fe:ca:
51:a5:bd:e8:7b:39:04:80:f6:e7:9d:49:5a:a6:b9:
49:7c:82:2a:93:f9:05:af:96:41:59:e4:5d:13:41:
a7:36:ef:23:93:61:10:ad:02:a5:75:e5:3f:3e:b6:
61:44:e9:0a:75:7f:4e:3c:9b:1f:fa:25:a7:82:f8:
16:01:55:c1:10:ca:b2:b8:66:52:0e:a4:f1:d8:85:
0e:a8:d2:e4:5e:61:50:5a:eb:7c:cd:39:73:5f:60:
fc:3f:8b:c0:d3:b0:50:d1:06:64:e1:fc:41:3d:1a:
ac:1d:ef:de:ef:59:d3:e0:cb:88:03:44:e6:53:1c:
77:13:a0:6b:31:a9:87:9b:ae:6e:47:c8:9a:58:a1:
26:a4:f2:86:ad:20:ba:a4:5c:2f:35:45:fd:ce:0d:
92:f6:c8:dc:3f:be:7e:0c:60:b6:dd:43:86:fc:98:
7f:55:76:6b:d8:17:fa:ff:ff:7b:55:8d:04:03:b4:
0a:a9:6f:9b:9f:e2:b7:7c:13:82:72:85:85:07:1d:
d9:6b:69:39:a0:47:ae:f3:94:c6:ff:b7:f1:7a:e6:
be:f5:d8:7e:0c:df:ed:15:02:48:a5:16:00:e5:b9:
07:0f:52:58:60:d0:8d:20:3a:0a:41:c2:ac:30:32:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:52:C6:47:CA:67:B6:AC:E3:B7:79:F6:8F:AB:E9:18:0B:59:7B:E0
X509v3 Authority Key Identifier:
keyid:41:9F:27:A4:CF:EC:F4:61:DB:82:F6:F9:06:76:4F:B6:D6:5F:23:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/QZ8npM_s9GHbgvb5BnZPttZfI88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZ8npM_s9GHbgvb5BnZPttZfI88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BED/08E0E0661F3811EFB059B665C4F9AE02/ED7C0BCC287211EFA1483A2FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.70.112.0/23
Signature Algorithm: sha256WithRSAEncryption
f8:c9:0b:c5:73:fd:d8:c8:f8:b1:8c:ef:4c:ef:eb:5c:eb:01:
af:aa:76:16:58:76:d7:55:5c:fe:30:59:d7:78:7f:f9:90:6a:
eb:a7:21:cc:ca:7a:52:e8:7c:dd:6b:55:36:42:71:83:aa:e9:
84:2f:06:33:24:ed:7c:3f:b1:f9:90:36:f2:ad:83:a3:19:ae:
6c:ed:e1:f6:45:51:28:aa:33:55:08:79:6a:8a:3b:5e:b9:b4:
b2:c1:97:62:10:45:2c:bd:44:4c:75:77:fb:ae:28:df:79:41:
79:3c:ff:63:fd:a0:2f:63:3e:96:d5:45:50:4e:0c:f5:ce:55:
94:9a:fe:1e:d9:f5:8e:a9:01:af:62:ac:51:b2:e7:72:32:07:
21:e4:11:13:1d:35:9c:13:55:bd:ab:65:74:21:b5:1c:0d:43:
38:88:68:75:93:ea:dd:e8:66:58:69:05:a5:f9:7b:36:0d:53:
7f:8e:13:e5:c2:ec:09:00:35:23:14:93:f8:43:0a:74:a1:2a:
8b:ef:2b:93:40:fe:3e:ac:71:01:9b:85:60:33:a3:46:c9:ae:
ee:f2:23:57:eb:8c:20:47:ab:a0:cb:dc:53:5c:c3:0c:bc:b8:
ef:3c:db:07:6c:e8:87:af:b5:95:82:c4:cc:57:d1:5e:53:63:
ed:2a:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:37 2026 by rpki-client