
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
File: FAB56D7E154711F1A1427AB42F3D8C67.roa (raw, json)
Hash identifier: XQL75+py8gyPYwB7NS3YOvOj6Z0ixaWmfV1k8DLv7QY=
Subject key identifier: B8:A3:7C:12:91:94:EB:20:DD:3E:45:8B:F9:29:14:CF:59:50:3A:2B
Certificate issuer: /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial: 057D
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
Signing time: Sun 01 Mar 2026 12:42:28 +0000
ROA not before: Sun 01 Mar 2026 08:23:52 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 139716
IP address blocks: 103.172.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 22:59:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1405 (0x57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Validity
Not Before: Mar 1 08:23:52 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a43434-4379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:e8:19:56:d6:2f:d5:53:cb:fd:41:d7:9c:
a1:82:c1:19:00:6d:ac:81:be:34:2c:44:83:6d:73:
5c:22:6c:d7:86:dc:af:fb:df:66:8a:10:cf:e1:3a:
b9:99:96:de:3c:c3:37:3c:f4:20:7f:04:2b:db:4e:
cd:e1:88:75:f9:4e:90:c5:9d:ae:a6:48:cb:ce:2c:
40:36:16:0f:5f:98:c3:84:48:10:fb:af:22:71:36:
d8:20:d1:4e:41:c9:87:f8:4d:d1:c3:45:b9:55:b3:
71:f3:f0:35:5a:46:04:f0:39:32:af:12:a4:ef:2b:
3b:eb:4a:65:66:33:e8:1f:2c:77:2c:a9:34:68:b0:
55:41:fb:2a:07:38:7b:f6:a2:65:96:bc:5c:21:3f:
0a:29:c0:7f:0c:c9:48:b5:15:c1:dd:62:46:7d:f7:
18:62:2a:8a:49:a1:f1:8c:b1:dd:1b:28:4e:12:06:
5c:cf:4a:1d:9a:47:8f:37:93:e5:2c:26:d0:aa:15:
32:f2:ee:e9:55:77:34:7d:3a:1c:36:ac:44:6c:d3:
44:04:f6:a3:66:92:97:ee:c2:8f:95:5f:ee:b0:3a:
9d:58:ba:10:6d:d7:2e:8b:18:13:4c:02:fa:f5:e1:
ca:96:c9:07:3c:90:aa:95:10:36:67:2d:09:c3:ad:
59:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A3:7C:12:91:94:EB:20:DD:3E:45:8B:F9:29:14:CF:59:50:3A:2B
X509v3 Authority Key Identifier:
keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/FAB56D7E154711F1A1427AB42F3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.172.164.0/24
Signature Algorithm: sha256WithRSAEncryption
89:56:ef:91:8f:a3:bc:86:ca:02:94:fd:15:21:16:33:dd:10:
70:16:5e:7f:95:41:af:db:db:34:32:08:21:51:6b:de:de:9e:
28:54:7c:50:29:f0:eb:39:5a:6b:eb:a8:61:e6:c6:14:96:95:
09:f5:c6:f6:fe:8b:08:7c:30:db:c7:65:e2:e9:25:f5:08:66:
49:0f:1b:db:7c:d5:c2:28:af:1a:13:4c:85:84:ef:69:57:cd:
f4:b0:b2:fe:3e:2e:1d:00:44:f7:97:c2:e8:e3:92:3c:8b:3e:
a8:ca:9f:5c:e3:6b:80:f3:68:4c:9f:5c:49:2a:1f:85:6f:27:
e7:74:3c:ad:51:82:bb:c1:df:1d:74:a8:18:8c:ff:1e:ae:6a:
50:dd:be:c8:f0:ae:c3:4c:67:4c:af:56:c7:e4:0a:6c:7a:5d:
b8:80:c7:e6:89:ec:4f:c0:66:ec:f8:96:5a:43:76:be:10:da:
51:86:59:8d:0a:86:f1:b0:ad:1b:5d:bb:bd:d7:16:44:13:e9:
ed:7e:93:b7:44:20:ac:b7:ee:8a:a5:d7:7d:8d:3b:61:b3:b5:
c7:2e:4e:89:da:db:7a:36:e5:a6:a6:9d:32:a7:3c:31:d9:4e:
75:53:5d:6c:10:6f:36:4f:ec:04:f7:e7:78:db:ae:d8:26:ed:
2c:fe:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:03 2026 by rpki-client