
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
File: AE148B2A6BB911ED97343873C4F9AE02.roa (raw, json)
Hash identifier: ePmk0CczlOGWQK9+qfbSO2Ni5+ekm/m/w7XANZRtrCM=
Subject key identifier: 6D:0A:56:55:FB:74:0B:83:A8:D3:FA:B2:1C:6C:1D:FE:CA:99:D7:85
Certificate issuer: /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
Certificate serial: 026C
Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:15:06 +0000
ROA not before: Wed 21 Jan 2026 01:21:28 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 150442
IP address blocks: 103.37.126.0/23 maxlen: 23
103.37.126.0/24 maxlen: 24
103.37.127.0/24 maxlen: 24
2001:df1:92c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl
rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 620 (0x26c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D9BE, serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
Validity
Not Before: Jan 21 01:21:28 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a59b6a-294c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:29:27:3a:11:bc:5a:68:c1:cd:e7:29:7e:
54:4c:f3:1f:67:5a:46:e3:1d:a8:ac:da:4a:77:cc:
c7:d9:8c:0f:b4:64:c6:16:cf:ac:e5:b9:56:27:b2:
81:a0:05:50:bf:2a:e7:0a:fd:45:51:2d:fc:ef:47:
b9:31:af:33:41:bc:48:a1:69:36:89:e3:39:68:9d:
f9:11:09:c9:80:44:4b:a0:5c:09:42:d9:30:a4:f8:
29:e7:54:4b:a8:ed:3f:9f:41:bb:e4:f5:3d:fb:12:
7b:ec:e3:0e:fd:94:da:1c:f0:5d:5c:ad:03:1c:ef:
76:3a:1e:cd:31:2b:d5:31:b6:bc:3f:09:f6:5d:bb:
79:37:aa:18:31:f6:43:66:f7:67:01:64:5d:18:1e:
82:dd:ce:58:99:fc:4f:39:bf:20:09:c8:1d:34:06:
12:39:b8:50:81:c5:09:b0:b7:5b:16:20:a2:1a:f0:
ff:0e:46:58:31:05:29:56:6b:d5:62:0c:ba:0d:62:
bf:f9:7b:23:ae:55:1f:f0:c4:dd:4f:4b:b7:69:63:
ce:7b:18:2a:f2:c0:2b:e8:ab:26:08:99:a0:93:e7:
86:1b:71:c2:e5:c8:b8:7f:c9:c4:f4:00:67:cb:31:
15:83:67:02:29:5b:71:56:8f:dc:bb:11:3d:a5:72:
91:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0A:56:55:FB:74:0B:83:A8:D3:FA:B2:1C:6C:1D:FE:CA:99:D7:85
X509v3 Authority Key Identifier:
keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.37.126.0/23
IPv6:
2001:df1:92c0::/48
Signature Algorithm: sha256WithRSAEncryption
8c:54:0b:76:04:47:c2:5a:72:8f:55:0a:dc:fa:32:10:d6:97:
8b:00:f0:42:29:c4:05:f5:a7:bb:19:01:75:5a:8a:8e:85:f2:
93:36:74:0e:29:05:fd:cf:ba:0a:c7:14:cf:14:e2:b8:0b:fe:
4b:75:e6:58:f4:36:28:93:94:7b:ca:2f:a6:d1:7a:ea:4e:90:
7a:2f:9f:74:e6:40:a6:67:ee:aa:ce:e5:b2:8c:ef:69:07:91:
da:f5:6e:b1:44:d4:f0:7e:d4:d1:9d:39:6e:70:ff:32:e8:84:
a4:a6:6e:40:c4:17:55:70:97:c7:0a:69:82:81:48:93:73:24:
88:d9:e4:f8:d0:99:9f:8f:98:93:97:d5:df:d8:97:66:00:15:
62:7c:33:dd:d7:b8:d3:2f:3d:20:0b:d7:94:7e:7a:3e:f4:09:
f4:ab:ef:26:83:d9:e8:7b:9c:18:f4:6a:58:33:1f:0e:0d:40:
df:e8:66:07:4f:bc:e1:b2:39:06:b8:74:c3:f8:63:6e:d6:33:
9f:6c:22:19:ba:fa:df:7d:7f:ff:12:a5:6d:ae:f0:9e:22:6e:
fe:30:d6:98:b2:cb:7a:a3:e2:df:6c:a2:ab:71:83:45:a6:ac:
6e:23:fe:f6:d3:27:65:4f:25:01:52:70:17:45:2a:36:9f:27:
58:aa:ea:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:31 2026 by rpki-client