
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa
File: 7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa (raw, json)
Hash identifier: v/SZ7H/SLnlGFkwwxhkg6bW6tjnET9pIm6y1CUX4oos=
Subject key identifier: ED:A9:91:E8:08:E9:35:C8:FF:93:8B:7E:80:F8:50:8E:A1:A6:1D:C1
Certificate issuer: /CN=A914E4E3/serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Certificate serial: 16AF
Authority key identifier: 27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa
Signing time: Sun 22 Mar 2026 17:20:48 +0000
ROA not before: Sun 22 Mar 2026 17:20:47 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136262
IP address blocks: 103.85.160.0/22 maxlen: 24
2400:ad40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:36:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5807 (0x16af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E4E3, serialNumber=27E6CB1889C0A3F36F91F58E059B889A26797C94
Validity
Not Before: Mar 22 17:20:47 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69c024ef-6d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:b1:c8:8a:46:6c:1b:18:e5:76:ff:62:9a:
96:14:e8:00:00:80:01:f8:6b:aa:70:ed:a5:71:a6:
e8:72:b7:5a:df:d2:dd:76:ca:5a:de:58:a4:1a:55:
56:7f:f1:46:56:fb:95:ec:4a:dd:85:8d:a2:d6:fd:
35:4e:bf:28:26:e8:30:71:d8:b4:c3:f1:25:ed:88:
d0:6a:a1:75:a7:e2:f3:c3:4c:d3:c6:6a:bb:e2:cd:
42:d4:b6:69:73:d3:81:8c:cc:6f:9c:2e:62:d6:97:
8b:3f:10:ff:ab:e9:a1:d8:c2:ea:10:0a:dc:4a:f3:
c6:71:2f:55:3b:90:64:b6:86:eb:a5:1f:80:a4:6e:
85:04:d6:e1:ec:b9:84:e7:01:fe:b5:91:77:3a:4f:
65:6e:a8:2a:da:0d:73:5a:d7:ad:cf:3a:5f:c3:c8:
01:dd:42:97:cb:67:1c:91:68:91:6a:1a:d1:ae:2a:
ed:81:52:f8:33:b6:cb:2e:cb:0f:0d:19:c2:ef:d4:
7f:c1:a2:17:b4:0f:eb:4e:6d:4a:73:08:e2:dc:d6:
ae:30:1e:4b:49:7d:31:49:78:bb:68:7d:0e:8a:a8:
f1:ba:03:a0:80:30:eb:b8:8a:65:18:06:4d:4a:8b:
21:6a:bd:e5:45:d1:90:2e:d4:cb:31:c4:55:5d:93:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:91:E8:08:E9:35:C8:FF:93:8B:7E:80:F8:50:8E:A1:A6:1D:C1
X509v3 Authority Key Identifier:
keyid:27:E6:CB:18:89:C0:A3:F3:6F:91:F5:8E:05:9B:88:9A:26:79:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/J-bLGInAo_NvkfWOBZuImiZ5fJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-bLGInAo_NvkfWOBZuImiZ5fJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E3/423B6FDC1D2F11E8A2FD3712C4F9AE02/7A1AC3F44B6111EBAE5C8E77C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.85.160.0/22
IPv6:
2400:ad40::/32
Signature Algorithm: sha256WithRSAEncryption
2b:74:f4:13:a2:5b:bf:8c:b5:b6:e6:9e:87:8c:72:12:e3:b7:
b5:64:53:f5:c0:5d:ea:12:bc:c8:50:e4:d3:60:47:89:66:eb:
cc:d4:5e:2e:ef:5b:af:0f:dd:ea:e0:a5:cf:54:ab:f8:6f:2e:
4d:ba:54:e9:f6:21:1f:c8:54:42:d2:1e:35:de:d4:9c:56:71:
8c:72:96:3a:6f:55:73:79:4d:ad:11:af:f5:77:da:fc:c0:46:
7f:30:28:f6:d1:96:72:c3:d9:07:18:f7:89:7a:91:79:f9:42:
fc:07:a9:c0:4d:4e:35:e5:63:4d:48:c7:da:f4:e9:6c:4e:fd:
ee:64:a0:a3:f3:fe:97:43:e3:ba:d2:ce:50:c3:ad:b1:d3:32:
17:f2:7c:5e:ac:1e:62:ed:e2:d0:73:55:33:3f:5b:38:1a:b5:
35:30:80:13:1b:e5:62:ae:29:1e:de:01:b8:79:e5:69:25:3f:
e5:dd:78:72:c8:db:e6:9f:7f:76:d8:3f:46:29:65:9f:7d:2c:
48:3d:39:9c:86:97:97:16:1f:07:99:d6:80:ae:d2:ad:d5:03:
3f:2b:07:a8:6e:36:57:f9:7c:b8:dc:ed:76:52:92:24:58:6e:
c4:8c:b5:68:8c:12:4b:9d:0c:a3:7d:9e:e5:5f:19:fa:bb:91:
8b:84:0e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:06 2026 by rpki-client