
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa
File: 449009F2387C11ECAE655C13C4F9AE02.roa (raw, json)
Hash identifier: 3hqCz2s//bM7F9yk83SFGrz3hmeLWBDn7j2N0N+L1Gc=
Subject key identifier: F5:A2:B9:25:9C:E6:FE:DA:39:0C:80:FB:E5:46:31:86:01:5C:FA:0A
Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Certificate serial: 052A
Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:51:59 +0000
ROA not before: Sat 03 May 2025 00:35:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142009
IP address blocks: 103.164.146.0/23 maxlen: 23
103.164.146.0/24 maxlen: 24
103.164.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Validity
Not Before: May 3 00:35:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fe2f-cbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:b5:2f:9b:0f:1a:15:5f:e9:26:d7:bf:32:
b6:cd:8a:e7:3b:36:47:76:7f:6d:98:7d:89:a9:96:
bf:32:52:3d:8c:f9:9d:a9:95:ff:14:47:66:38:92:
ec:7f:ce:9c:53:4c:d3:d0:e3:6b:28:77:d3:d8:e7:
cc:bb:e5:63:54:08:a7:65:6a:0f:ea:7d:e5:ae:65:
1f:82:65:56:c8:c2:06:06:cb:20:ca:67:e2:4b:41:
f5:f9:0d:0b:b0:11:b8:b0:84:24:cd:64:1d:f5:9d:
d3:4b:47:41:f5:7c:c8:1f:e4:92:ba:c1:88:65:31:
f0:d0:92:35:50:b7:c3:26:f0:70:3d:d9:34:2f:f7:
26:4e:fa:45:50:41:f8:36:be:e2:67:c9:c3:32:e1:
9a:77:00:88:95:60:d6:ac:33:70:9c:d0:ff:19:a6:
f4:f5:a6:66:d4:c4:6d:fb:13:70:c6:64:30:8e:98:
07:d2:8e:dd:d1:a8:f1:26:58:95:8a:32:ef:98:61:
47:c5:3b:4b:19:09:bd:d5:73:be:db:17:3b:63:0f:
af:a7:ae:9b:bc:79:7e:07:9e:9f:c7:f7:4f:99:51:
66:bb:7b:2f:76:d9:b0:d8:c1:4e:42:1e:4a:da:d1:
28:1b:42:de:3e:51:83:96:36:2e:b8:48:b0:a8:db:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:B9:25:9C:E6:FE:DA:39:0C:80:FB:E5:46:31:86:01:5C:FA:0A
X509v3 Authority Key Identifier:
keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/449009F2387C11ECAE655C13C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.146.0/23
Signature Algorithm: sha256WithRSAEncryption
32:72:a4:88:85:4d:b6:c4:a5:f0:bc:ac:f0:a5:07:13:bd:26:
23:d2:87:c7:dc:d9:6a:bd:2d:e5:fe:7b:93:17:0b:73:92:ef:
e2:a0:70:f7:ea:2b:6d:5d:44:1d:26:dd:56:6a:5f:b8:5d:86:
e9:24:c9:72:2a:83:90:94:1e:77:80:50:91:26:6a:27:cd:4f:
65:2b:91:bc:fd:e3:ad:f9:37:a5:5c:f4:84:96:d6:63:bd:a7:
db:3d:e4:83:c1:89:b9:2d:e0:47:47:90:8b:c2:45:bf:a8:19:
6e:16:f9:ef:3b:3a:37:17:a8:72:d6:7a:38:1e:07:7e:79:0b:
08:60:3b:bf:89:f8:e3:19:c2:5c:1a:2a:d1:15:ca:7f:8e:af:
83:51:f9:13:88:93:c9:44:db:36:d9:48:09:0a:cb:a8:b7:f0:
92:b3:52:c5:b0:72:38:3a:a6:25:de:ea:50:04:63:f9:8e:43:
ba:56:b7:d5:6e:ab:65:49:76:3d:07:a8:5f:95:1d:a8:f9:05:
c5:2d:44:6e:75:22:c1:aa:8a:41:cb:dc:24:fe:fc:50:28:25:
09:f6:61:8a:01:4e:f4:d3:de:f6:0b:f1:de:71:5f:9e:ca:5e:
56:b2:f9:56:2c:ef:91:c4:da:5a:e6:3d:09:54:97:fb:29:7c:
fd:0c:7e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:11 2026 by rpki-client