
$ rpki-client -vvf rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/8A7D7EA2426B11F0B0160739C4F9AE02.roa
File: 8A7D7EA2426B11F0B0160739C4F9AE02.roa (raw, json)
Hash identifier: lMAf7//hq2KayFLsQ1+yUw+fN/IaIADRY6c2Rd27jxo=
Subject key identifier: BE:36:FB:F2:6A:9E:FB:83:00:36:1C:D2:92:3C:BC:C2:38:73:4C:A0
Certificate issuer: /CN=A919941E/serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Certificate serial: 0259
Authority key identifier: C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/8A7D7EA2426B11F0B0160739C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:31:04 +0000
ROA not before: Fri 06 Jun 2025 00:16:50 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 56262
IP address blocks: 103.3.80.0/22 maxlen: 22
103.3.80.0/24 maxlen: 24
103.3.81.0/24 maxlen: 24
103.3.82.0/24 maxlen: 24
103.3.83.0/24 maxlen: 24
182.255.40.0/22 maxlen: 22
182.255.40.0/24 maxlen: 24
182.255.41.0/24 maxlen: 24
182.255.42.0/24 maxlen: 24
182.255.43.0/24 maxlen: 24
2400:9d00::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:48:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919941E, serialNumber=C13764A0A63A7767F3A475D7A81AE8DF18AFE08D
Validity
Not Before: Jun 6 00:16:50 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a3dd27-bb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:75:bb:56:6a:73:0b:4e:53:e9:3e:7b:f1:
3d:98:03:bc:49:65:b0:9f:83:5b:47:03:48:f7:c6:
34:28:7d:69:1e:c4:5f:20:06:6b:cf:07:5b:49:99:
17:a6:e5:47:46:65:ef:de:38:b8:eb:c9:d0:2f:2b:
5a:21:35:45:1f:5f:a9:7f:0f:9f:e5:da:ec:24:29:
27:d2:96:c5:62:18:fd:dc:e2:5a:87:27:93:87:28:
b8:66:1f:00:02:48:31:99:95:a8:3c:32:dd:3c:38:
a5:82:97:f6:5e:e4:bd:ea:27:57:be:a2:f8:17:e1:
01:c9:e4:aa:5e:a6:e5:0e:ba:5e:3c:f0:9a:10:21:
7a:9c:04:35:f9:27:12:55:71:a6:9a:8d:53:65:0e:
cf:2a:ff:6a:7c:14:54:69:bd:d5:55:51:4f:1b:34:
91:b2:38:5b:d5:d2:9f:49:ec:80:50:79:a0:d8:6c:
b5:61:46:f0:dd:07:2c:13:35:1a:d3:2f:2b:68:b5:
7a:6d:59:d7:55:0f:2b:f6:6c:9e:13:a1:41:6b:08:
af:63:16:f0:34:3f:05:66:c0:df:8f:21:ab:c0:9b:
48:8a:ec:3d:43:9d:80:b9:76:40:a9:99:d9:48:e1:
e8:94:01:50:1d:d2:f9:0d:aa:dc:0e:1e:de:1c:ec:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:FB:F2:6A:9E:FB:83:00:36:1C:D2:92:3C:BC:C2:38:73:4C:A0
X509v3 Authority Key Identifier:
keyid:C1:37:64:A0:A6:3A:77:67:F3:A4:75:D7:A8:1A:E8:DF:18:AF:E0:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/wTdkoKY6d2fzpHXXqBro3xiv4I0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wTdkoKY6d2fzpHXXqBro3xiv4I0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919941E/EF1FAD18966E11EDB0ECC069C4F9AE02/8A7D7EA2426B11F0B0160739C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.3.80.0/22
182.255.40.0/22
IPv6:
2400:9d00::/32
Signature Algorithm: sha256WithRSAEncryption
3b:c5:38:d4:be:c5:49:01:d5:4b:a5:94:d0:15:9c:df:2d:ad:
d7:c4:eb:c7:fe:9f:09:07:5b:ed:d2:e1:72:b4:f2:f9:44:f6:
50:a9:50:3f:cb:f6:6e:34:77:de:c6:7a:2d:da:44:f8:4f:26:
34:95:12:4e:a3:74:22:17:e8:85:cc:20:bc:e6:40:b5:8d:2c:
e3:96:05:47:b1:d6:c1:b8:a1:43:6d:2e:ed:fa:30:8d:9a:d2:
a3:c7:06:97:89:72:cc:37:1c:f9:4b:f5:3b:50:1b:18:b4:03:
1a:fa:ab:f3:14:42:8a:19:80:58:43:22:2a:a2:54:ea:3c:8b:
f8:8b:d7:c9:78:6a:6b:f9:94:ef:69:58:91:67:36:db:22:f6:
72:93:c2:87:2a:b0:b3:d8:c2:fb:3e:9e:b7:f4:2d:1c:dd:3c:
52:cb:33:f3:bd:40:f7:8c:f8:d0:f8:1b:04:e5:6f:01:58:25:
47:de:26:fe:e4:e6:32:ef:ad:42:2e:74:48:3b:27:5c:bd:87:
07:cc:0c:70:0e:7c:0c:83:bc:b1:d1:4c:8a:31:e7:97:16:be:
39:0d:82:fa:64:65:dc:24:5a:f9:7e:09:b3:54:ea:0f:7e:d3:
69:b6:86:d5:6b:51:3a:d9:20:79:e9:e2:0d:cc:f2:fb:e4:7a:
03:3e:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:35:15 2026 by rpki-client