
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa
File: F148BE6E511611EE85A7E634C4F9AE02.roa (raw, json)
Hash identifier: eceVmoVwI80yJc6q0NKt6qLgzjIlJclr4V7xOY6Y66Q=
Subject key identifier: 9D:4A:9E:B6:30:A0:8A:4D:62:5C:07:BA:9C:D7:23:80:10:40:26:E2
Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Certificate serial: 15C0
Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:15:24 +0000
ROA not before: Thu 24 Apr 2025 17:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137557
IP address blocks: 103.113.44.0/22 maxlen: 22
103.113.44.0/24 maxlen: 24
2402:b740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 16:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5568 (0x15c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593
Validity
Not Before: Apr 24 17:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a42ddb-4e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:91:8f:a0:bb:de:db:b0:3d:1c:0f:77:12:67:
e0:25:99:61:b7:76:c4:61:ca:d7:54:d6:5f:37:11:
7d:6c:f1:ef:15:04:09:a9:fb:85:77:c5:80:b0:02:
c0:8b:23:7f:0b:a4:f2:fb:c1:62:66:4b:a6:2f:b3:
ad:9c:85:d5:ba:c3:e4:9f:79:2b:5f:1c:69:8b:07:
25:e9:c9:0c:cc:6c:78:13:60:ed:83:50:43:86:0c:
bd:db:73:c9:22:c2:f4:0b:c3:39:97:91:1e:01:ac:
87:51:d5:e4:c6:93:d2:41:1a:12:8e:77:cc:55:90:
ab:35:28:d0:e6:f2:7e:46:31:08:ea:83:7e:fa:a7:
f4:b2:01:62:39:81:e5:28:18:6e:e8:3e:61:aa:5c:
25:5d:25:a5:4c:98:e8:d2:85:81:89:8d:e7:b1:36:
72:84:18:c0:61:0b:0c:fa:01:4b:b4:b9:fc:82:26:
7a:c1:56:21:35:43:59:30:28:78:a9:63:f7:dd:1f:
9d:6b:f9:d8:ea:84:fc:51:94:15:10:a0:0e:1f:87:
50:85:2a:c2:b0:dc:8b:d1:ce:54:f9:56:7f:9c:38:
3c:b3:27:53:42:08:cc:f9:bd:46:00:9b:c7:5a:88:
1c:fa:b6:0b:c3:24:de:92:17:fa:6d:e8:35:70:99:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4A:9E:B6:30:A0:8A:4D:62:5C:07:BA:9C:D7:23:80:10:40:26:E2
X509v3 Authority Key Identifier:
keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.44.0/22
IPv6:
2402:b740::/32
Signature Algorithm: sha256WithRSAEncryption
62:92:ce:b0:f1:a5:85:f4:a8:83:51:3d:ed:00:3e:29:12:48:
66:a2:7b:41:1f:05:15:b9:1a:9e:25:f7:ce:e4:e4:b3:22:4b:
99:d3:ca:54:fe:0e:18:46:91:73:e1:a9:47:e7:a6:be:91:b2:
6e:dd:d7:af:ea:a3:62:61:ff:59:9a:bb:b7:a0:11:31:ff:bd:
20:60:8f:73:63:f7:48:37:40:6a:8b:39:bb:88:54:ed:a3:5c:
a4:00:e1:bb:22:9b:a7:7a:d8:9f:6a:b4:c3:02:72:36:ac:95:
d1:33:91:ac:cf:b1:e4:5a:67:e4:5c:3c:1d:99:84:f4:8e:1c:
41:33:a6:7c:cf:95:34:ea:6c:4d:ca:70:ab:6a:72:d5:67:f9:
1b:53:56:0d:a3:ea:44:a1:e7:b2:52:c7:6f:6a:6f:15:c4:8f:
53:54:a0:9f:a1:74:36:39:c5:d8:7b:20:7b:5f:55:bb:ad:4d:
db:c0:af:91:aa:62:64:9d:89:f1:ae:a3:33:12:32:8d:ed:96:
94:7d:51:f8:25:1b:8f:16:e7:cd:b9:a7:f5:28:0b:49:5b:bd:
02:de:78:0e:10:0e:52:92:b8:48:0f:e3:91:5e:0f:b0:0d:de:
6c:30:97:7d:63:eb:37:11:c2:6a:c0:a5:88:7b:07:26:e9:bd:
28:88:f6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:54 2026 by rpki-client