
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa
File: 642AEE6EB3FF11F0A569692DC4F9AE02.roa (raw, json)
Hash identifier: GY0BZiBwiNrVOe5Nz6Sge+kVhKldKyhuAhph2haNt+U=
Subject key identifier: EC:FD:E8:0E:60:32:9F:CF:F7:D9:D9:D4:D8:3E:97:4B:C0:E9:40:BD
Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial: 0267
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa
Signing time: Sat 07 Feb 2026 07:35:07 +0000
ROA not before: Sat 07 Feb 2026 07:35:07 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 24556
IP address blocks: 103.113.196.0/22 maxlen: 22
103.113.196.0/24 maxlen: 24
103.113.197.0/24 maxlen: 24
103.113.198.0/24 maxlen: 24
103.113.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 00:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Validity
Not Before: Feb 7 07:35:07 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6986eb2b-cd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b0:8e:8d:e8:d0:b3:7a:48:7e:dd:7a:ee:66:
91:df:93:b0:98:b5:f8:70:f1:4f:6f:0e:b7:93:56:
03:8b:57:62:44:a4:0c:e8:9c:b4:cf:56:52:ea:d7:
d0:d7:02:a4:89:dd:58:7f:13:6d:98:69:d4:99:68:
48:fb:70:d6:99:e0:f9:ca:0c:f8:36:d0:8c:a8:98:
56:72:08:c7:97:ee:3a:55:77:b8:8b:40:5d:66:90:
57:d4:18:e1:dc:4a:20:9c:3b:1c:eb:f7:3c:fa:97:
aa:67:dc:8b:b2:c4:60:f2:8d:bd:26:da:2a:bc:4e:
7c:73:f9:1f:43:b5:b1:95:e0:b6:f8:9f:3b:fd:ae:
32:98:51:a0:29:4e:3b:78:65:ff:d9:01:af:b6:40:
19:b7:a0:86:0b:b1:e5:81:a3:0e:c2:3d:f8:74:ca:
df:ef:aa:8e:a5:b9:6f:58:f5:8d:35:9e:c5:86:d4:
2d:c7:ee:6c:f2:de:15:ba:37:cf:1d:4c:b0:5e:c7:
cf:d7:c1:c5:48:f9:48:8d:a5:5e:a2:6f:55:01:51:
67:45:2e:88:ac:30:fd:b4:89:80:f8:58:7f:95:e9:
0c:b8:c2:d2:a5:40:7e:3a:fa:07:42:c0:cd:bf:65:
5f:24:52:58:ae:1f:33:93:03:11:62:f0:b8:c8:26:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:E8:0E:60:32:9F:CF:F7:D9:D9:D4:D8:3E:97:4B:C0:E9:40:BD
X509v3 Authority Key Identifier:
keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/642AEE6EB3FF11F0A569692DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.196.0/22
Signature Algorithm: sha256WithRSAEncryption
23:8b:fd:98:b7:7c:f3:1b:38:40:50:49:22:87:65:50:cf:92:
aa:86:7e:69:c9:54:ed:77:c1:1a:85:ea:cd:17:3c:72:bd:93:
a7:0a:83:04:8f:46:ed:ea:20:22:94:5e:3e:55:f4:46:4f:5c:
8f:ee:fd:0a:3a:41:95:bb:57:49:1c:fd:ac:19:c0:b6:91:af:
84:48:df:6c:fd:a9:2c:55:4c:60:7c:6e:13:6a:c8:5c:15:7c:
f5:04:21:8b:0a:50:a9:66:28:55:60:b2:7c:82:34:d6:f8:16:
02:5d:8f:6a:26:df:4d:0b:bd:bf:99:dd:5c:e4:fe:46:b8:3b:
4b:4a:8f:90:11:cd:57:c3:3d:7e:27:46:e4:1c:6c:87:9b:bc:
e3:22:4e:99:55:77:3b:0a:71:bc:86:6d:2a:49:c1:b4:9e:df:
cf:0a:23:bd:59:42:98:cd:31:79:fd:e2:55:fa:4f:51:4c:48:
be:48:d3:cd:cd:89:55:d4:b8:0d:cf:a7:2c:96:42:f7:54:02:
2b:a4:6a:35:72:b2:b0:4f:d4:a7:10:20:bc:75:d8:eb:1f:67:
f2:77:36:87:37:21:82:5a:5b:3a:e1:59:5d:71:a5:6b:69:8a:
a6:60:a5:13:b6:2d:16:e7:24:82:b1:25:c2:a1:a3:26:a2:72:
8d:bc:b0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:26:58 2026 by rpki-client