
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B54C3DBA169411EBBEBD9A23C4F9AE02.roa
File: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (raw, json)
Hash identifier: NghPk/wVq3Vd7LHngXkzOUMOG/RNZ/zYTp/fCWTTyU4=
Subject key identifier: DE:12:DC:9D:C1:AE:10:CB:09:35:B4:61:AE:E3:57:AE:93:AB:6F:BF
Certificate issuer: /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial: 0828
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B54C3DBA169411EBBEBD9A23C4F9AE02.roa
Signing time: Tue 31 Mar 2026 21:27:04 +0000
ROA not before: Tue 31 Mar 2026 21:27:04 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 58915
IP address blocks: 103.18.150.0/24 maxlen: 24
103.209.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 20:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2088 (0x828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Validity
Not Before: Mar 31 21:27:04 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc3c28-0fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:61:13:d0:23:8b:37:07:0d:2b:a4:15:2d:29:
69:8f:28:53:c8:d0:1f:09:48:71:f1:cc:a5:3c:87:
0c:86:09:d9:d5:1a:86:dd:f7:ff:3c:10:1b:3e:6c:
d6:1b:69:3f:f7:da:57:88:b2:ad:87:2e:ba:75:44:
b6:ef:c5:d3:32:cc:c8:f8:39:2f:3c:a2:43:18:2a:
4e:18:12:d6:29:5c:ac:4e:5d:67:95:a7:0e:7a:97:
65:1b:ba:28:af:a6:59:3e:0b:79:34:55:93:fb:cc:
11:63:11:27:2a:a0:45:17:8d:75:ff:3b:4b:78:03:
ba:b0:ea:d5:55:e3:4d:0b:36:5f:ab:a2:2b:dc:0a:
aa:6c:e7:56:ae:a3:91:06:79:6f:4c:32:b4:fe:f5:
38:c1:95:93:b9:d5:b1:77:68:15:9d:0c:f0:87:9a:
b1:f0:d4:aa:9c:c5:6b:75:18:a1:99:a9:c0:61:57:
a9:45:fd:b3:01:82:63:36:f5:8f:6c:3b:7b:c9:27:
7b:7b:c6:18:b9:c1:a7:db:a2:04:3b:02:d2:9e:3a:
22:19:11:18:6c:d4:b2:50:89:7d:d7:2f:2a:b3:15:
c9:1e:12:82:7b:8e:8b:ae:3d:b6:22:1d:e0:67:31:
6e:56:8e:2d:25:df:53:ce:70:85:73:fc:eb:e0:0c:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:DC:9D:C1:AE:10:CB:09:35:B4:61:AE:E3:57:AE:93:AB:6F:BF
X509v3 Authority Key Identifier:
keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/B54C3DBA169411EBBEBD9A23C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.18.150.0/24
103.209.24.0/23
Signature Algorithm: sha256WithRSAEncryption
04:fa:91:4e:18:0d:32:ba:2a:45:81:8f:fc:73:1d:94:67:2d:
f1:73:21:13:61:d8:3a:45:a6:aa:c6:5b:7a:c3:6d:ee:a2:43:
7f:19:62:42:ac:20:9d:38:64:6f:9c:fd:d9:c9:c2:2f:15:aa:
72:fb:56:28:4d:e3:f7:49:61:da:54:bc:ff:49:ac:77:f3:cf:
7a:0d:c2:b7:6d:4f:e8:ed:4f:52:9d:38:16:7a:34:12:f1:95:
ff:14:68:0c:a4:e8:70:bc:31:c1:f6:a1:c7:52:83:e9:49:1d:
6b:b3:d9:97:24:33:14:d0:1e:dd:5d:b3:89:7a:d1:e3:11:44:
ef:cd:c6:a3:97:ac:4a:7d:5b:ca:65:30:ad:88:ae:ad:55:56:
22:7a:58:c6:5f:a7:a7:8e:b8:b2:57:42:f6:81:f1:88:fe:3a:
d2:43:4b:91:d1:33:0b:86:9a:8d:1a:65:e5:3a:82:11:7f:80:
04:71:54:5f:e1:bd:e8:88:3d:39:88:aa:d3:05:dc:15:3d:53:
1f:06:2a:a1:86:ad:6d:60:5a:76:6c:fb:8f:b0:28:de:e5:77:
e0:0c:82:3a:54:3f:e1:74:a2:f8:eb:28:44:f1:29:90:c3:24:
33:a4:49:24:d0:f4:73:9d:73:5a:49:fb:a7:5c:19:8a:70:7d:
03:98:aa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:54 2026 by rpki-client