
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa
File: 1043B2347BBD11EA8356C986C4F9AE02.roa (raw, json)
Hash identifier: G4Pq7se+uCSto4s/dTIZSlEZboyru+n0V8CsdH+dfQ0=
Subject key identifier: 4E:9D:DA:71:58:40:E8:B6:4D:D7:63:FA:AA:D5:63:6F:25:09:98:D4
Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial: 0ADC
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa
Signing time: Mon 04 May 2026 20:24:08 +0000
ROA not before: Mon 04 May 2026 20:24:08 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 137580
IP address blocks: 103.114.24.0/22 maxlen: 22
103.114.24.0/24 maxlen: 24
103.114.25.0/24 maxlen: 24
103.114.26.0/24 maxlen: 24
103.114.27.0/24 maxlen: 24
2407:44c0::/32 maxlen: 32
2407:44c0::/40 maxlen: 40
2407:44c0:1::/48 maxlen: 48
2407:44c0:8000::/48 maxlen: 48
2407:44c0:8001::/48 maxlen: 48
2407:44c0:8002::/48 maxlen: 48
2407:44c0:800a::/48 maxlen: 48
2407:44c0:800b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 19:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780 (0xadc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Validity
Not Before: May 4 20:24:08 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f90068-5055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:b1:9e:dc:d1:f5:a6:09:db:73:dd:ee:8d:
5e:09:c0:ee:ea:e6:cc:a6:02:a2:3c:8c:6f:6a:06:
da:25:e0:1f:bd:8f:da:b6:f5:ae:d6:35:ed:15:d8:
e9:25:9e:1c:d5:03:3f:74:74:dc:5f:58:bf:14:69:
05:84:b0:bd:a9:32:11:1c:94:e0:bb:04:ad:49:3c:
b2:3e:cc:1b:5d:12:f9:86:3e:48:95:8f:74:e3:e3:
e7:50:a7:a1:7a:68:9c:1b:7d:66:b3:4f:8a:cb:b1:
18:97:a8:b5:ee:a2:92:53:14:0e:bc:aa:da:be:0b:
a4:84:f6:f9:9a:0c:35:30:e1:1b:77:91:21:cc:86:
78:36:77:a7:47:05:75:7f:50:f3:91:f4:51:74:b9:
db:27:f8:0f:21:09:04:37:b7:29:5d:9a:8a:23:7b:
6b:78:86:53:ed:43:14:1b:70:41:d8:b0:fa:76:38:
20:0b:a4:20:d6:fd:ec:d6:c0:3c:61:21:07:e0:8f:
62:ab:20:26:4c:76:30:17:3d:21:b6:17:52:67:69:
62:cf:6e:8a:e5:70:ad:e5:dc:22:23:fb:cc:01:64:
a0:cf:02:b3:cf:3b:0f:e6:e0:ad:e5:69:84:0b:e4:
8a:78:17:ea:92:78:1a:16:55:be:0d:66:30:36:15:
cd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:DA:71:58:40:E8:B6:4D:D7:63:FA:AA:D5:63:6F:25:09:98:D4
X509v3 Authority Key Identifier:
keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.24.0/22
IPv6:
2407:44c0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:71:0b:cc:ae:61:5b:46:81:a3:d6:de:76:ed:32:67:f5:1b:
35:1f:47:37:e5:ac:0e:37:1d:6b:7e:67:81:dc:ea:b8:7e:db:
61:55:65:c9:ce:7b:2a:94:92:2f:a0:23:80:e2:cd:39:4f:34:
88:5e:77:d7:c2:eb:17:4d:b5:46:50:98:7f:1f:b0:43:7f:3d:
6d:b1:b4:50:19:eb:d8:2a:03:2b:2c:bf:1b:12:78:2b:92:01:
b1:b3:94:73:3b:ec:37:d8:eb:ae:a2:9f:69:7a:63:ff:cf:9c:
4c:03:2d:d0:6f:d2:e4:a0:30:70:40:bc:b6:3f:bb:80:d8:a2:
2b:6b:b5:f2:58:00:1a:e9:55:64:a3:56:91:1d:56:12:d5:a1:
a3:7d:59:b9:7d:36:a6:2d:84:b8:a7:43:3f:98:95:b4:1d:c2:
fe:e2:3e:d3:33:57:c8:7d:c3:99:eb:de:25:7d:74:f3:d7:e4:
40:92:e3:f0:bc:14:01:2c:37:2c:ef:74:2b:8f:2d:d5:45:0e:
2d:14:68:71:05:e1:59:1d:ac:9d:2b:1e:de:1a:a8:49:69:05:
08:65:e2:80:3d:21:8a:a3:47:45:a7:e1:96:e1:b4:38:00:3e:
d3:de:14:40:63:56:b0:03:fb:5e:f0:3a:c8:2a:cd:2d:81:f6:
31:bb:fb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:43:55 2026 by rpki-client