
$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/1CD34B6CEDFC11EE880F6F58C4F9AE02.roa
File: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (raw, json)
Hash identifier: QfBvMFXb01H+L9wRFqEZ8QQruIPOAvtkWuxmOgFpE0c=
Subject key identifier: 31:2E:0D:0A:0C:CF:23:77:DB:8A:06:30:92:99:EA:92:70:0A:34:B9
Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Certificate serial: 0200
Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/1CD34B6CEDFC11EE880F6F58C4F9AE02.roa
Signing time: Fri 31 Jul 2026 04:53:18 +0000
ROA not before: Fri 31 Jul 2026 04:53:18 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 142297
IP address blocks: 103.167.186.0/24 maxlen: 24
2001:df6:bb80::/48 maxlen: 48
2001:df6:bb80::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 03:10:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512 (0x200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1
Validity
Not Before: Jul 31 04:53:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a6c2a3e-1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:13:14:e9:bc:2b:09:91:2a:c3:5c:d8:3e:25:
cb:d3:d7:5f:6c:49:a5:09:d0:cd:f7:aa:75:14:fb:
03:bc:be:02:81:55:bd:87:35:6d:b0:ba:03:4a:b8:
59:00:4d:91:c3:0b:e7:1c:3b:a1:c6:65:04:bb:10:
e0:21:4a:e4:45:df:08:7e:51:3d:bb:ce:cd:c8:d7:
57:1d:bd:e1:be:60:ef:af:70:ee:1d:bf:52:45:e6:
fa:46:ba:72:92:c0:34:8a:d4:f3:3a:e4:05:cd:30:
07:c5:2b:1c:9d:ef:50:12:84:f9:4d:99:00:21:d7:
60:08:cf:a7:a8:28:e4:29:ee:ae:9e:47:fc:c0:fe:
24:fc:48:25:56:17:cf:aa:27:1f:a7:56:46:d3:15:
25:f6:01:ee:36:95:d6:52:27:9c:e8:c3:8a:f8:e2:
6e:0d:fa:22:01:17:28:58:8e:bc:d3:d2:4a:3d:02:
4f:5b:8e:6a:a0:27:64:5c:e8:c9:78:3c:51:21:56:
3b:6b:1e:ea:3e:af:c2:b6:d6:e8:6f:15:dd:4a:1d:
93:a1:54:54:6a:93:7e:36:63:72:7b:e1:af:49:00:
29:2d:2f:56:bf:30:f1:b7:5c:e1:e7:3a:97:52:74:
c2:85:6c:d2:24:ff:9a:26:c8:82:46:0a:5d:52:ac:
34:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:0D:0A:0C:CF:23:77:DB:8A:06:30:92:99:EA:92:70:0A:34:B9
X509v3 Authority Key Identifier:
keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/1CD34B6CEDFC11EE880F6F58C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.167.186.0/24
IPv6:
2001:df6:bb80::/48
Signature Algorithm: sha256WithRSAEncryption
91:25:49:48:18:1f:bb:07:50:3a:74:5c:7f:1e:f7:88:14:22:
c8:e8:2f:5f:33:da:55:b6:53:da:84:f8:ee:92:22:a6:12:f4:
ab:36:92:9f:45:a4:52:b6:30:6c:b1:ec:1c:d4:61:5e:87:40:
81:b9:c2:ad:42:7f:3b:60:39:a5:bb:aa:6b:10:98:c5:f3:8c:
46:9a:9c:d1:c7:03:8e:72:16:82:10:f4:ac:1c:15:7c:88:ee:
a5:08:12:07:b5:0c:b6:97:e3:99:a8:2d:f9:ed:d9:88:6e:cf:
66:e5:e5:8e:c0:06:ba:aa:ab:fb:4f:f6:2a:8e:a0:a0:eb:2b:
fb:f1:01:dd:5b:9f:4d:2c:51:b2:77:d9:39:e1:c0:09:70:91:
8c:60:4b:f0:3d:48:66:5d:46:04:f7:23:8a:3f:93:b2:ec:b9:
bd:77:dc:57:78:90:86:c8:c5:ba:75:2a:61:b6:ae:eb:46:56:
86:8a:6e:f4:18:19:37:be:d7:22:de:9b:17:a2:ed:76:8b:e8:
89:db:fc:35:a9:91:3c:ac:57:5c:38:81:fb:9c:9f:d7:bb:0e:
07:0f:7c:b5:43:02:24:ec:da:21:58:86:e9:18:11:49:55:53:
78:d7:1e:f1:0a:93:34:b1:a4:60:ac:3b:9d:7b:01:20:a4:26:
12:19:a1:03
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4
MEFBNzM5QTEwHhcNMjYwNzMxMDQ1MzE4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZjMmEzZS0xYjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlhMU6bwrCZEqw1zYPiXL09dfbEmlCdDN96p1FPsDvL4CgVW9hzVtsLoDSrhZ
AE2RwwvnHDuhxmUEuxDgIUrkRd8IflE9u87NyNdXHb3hvmDvr3DuHb9SReb6Rrpy
ksA0itTzOuQFzTAHxSscne9QEoT5TZkAIddgCM+nqCjkKe6unkf8wP4k/EglVhfP
qicfp1ZG0xUl9gHuNpXWUiec6MOK+OJuDfoiARcoWI6809JKPQJPW45qoCdkXOjJ
eDxRIVY7ax7qPq/CttbobxXdSh2ToVRUapN+NmNye+GvSQApLS9WvzDxt1zh5zqX
UnTChWzSJP+aJsiCRgpdUqw0VwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFDEuDQoM
zyN324oGMJKZ6pJwCjS5MB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB
OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P
YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTExMkYvOTY0REM2OUFCQThEMTFFRTgyOEE4OTQ2QzRGOUFFMDIvMUNEMzRCNkNF
REZDMTFFRTg4MEY2RjU4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAZ6e6MA8EAgACMAkDBwAgAQ32u4AwDQYJKoZIhvcNAQELBQADggEB
AJElSUgYH7sHUDp0XH8e94gUIsjoL18z2lW2U9qE+O6SIqYS9Ks2kp9FpFK2MGyx
7BzUYV6HQIG5wq1CfztgOaW7qmsQmMXzjEaanNHHA45yFoIQ9KwcFXyI7qUIEge1
DLaX45moLfnt2Yhuz2bl5Y7ABrqqq/tP9iqOoKDrK/vxAd1bn00sUbJ32TnhwAlw
kYxgS/A9SGZdRgT3I4o/k7Lsub133Fd4kIbIxbp1KmG2rutGVoaKbvQYGTe+1yLe
mxei7XaL6Inb/DWpkTysV1w4gfucn9e7DgcPfLVDAiTs2iFYhukYEUlVU3jXHvEK
kzSxpGCsO517ASCkJhIZoQM=
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:59 2026 by rpki-client