
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/C94C5FD4163911F1B9B26C9A3C3D8C67.roa
File: C94C5FD4163911F1B9B26C9A3C3D8C67.roa (raw, json)
Hash identifier: +zla8jcELBJaZ3BFgMyMqxEKvzL0rhi9mZn3jgAoW0s=
Subject key identifier: 9B:AA:4D:2A:8F:E2:DC:0F:45:22:70:25:E9:FE:85:4B:D7:C0:3A:EF
Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial: 0239
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/C94C5FD4163911F1B9B26C9A3C3D8C67.roa
Signing time: Mon 02 Mar 2026 13:14:47 +0000
ROA not before: Mon 02 Mar 2026 13:14:47 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 215748
IP address blocks: 103.120.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Mar 2026 02:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 569 (0x239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Validity
Not Before: Mar 2 13:14:47 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a58d47-1b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:a4:4c:5c:4e:77:86:1b:73:a1:5f:4d:0c:
2b:57:8a:19:76:36:04:80:7c:0b:bd:5b:ca:f3:30:
85:30:96:26:4e:e1:c2:63:7d:ab:e1:42:bc:06:96:
c5:fa:ec:23:29:da:f0:2f:f5:c0:89:f3:8a:26:76:
94:17:8d:97:8d:2e:e8:4d:0e:38:56:3c:f0:40:2d:
a2:d3:13:60:28:a1:83:4f:ba:fd:7e:26:fa:c0:50:
4f:c3:a6:ed:d1:d0:30:20:ac:ec:4d:a4:2e:ac:80:
90:52:b8:d2:4a:59:28:3f:4b:9f:4b:84:00:b5:5c:
52:b1:bf:8a:4e:a1:80:a2:07:d8:ed:34:bc:52:e5:
2d:01:37:e4:e8:bc:4b:41:cb:ac:cb:c7:64:0d:eb:
a5:d0:19:00:91:8c:22:38:02:c9:4c:6c:85:89:50:
2f:43:cb:75:7c:ef:98:05:4d:0b:0f:30:70:db:29:
7d:c5:a9:d6:db:91:7c:5d:cf:7a:be:3d:e1:cb:cb:
44:70:e6:50:3a:b4:a8:78:ff:75:8b:a1:7c:36:f2:
79:ef:fb:9f:07:d2:a1:99:20:a8:fa:05:46:a5:81:
d2:11:45:23:9c:44:3b:79:ff:0f:01:32:3f:39:cd:
53:8a:58:b9:0c:73:92:70:47:35:82:73:3b:52:75:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:4D:2A:8F:E2:DC:0F:45:22:70:25:E9:FE:85:4B:D7:C0:3A:EF
X509v3 Authority Key Identifier:
keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/C94C5FD4163911F1B9B26C9A3C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.120.14.0/24
Signature Algorithm: sha256WithRSAEncryption
47:5c:45:57:27:70:e8:a7:1a:1a:ea:3d:c1:39:7b:36:70:db:
eb:7f:17:4d:12:e9:05:e6:e8:4d:a1:2c:61:05:75:b7:4c:04:
f5:17:14:63:0a:93:41:26:f6:11:b6:5f:68:80:dc:0b:fc:cb:
79:68:ae:3d:c6:73:d8:5e:2e:25:9d:cf:e1:f1:92:56:09:76:
4c:e8:19:1b:96:55:42:b9:37:7f:21:d9:92:b2:77:86:c5:92:
e4:66:a8:7b:88:f4:e9:c1:68:57:1e:5e:7f:76:1f:42:8f:41:
87:e0:ae:3f:7f:0b:39:02:70:8c:ec:74:b0:c7:ff:6b:d4:58:
ba:51:bd:2e:cc:12:44:56:11:a8:e2:25:0e:70:4e:00:50:a0:
0a:8f:20:99:4d:03:9d:ba:5d:a9:89:96:19:47:35:24:10:0c:
1e:02:60:fa:d4:f5:88:3b:9f:70:d8:3c:90:67:e0:7c:ba:b6:
e8:c5:50:c6:18:bf:37:c8:89:ce:38:75:78:c4:75:04:e6:7b:
28:e5:c3:59:d5:c3:d2:6f:bb:27:d0:dc:2c:5f:08:56:41:bb:
66:eb:6b:20:d8:7f:f0:1d:64:31:9d:b8:8d:9a:75:d0:e2:a4:
25:56:51:2f:4d:44:0d:03:e5:32:7d:d8:79:e0:4c:c9:de:30:
ce:1b:fa:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 06:06:31 2026 by rpki-client