
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/C5C152D2F28211F0B78FCAB4696F56BC.roa
File: C5C152D2F28211F0B78FCAB4696F56BC.roa (raw, json)
Hash identifier: BXi41BPmYbwmPR7CH8efyQzZoCZh4MQESuU5TAzEzUA=
Subject key identifier: 79:41:03:44:31:D0:CD:D4:DC:E7:86:41:75:DC:11:F6:AA:B9:A3:98
Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Certificate serial: 0DF3
Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/C5C152D2F28211F0B78FCAB4696F56BC.roa
Signing time: Thu 04 Jun 2026 18:22:13 +0000
ROA not before: Thu 04 Jun 2026 18:22:13 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 135314
IP address blocks: 103.214.16.0/22 maxlen: 24
144.48.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3571 (0xdf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286
Validity
Not Before: Jun 4 18:22:13 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a21c255-19d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:1c:25:fe:00:63:49:f1:ea:0f:f2:47:5b:
80:12:dd:24:b3:e0:39:bc:07:6d:1e:35:a7:41:e5:
2c:92:92:b4:90:a7:23:c0:78:c0:04:c5:b8:18:34:
01:06:cf:6d:50:58:42:39:fd:69:a4:a7:84:67:e5:
1e:fa:47:10:70:85:42:1b:62:48:bb:ac:a3:c5:cb:
66:e2:d5:a6:1e:4b:15:e6:2a:c6:28:39:89:40:ab:
ce:6f:ec:1c:10:f0:7e:96:d5:43:3f:91:48:95:6a:
7f:95:0d:58:6f:4a:4a:b1:70:7b:8f:cb:03:b3:4a:
d9:9e:47:e4:ec:2e:30:dd:f2:fb:e4:b6:37:3a:b2:
d8:26:2c:9b:05:85:28:a6:30:80:09:db:ad:b3:15:
8c:21:5f:9f:b7:a3:22:95:7d:9d:d6:c2:6d:54:80:
12:db:2a:0c:e6:a2:09:52:cf:38:4b:69:7b:28:cb:
8e:fc:5d:6e:40:57:02:c9:db:7f:6f:6d:f7:f1:ea:
e7:c2:fc:20:33:a3:e4:42:9e:60:2c:94:f1:4f:88:
4a:e5:e8:f0:c8:fb:f6:96:d8:1b:6b:94:77:fa:19:
4f:53:0a:a4:2a:94:a3:9f:33:6d:57:2a:99:3b:c7:
9f:5d:c2:b2:08:57:71:4b:35:b9:78:5b:eb:02:f4:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:41:03:44:31:D0:CD:D4:DC:E7:86:41:75:DC:11:F6:AA:B9:A3:98
X509v3 Authority Key Identifier:
keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/C5C152D2F28211F0B78FCAB4696F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.214.16.0/22
144.48.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:19:11:a8:c9:e1:2a:00:b1:ab:2d:d4:cf:ae:bb:30:a0:57:
9e:2d:d8:f4:91:0b:cd:2f:01:45:51:16:43:26:33:e7:92:37:
a3:76:bb:c3:e6:c4:c0:4e:37:c0:11:6a:d4:15:66:51:cb:a4:
06:d6:6b:65:74:68:a1:13:50:7a:ab:3a:38:78:a9:5f:5d:cd:
97:85:a2:8d:cb:e3:73:6d:64:4b:1b:6d:77:21:09:ca:9d:70:
ff:d6:38:9c:ab:35:a3:9e:a0:76:ad:42:e0:58:45:86:52:e7:
9b:0a:10:28:6a:25:e1:3c:a4:fc:2e:c5:cc:71:a9:46:00:7d:
41:fc:3f:1b:f1:9e:10:bb:3e:2e:60:62:0f:36:f6:4b:3a:2f:
6b:a6:aa:da:e8:b7:04:19:e3:59:24:87:5c:f0:b8:08:42:b6:
68:16:cf:52:07:ce:3d:76:73:88:4a:2a:59:72:98:04:ff:9e:
28:1f:15:2f:58:78:af:09:d0:6e:0a:dd:df:42:1f:0a:b4:9f:
bd:84:f1:e3:62:f2:27:3e:0f:ee:11:d6:ab:29:0f:b4:ce:6f:
23:ef:f2:00:52:52:db:a7:9b:0f:c4:5b:59:c4:b9:89:91:0d:
73:8b:c8:8e:77:93:ec:17:90:81:32:ed:86:a6:fc:af:64:37:
de:d5:b0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:44:15 2026 by rpki-client