
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/97FAD4A25B2511F1B00235D7B6833773.roa
File: 97FAD4A25B2511F1B00235D7B6833773.roa (raw, json)
Hash identifier: CG/M1CgAwoe0x2eUcbFSAucdH4ccfac549wLJCugalo=
Subject key identifier: 2E:EF:B8:91:DF:6C:50:A1:ED:DE:26:EE:A4:5B:0B:73:AD:3F:A6:AC
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0937
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/97FAD4A25B2511F1B00235D7B6833773.roa
Signing time: Fri 29 May 2026 06:14:05 +0000
ROA not before: Fri 29 May 2026 06:14:05 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 147002
IP address blocks: 103.20.222.0/24 maxlen: 24
103.48.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 22:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2359 (0x937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: May 29 06:14:05 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a192ead-6c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:0b:32:1e:72:c0:7e:45:ac:a1:f7:99:54:
e0:30:cf:80:1e:bd:b2:29:a8:80:c7:e4:c4:2b:8a:
3c:28:d6:e0:fe:c7:61:48:15:71:29:c6:de:8e:aa:
01:b3:a8:19:e6:dc:89:90:2b:a9:50:fa:5e:b7:1b:
5d:16:91:52:e5:56:08:97:2b:08:6d:a7:2f:d4:ed:
b5:c2:3b:72:af:27:07:5f:bf:5f:8c:a2:d9:21:f9:
c2:db:ba:ae:80:da:4d:4b:e9:48:5d:d6:7f:e6:37:
9d:5c:24:f3:db:5e:94:43:a4:2c:7c:86:b3:76:14:
6f:56:73:3c:40:b2:66:aa:f7:92:25:7f:20:85:03:
ea:ea:a6:6f:78:2f:76:c4:bb:97:96:5e:c7:c7:2c:
f5:52:f8:11:db:5e:e5:b4:7d:86:a4:ed:0d:34:80:
d4:7e:14:36:23:ba:09:c4:9d:e7:a6:eb:f4:42:3f:
e7:e9:53:ff:5f:a0:be:1f:6e:50:23:bf:a0:b4:60:
c5:b9:15:ef:34:84:97:36:3d:2b:c5:a2:3c:8d:5b:
51:c1:4a:f7:fd:02:bd:6c:2a:fd:04:e3:da:bb:6e:
e8:ee:0a:7e:d1:07:95:9b:18:61:4f:2c:b4:a4:83:
a3:93:38:3c:02:2f:ab:d7:0d:9d:4b:91:b4:4d:00:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EF:B8:91:DF:6C:50:A1:ED:DE:26:EE:A4:5B:0B:73:AD:3F:A6:AC
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/97FAD4A25B2511F1B00235D7B6833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.222.0/24
103.48.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2f:b9:1a:fd:2e:7b:ed:df:14:8b:f7:e1:a2:58:53:e5:63:
c5:bd:16:72:60:01:05:38:a6:f2:0f:87:19:81:46:9e:2a:13:
a7:33:f1:41:94:51:55:12:ee:89:73:3e:6c:d7:a8:0e:7e:06:
24:84:22:33:99:47:7d:7e:3b:b1:91:b4:79:26:02:16:52:fd:
65:00:b0:e4:9f:a2:02:5c:73:d1:2c:93:90:e7:d5:bb:38:75:
49:4b:93:a8:c7:6b:de:73:d1:80:f9:53:b8:bd:50:17:17:84:
63:fb:55:0a:aa:49:24:44:47:dd:37:fb:95:a6:d3:83:b3:3d:
6b:bc:c6:2a:08:b4:4b:f4:3b:c6:de:f3:30:ed:b0:3a:79:e5:
d8:66:5b:ab:ab:5a:14:6f:a1:11:53:80:1c:09:8c:b9:dd:07:
ff:27:5f:80:94:52:13:83:07:16:a5:e9:6d:01:ce:1d:57:d3:
e1:7a:d3:31:50:62:cd:48:8a:06:20:68:5f:d3:d1:da:21:90:
61:85:c5:ca:30:a7:9d:84:1a:bf:e5:f7:5f:bc:ef:22:2b:bf:
d8:29:2c:f4:67:9e:3d:0a:c5:56:e9:44:60:f6:dc:6b:08:5e:
2f:3c:5f:31:af:b6:52:d8:24:0d:5e:c2:43:44:76:c3:af:24:
a9:5f:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 14:24:43 2026 by rpki-client