
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
File: A155AE68315611F0B557CE7CC4F9AE02.roa (raw, json)
Hash identifier: KqKf+v1xP+tdZnoxxwJKlPYp9JaK03zEbt6pm0igT4s=
Subject key identifier: C9:11:39:54:F0:62:48:2A:71:6A:05:8D:35:93:B1:9B:2D:8C:55:8F
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 0999
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
Signing time: Sat 10 Oct 2026 22:43:47 +0000
ROA not before: Sat 10 Oct 2026 22:43:46 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 140630
IP address blocks: 103.209.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 22:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2457 (0x999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 10 22:43:46 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acabfa2-5628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:08:8a:73:61:1c:03:0f:ae:35:d8:55:d7:
29:9e:d6:43:7a:1a:05:fc:54:72:7f:1b:37:f4:cf:
d2:76:92:03:fe:50:8d:a4:b3:93:cb:60:59:3e:59:
54:f7:e7:2b:03:74:2d:48:f8:ea:a4:62:46:a2:62:
9b:ce:2c:93:73:7f:db:ba:98:e7:d6:23:0a:63:2a:
dc:84:39:81:c9:39:ff:5e:0d:2f:aa:a1:7a:42:eb:
1b:fc:f3:4a:c9:75:ce:b4:29:3a:f6:7f:b1:6e:6b:
f3:5b:5b:5f:68:0f:ef:9f:e1:12:97:50:bd:f4:9f:
76:99:da:4a:66:a6:c9:7d:b3:a8:dd:e4:30:7d:c5:
a2:7e:27:9d:07:9f:c2:72:19:4d:64:db:f5:ec:91:
68:0c:d8:dd:ec:d0:c9:7e:d5:65:4e:fa:fb:75:9c:
f9:21:02:bd:c3:a3:f3:b6:22:ea:00:ff:c1:bb:54:
b7:21:4a:50:dc:5f:62:9e:1e:49:03:ea:aa:01:f5:
f0:93:11:e0:2b:86:b8:95:62:31:46:ad:6d:06:13:
38:ec:a2:ba:1a:43:03:a2:0c:f1:8b:96:5b:1a:7a:
b0:f2:f5:c6:90:0c:ce:05:65:96:31:52:e4:b9:50:
80:3e:f8:5a:97:b7:28:bf:d4:22:7b:0a:84:a2:0f:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:39:54:F0:62:48:2A:71:6A:05:8D:35:93:B1:9B:2D:8C:55:8F
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.235.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:76:5d:ae:d5:f3:04:be:79:60:9a:55:12:15:76:ee:24:06:
36:29:3a:eb:87:5d:02:7e:b5:88:b8:cf:c0:f0:d0:ca:c2:44:
d1:1d:66:6b:ee:4b:5d:45:93:63:18:d7:b7:46:ab:ba:5f:7d:
48:4d:b0:33:0e:c1:dc:c5:43:18:71:ab:84:2e:7b:a2:84:27:
54:ce:0e:d0:b1:05:00:f4:ce:c7:31:be:c1:16:0c:10:97:fb:
cc:20:3a:82:3d:48:65:fd:84:5b:08:a2:9b:1e:80:54:39:60:
aa:a3:7f:ed:c4:b7:97:fb:07:66:bd:0c:4a:b6:5f:bf:5b:34:
e3:de:cd:7c:bb:b2:d8:b8:80:32:89:70:f4:87:91:c4:e0:f4:
21:79:83:bc:f7:46:08:5a:11:c4:06:f6:41:50:ee:e8:df:dd:
b6:98:26:32:28:97:fc:67:4b:03:26:1b:bc:42:f8:be:ed:86:
15:5e:48:58:ac:73:d0:8d:1b:06:57:d6:18:44:bc:c2:34:88:
e5:42:e3:09:a9:f8:fc:50:f4:29:67:ac:a0:63:4f:63:1d:c4:
ba:a6:72:52:3a:0c:6c:44:d8:6e:68:2b:9e:2d:3e:4a:59:17:
5f:46:59:fe:f9:9b:92:a1:e8:cd:0b:b7:37:84:c5:e3:28:e9:
2d:30:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:43:17 2026 by rpki-client