
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/CA585D04695611F1B5B78DB37347A888.roa
File: CA585D04695611F1B5B78DB37347A888.roa (raw, json)
Hash identifier: EnIugJVDnkN0xw63vZjfnJBWwmyS/wsHXlu1ZIgBl2o=
Subject key identifier: FD:6A:5D:4D:73:AC:F6:7A:53:F2:3D:3A:36:D2:32:ED:47:02:19:08
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 094D
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/CA585D04695611F1B5B78DB37347A888.roa
Signing time: Tue 16 Jun 2026 07:41:31 +0000
ROA not before: Tue 16 Jun 2026 07:41:31 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 40065
IP address blocks: 103.20.222.0/24 maxlen: 24
103.20.223.0/24 maxlen: 24
150.129.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 23:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Jun 16 07:41:31 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a30fe2b-895d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e4:b2:c2:3e:89:e7:c1:7e:07:cf:3f:c5:5f:
fa:9e:fd:3d:57:63:85:f1:b6:ed:94:0e:fe:cf:05:
9a:3d:ad:77:e1:5d:b4:bd:6a:28:99:c0:57:79:4f:
29:d0:ec:a2:60:b1:45:00:29:af:34:76:ef:5e:90:
a6:b2:8e:f8:25:cb:07:fc:14:df:75:10:c4:fb:75:
ef:28:6c:9a:e7:0e:fd:13:ed:47:ee:9c:3f:14:2e:
17:f8:8c:e2:a4:cb:04:4c:1c:51:8b:7d:be:95:fe:
a6:f3:64:71:6f:4c:cc:51:ca:34:d9:d0:45:7c:cc:
e3:1a:dc:2f:08:90:a4:e5:0a:ae:06:8e:75:1c:7e:
73:11:9d:57:a0:2b:93:8e:fd:07:4d:97:c1:c0:e6:
b2:62:f7:0c:5b:4b:be:c5:67:bd:22:59:63:56:83:
6e:27:94:7c:0e:f2:53:ea:68:ae:69:8f:49:4c:00:
61:c2:d4:d9:60:a5:d4:c9:85:71:88:2b:82:61:59:
fe:f1:cc:35:4d:95:0b:51:ef:6d:37:94:17:53:7d:
74:1a:91:c3:d0:8d:e9:77:a5:d4:c7:2f:ce:73:f3:
f8:d8:81:14:6f:3d:e3:81:d0:2d:a7:81:40:ca:39:
c4:9e:29:c3:be:15:81:3b:f3:99:dc:c2:78:ab:8a:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6A:5D:4D:73:AC:F6:7A:53:F2:3D:3A:36:D2:32:ED:47:02:19:08
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/CA585D04695611F1B5B78DB37347A888.roa
sbgp-ipAddrBlock: critical
IPv4:
103.20.222.0/23
150.129.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:85:e4:5f:86:1c:5f:ae:fc:14:fe:fe:b4:79:55:7d:a6:c2:
61:f9:99:74:2f:ce:1a:3a:a0:97:6d:f0:a0:33:0d:60:33:8d:
47:9d:48:40:8b:0c:41:23:e7:43:25:29:94:af:3e:8a:c4:38:
58:47:f3:5a:10:ce:1a:7d:b7:87:32:33:cc:f5:6e:67:1e:f4:
b1:58:95:e0:80:73:6a:c7:07:d1:2e:31:cf:cb:e5:cc:f2:63:
55:65:2d:74:36:a1:43:a1:fd:9f:50:26:a7:34:59:9e:e4:d4:
2b:eb:88:a8:14:a1:21:da:e0:77:1a:9f:f2:08:72:4d:65:7f:
05:4e:4b:f0:7a:91:8b:bb:f7:45:b3:40:66:c0:cc:95:0d:b8:
c6:aa:29:64:ca:43:bd:f9:04:4c:74:4a:d8:55:f1:75:c2:6e:
1f:e3:02:47:6c:3c:35:6e:ea:75:ed:18:e6:21:a9:39:bc:88:
dd:23:32:94:89:eb:e6:6a:06:24:26:e5:83:06:b5:dc:eb:4d:
ef:8f:b8:b4:4b:bd:ed:2b:93:79:40:9a:13:6c:4a:71:c9:23:
38:9e:97:a9:83:29:7d:17:2f:02:d5:33:32:f5:a1:26:91:8e:
a6:4b:fc:b2:49:aa:e8:b3:a2:9a:5a:74:ba:d9:89:f9:4d:95:
bc:07:6c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:33:21 2026 by rpki-client