
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa
File: 406928720A2411F0A2D02B4AC4F9AE02.roa (raw, json)
Hash identifier: WrfWrqSe34vKbxbu0CiEsKNesK9ErExa5RURIcivZmU=
Subject key identifier: 8B:CF:7A:EF:B0:C4:DE:BC:C5:FE:B7:9C:93:53:B2:AD:BB:1D:BF:10
Certificate issuer: /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial: 2969
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:10:06 +0000
ROA not before: Sat 26 Jul 2025 15:54:15 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 30058
IP address blocks: 103.196.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:39:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10601 (0x2969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Validity
Not Before: Jul 26 15:54:15 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a48f0e-0ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:04:5c:9f:46:9e:5f:ea:64:83:9c:10:8b:
3e:32:05:63:09:b2:a6:8a:78:57:71:bc:0c:35:42:
13:da:15:1c:e7:61:08:94:d6:29:98:ef:0b:ad:aa:
c6:a8:1f:50:5c:78:27:bf:e9:d4:e3:e9:b7:5d:99:
5f:cc:cc:33:e7:2c:e4:40:8c:01:0e:0e:4e:ab:86:
41:f7:1c:79:a4:95:e5:30:0f:15:6d:ed:59:3a:7e:
96:10:ff:b2:92:de:49:ad:94:46:ef:28:ed:a0:61:
42:1f:86:1e:ef:21:f2:e9:12:66:9a:77:30:c8:af:
b9:71:1c:e9:69:24:f3:ef:58:35:71:48:76:e1:52:
7e:ce:c9:47:97:a5:88:51:5f:59:b1:c2:56:38:85:
e7:bf:5b:57:2e:2b:9f:6a:6f:ff:88:37:f2:3a:70:
1f:f7:bf:1d:39:1b:26:5a:09:94:4a:80:1e:2b:3d:
c1:43:47:a1:95:c9:98:79:d3:fa:2b:41:28:b6:d1:
7a:5f:5f:09:9b:e9:ae:75:09:18:d4:9b:1b:1d:85:
b2:6b:bd:eb:8a:1c:34:b0:4e:a8:d5:a6:8a:b3:3d:
db:90:aa:ae:ec:0e:8b:71:70:31:6d:25:c8:32:ff:
50:3a:91:da:bf:7a:13:b5:a5:f7:e5:0c:43:74:7d:
fa:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CF:7A:EF:B0:C4:DE:BC:C5:FE:B7:9C:93:53:B2:AD:BB:1D:BF:10
X509v3 Authority Key Identifier:
keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/406928720A2411F0A2D02B4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.196.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:86:9a:ff:ad:2d:e0:93:6b:bd:a1:92:d6:da:d5:7f:59:5f:
04:1c:dd:fd:56:ed:91:43:b7:4e:4b:64:d0:1d:18:bb:67:50:
a1:47:52:65:f3:f1:98:77:4d:78:d3:59:ae:be:f4:3d:b5:43:
98:a6:8e:49:18:05:a6:48:10:0b:f5:0c:a4:19:8a:26:3b:00:
95:1d:f8:64:32:ca:9d:dc:70:a3:91:63:48:a9:79:62:3a:bf:
ac:9b:05:22:e3:18:e7:e4:e1:52:62:7f:c5:86:6b:23:d6:bf:
04:0b:a8:4d:76:67:fd:2c:a1:4c:cd:39:ca:14:74:85:71:22:
86:49:33:c0:43:46:35:7f:ef:fa:64:26:63:d5:76:d4:9b:d9:
47:eb:65:b1:d9:66:d3:2f:0d:96:ec:9d:84:85:5e:0e:9d:f0:
6e:bb:04:cc:e0:72:77:ce:f0:d0:28:d9:a9:1c:36:eb:67:60:
46:dc:69:b4:f6:e6:7a:62:52:04:40:3b:b7:4f:8c:95:ec:98:
a3:3f:4d:15:5b:bf:d6:ab:9a:7e:3f:20:ca:16:64:93:98:85:
bb:53:59:86:47:b9:49:69:df:c4:61:53:4d:4c:27:c6:e8:fc:
38:b7:71:ee:2d:ea:f2:68:96:93:eb:ae:6b:83:b3:04:9d:26:
f3:9e:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 23:44:31 2026 by rpki-client