
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4953C028C13A11F0B7555663C4F9AE02.roa
File: 4953C028C13A11F0B7555663C4F9AE02.roa (raw, json)
Hash identifier: azXfIFcWznJdcfz2Tut0Wi0gwmcY2B86Fw4E7iLjlm0=
Subject key identifier: 7E:07:8E:C5:C6:46:BB:07:48:07:CF:6E:63:2E:03:AF:92:BB:38:B2
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 029A
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4953C028C13A11F0B7555663C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:14:55 +0000
ROA not before: Fri 14 Nov 2025 09:14:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 401783
IP address blocks: 103.86.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 01:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Nov 14 09:14:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4740f-b6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:f3:f7:45:f8:78:07:af:2b:c8:6c:fa:7f:
53:2b:32:7d:f1:f9:77:c2:e5:ca:87:71:7d:bc:9a:
ed:67:eb:f5:49:39:2b:13:76:97:42:9f:b9:61:7b:
3b:fd:db:0b:51:09:ba:69:dd:44:78:99:e8:17:8b:
fb:6c:7d:2d:0a:3a:a8:70:c1:7a:50:12:71:fc:ec:
93:0c:be:54:51:82:87:c6:eb:02:b5:fd:f1:2e:66:
b6:74:20:20:60:b0:7f:ea:43:ec:6b:58:f1:67:61:
55:7d:0f:81:5d:d4:e7:0f:30:53:a2:d2:9c:41:95:
77:31:e5:e1:6d:32:d8:07:8b:53:15:b0:30:65:1f:
fa:50:9f:b4:32:45:22:a5:30:ed:74:5c:23:97:de:
e3:56:d2:b5:84:39:ee:24:f5:70:01:40:ae:81:ec:
ab:98:e0:f3:cb:19:2d:17:1d:6a:91:4f:b1:58:24:
38:3e:29:3e:f0:ad:4c:26:48:8c:57:90:43:32:75:
4a:ef:d2:91:2a:c2:77:90:11:b5:24:87:8c:17:28:
d3:39:87:fc:bd:b2:4c:aa:f3:b5:59:53:d1:33:06:
28:71:9e:a7:ea:9b:57:28:3a:6c:24:1f:d4:01:cd:
f6:0a:2a:23:80:92:cd:7e:d2:64:9d:03:a5:6c:a3:
11:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:8E:C5:C6:46:BB:07:48:07:CF:6E:63:2E:03:AF:92:BB:38:B2
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4953C028C13A11F0B7555663C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:90:9f:03:35:c5:02:7f:fa:96:f9:6f:74:2e:27:a4:8e:6a:
c4:a6:e0:b1:4c:74:5b:9d:12:4e:22:44:13:f1:dc:75:6d:9a:
69:14:2b:00:a9:ac:a8:3b:8c:ba:2b:9d:fd:60:69:8d:0a:79:
e2:98:79:19:8d:d5:f0:65:26:f2:c0:63:59:b0:da:7c:fe:1e:
27:5c:c2:fc:45:e4:1c:11:c6:4c:30:26:19:14:15:dd:13:5f:
da:81:2f:99:91:8c:f7:f3:70:a5:fb:4a:8f:75:e9:07:bf:10:
9d:83:a6:13:be:8a:ca:df:85:f7:31:38:d5:a0:dc:6e:13:0a:
58:ab:0a:be:67:96:0b:5a:a1:f2:b5:61:5e:79:04:db:6e:dd:
86:59:d0:90:49:64:3f:00:f0:f2:0c:ae:ae:09:e4:08:59:fe:
1a:72:65:c7:a3:30:2e:c8:ba:37:b9:e9:18:c1:9e:ee:f0:b4:
6d:06:c1:e4:33:22:7d:bf:f7:6f:0d:8b:8d:23:9c:26:a2:3a:
47:0b:74:62:6c:d7:23:e8:57:47:8f:25:54:8e:4d:8e:89:e6:
63:bb:e2:89:da:82:86:37:69:39:71:c3:45:2d:13:0f:c7:1b:
65:c8:9d:0c:64:54:33:2a:12:96:15:3e:5d:fe:49:23:19:c1:
02:ab:4d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 14:06:46 2026 by rpki-client