
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/0AC1EDE6D0C511EABB9E0868C4F9AE02.roa
File: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (raw, json)
Hash identifier: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=
Subject key identifier: AA:5E:E9:F3:91:CC:C2:9D:EE:3D:E0:AA:B6:F0:1D:8D:5B:FB:41:21
Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial: 08D4
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/0AC1EDE6D0C511EABB9E0868C4F9AE02.roa
Signing time: Wed 04 Mar 2026 20:27:16 +0000
ROA not before: Wed 04 Mar 2026 20:27:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198504
IP address blocks: 103.255.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 20:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2260 (0x8d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Validity
Not Before: Mar 4 20:27:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a895a4-c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1b:ac:44:f9:06:eb:0f:f3:ab:36:93:17:58:
06:15:8d:f0:bf:6d:77:ba:3c:da:30:21:0a:15:02:
f4:bf:3f:cc:bf:a3:a4:06:27:d4:6c:72:2f:25:58:
60:29:99:e5:a0:cf:76:63:8e:e3:14:c6:10:39:2e:
70:5b:e1:b1:4f:12:b2:9b:5a:3a:41:b8:b6:0f:42:
99:8e:95:b7:95:0f:eb:b8:2b:18:ba:b8:b1:fd:26:
33:b8:fd:1d:96:2a:cb:28:ba:a0:98:09:59:f0:8b:
ba:75:a4:24:7d:d8:9d:e9:ac:99:4f:ac:21:fd:16:
08:64:2d:1c:6b:15:c4:34:d1:a8:c8:94:5b:7a:58:
3d:40:db:5b:30:cb:4f:9c:81:6d:73:df:dd:be:d2:
3f:f5:a2:16:03:18:77:53:39:b4:2c:0d:81:2e:cd:
94:bb:5c:fe:f4:46:58:77:dd:a7:ad:e2:ce:a1:fb:
42:0f:6d:27:e8:f2:3e:87:96:86:54:b3:46:d8:8c:
a9:79:3a:7f:4b:1d:38:fa:50:ba:6c:a5:ac:d8:e1:
a1:8c:e3:92:30:64:81:a1:63:d0:4e:de:44:36:0d:
df:0e:b0:77:cc:54:88:48:8a:00:3a:ce:99:4c:bb:
ae:a5:03:4b:64:0b:1f:ac:5f:10:25:36:a6:3b:68:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:E9:F3:91:CC:C2:9D:EE:3D:E0:AA:B6:F0:1D:8D:5B:FB:41:21
X509v3 Authority Key Identifier:
keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/0AC1EDE6D0C511EABB9E0868C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.255.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5b:5b:88:4b:78:8f:48:9c:df:e0:b3:06:5b:71:4a:8c:40:
07:00:69:9e:8c:9c:1d:5d:b7:83:77:4f:62:50:da:5b:62:02:
93:3c:13:74:4a:a6:f2:6e:27:bc:00:b3:16:ea:db:c2:9c:77:
4e:5f:fd:b6:ad:ad:a2:05:41:00:46:24:93:f2:1c:7d:41:8f:
bc:0c:80:52:90:a7:5b:45:dd:4d:0b:3a:95:54:2a:f7:55:26:
cc:38:ba:a9:1f:70:51:65:e0:ac:6a:7e:49:84:e9:53:b5:44:
ff:75:9d:46:b6:eb:7d:5f:bc:65:cc:a5:aa:b2:f9:ce:76:58:
95:fc:eb:89:16:a5:6f:36:51:5f:cd:e5:5f:8a:75:da:ff:ee:
77:0d:20:1b:4f:99:5b:e0:bc:aa:be:b4:13:73:23:70:50:56:
64:b4:7c:0f:a0:43:45:50:07:c7:45:b5:b0:0a:72:d1:8e:b5:
94:48:4c:1b:36:22:7b:21:99:ba:51:6e:1e:31:65:c3:70:b5:
0c:b9:ad:c8:19:18:95:ef:f9:f5:d9:d5:2d:31:03:12:bd:d1:
5f:7f:18:22:70:05:4e:af:20:7d:9f:75:38:0b:64:1c:57:a0:
05:6e:e2:e7:a1:14:73:7b:f0:cb:e1:5e:7f:53:bc:0b:85:05:
32:8b:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:20:31 2026 by rpki-client