
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa
File: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (raw, json)
Hash identifier: YVtrYDGmd8yOfEjEDc3TwfWzgRK6gay3J+4YbDTK/QU=
Subject key identifier: D2:8B:C5:8B:36:8A:D2:E4:CF:18:A6:F7:6A:CE:F2:1F:41:23:20:B8
Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial: 028D
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa
Signing time: Sat 28 Mar 2026 12:15:10 +0000
ROA not before: Sat 28 Mar 2026 12:15:10 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 138385
IP address blocks: 103.113.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 01:37:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Validity
Not Before: Mar 28 12:15:10 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69c7c64e-1859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:af:4d:84:c2:d5:8b:07:4d:30:42:23:e1:b6:
34:1d:c9:1e:54:7a:3f:e6:db:35:09:d8:54:c0:a7:
de:10:15:82:37:27:19:1d:d3:f6:c9:c6:e1:fa:40:
1f:54:38:26:52:dd:82:33:b1:1f:6a:94:4f:62:1a:
ef:5c:e7:51:60:02:be:c7:77:0c:a0:6d:f6:5a:47:
73:fe:b3:d8:ed:16:f0:2b:ae:9a:9f:09:9b:c5:a0:
15:72:4b:69:f8:f5:27:79:0b:7a:b6:a7:a5:bd:39:
99:d3:23:ec:57:64:d6:7e:cf:48:e8:a7:3e:f0:e4:
2b:69:4b:0d:b0:c3:9f:e5:2e:0c:56:f9:cb:f4:18:
75:3b:c1:c5:4e:aa:dc:56:31:8d:47:1b:1e:38:8d:
61:f6:a3:17:5a:d7:df:2f:f4:e3:c9:20:5b:77:29:
bd:40:21:12:92:46:90:92:ad:7a:2d:bb:51:65:f7:
e8:dc:91:04:f5:bf:14:6d:63:93:82:2e:f3:15:e4:
a5:ec:2d:ab:2d:b1:6d:fb:38:47:19:85:6a:95:2e:
b7:8d:c9:9c:df:25:87:d2:f7:8c:7c:52:9d:52:3b:
8c:83:a1:9a:ce:c8:e7:0f:c8:fe:a3:9c:a0:f6:04:
5a:a5:91:28:17:9f:5d:90:ad:5c:2f:4d:b3:9d:6e:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8B:C5:8B:36:8A:D2:E4:CF:18:A6:F7:6A:CE:F2:1F:41:23:20:B8
X509v3 Authority Key Identifier:
keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/C41C3B7C2A9F11F1AEE17D7A9B833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.113.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:db:dd:a0:3e:82:2b:9c:37:a3:66:77:df:27:fe:d5:46:3a:
9f:05:04:23:46:88:a7:6f:78:6b:9b:fa:04:72:72:59:b0:a2:
89:39:61:a2:3a:6b:57:0b:e7:1e:b9:4e:4d:cf:e8:30:21:cf:
40:41:e1:14:15:cd:e1:e5:26:5e:c0:95:c4:d1:35:ad:59:83:
a7:02:a9:f3:a6:35:59:e4:a2:65:48:17:37:1c:df:34:c8:d7:
b0:32:8d:26:ab:1a:b0:cf:63:39:96:17:34:33:a1:d0:9b:db:
ac:2f:cb:d2:3b:2a:35:34:2e:b2:1d:47:d4:09:a5:ca:de:bf:
57:e3:de:cf:b9:53:bd:77:f9:76:cd:d7:be:b0:5e:11:c5:d5:
a0:6c:e4:d2:cf:88:1b:61:7f:e1:ad:43:3a:39:1f:cf:90:34:
1d:5b:12:61:c2:ca:8b:80:98:e0:bb:a4:f2:ec:22:b6:ef:4f:
ee:4e:c8:8e:83:4a:0c:a6:b6:01:28:61:22:b1:7f:f9:93:15:
de:e9:22:14:f1:24:fb:01:db:7d:34:7c:c8:d8:53:c4:0f:91:
68:70:d7:d1:91:12:7d:65:92:94:fd:ca:fa:74:52:f5:fc:c2:
18:99:62:cc:55:01:16:1a:67:9f:f3:e0:ac:f7:a3:3f:f0:65:
95:c4:9f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 12:03:09 2026 by rpki-client