
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa
File: 47C98CE6860911EFBACC1172C4F9AE02.roa (raw, json)
Hash identifier: /7Lcdfb2JDUY/DBEYjyc/CYWJ40s1FnlOxha6NSWATo=
Subject key identifier: B5:B3:F4:68:C3:AB:57:9A:40:17:15:29:0B:AA:E7:89:BD:32:65:B9
Certificate issuer: /CN=A911EB2D/serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1
Certificate serial: 0134
Authority key identifier: 7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa
Signing time: Thu 14 May 2026 20:24:53 +0000
ROA not before: Thu 14 May 2026 20:24:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140849
IP address blocks: 103.152.104.0/24 maxlen: 24
103.152.105.0/24 maxlen: 24
2001:df4:a80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl
rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EB2D, serialNumber=7A8AF24D78D7770DC339C2FF28FD7C14D13C5FB1
Validity
Not Before: May 14 20:24:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a062f95-ccf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:9c:46:50:28:90:71:13:7d:12:89:ee:99:
40:b4:58:50:11:67:4a:52:0e:e5:71:9c:8d:b4:b5:
eb:43:68:04:4a:c2:b2:ad:78:a9:a2:15:2a:41:1a:
0f:08:52:1e:e9:2f:0f:bc:2d:2d:23:fb:2f:83:6b:
c6:ab:78:ec:77:bf:08:2a:22:37:e3:35:39:04:3e:
ea:c7:a3:52:54:bf:c7:ab:3f:d8:00:93:81:2f:ce:
12:2d:c5:05:8e:48:d0:83:0a:ba:42:2c:0b:4a:be:
8f:f1:e2:6b:c8:3c:d3:8a:b8:df:ef:27:c2:66:da:
d6:18:64:80:11:7e:63:0b:fd:76:f0:46:74:38:eb:
02:f9:de:9b:3c:ab:80:81:f1:de:53:a4:c6:2b:6e:
08:b2:09:05:99:f1:30:09:5c:e8:25:a5:10:78:4a:
04:66:27:55:c2:0a:8d:36:c2:fd:c7:ac:12:4e:e6:
06:58:eb:d7:54:4e:39:9e:94:69:cf:41:80:6c:b8:
c7:a1:c4:1c:76:e8:8d:52:38:5c:b9:55:c7:1a:15:
8e:a8:69:ad:d0:c8:c2:38:94:41:bf:fd:8f:51:58:
2b:da:d5:12:8d:9d:45:7e:fc:ec:2f:71:c8:07:e1:
10:5d:15:a8:26:9b:a7:69:ec:6c:ae:81:0d:38:4d:
45:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:F4:68:C3:AB:57:9A:40:17:15:29:0B:AA:E7:89:BD:32:65:B9
X509v3 Authority Key Identifier:
keyid:7A:8A:F2:4D:78:D7:77:0D:C3:39:C2:FF:28:FD:7C:14:D1:3C:5F:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/eoryTXjXdw3DOcL_KP18FNE8X7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eoryTXjXdw3DOcL_KP18FNE8X7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/47C98CE6860911EFBACC1172C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.152.104.0/23
IPv6:
2001:df4:a80::/48
Signature Algorithm: sha256WithRSAEncryption
cf:f5:85:96:bb:6b:64:96:4c:bd:25:cb:f3:10:30:a3:bd:74:
29:c4:ef:0a:a1:cb:0d:28:7f:d8:34:11:b6:69:1f:c3:73:9d:
94:3a:f7:25:12:54:71:56:d1:9d:32:1e:7b:5a:58:c3:7a:e2:
be:48:11:84:c1:31:bc:ad:c2:d4:68:34:c1:58:05:27:7c:60:
f1:d3:ed:f7:f1:08:10:bd:8c:08:8d:4a:06:a8:34:f0:a9:da:
e0:64:c5:fb:a0:0d:94:f8:bd:21:0e:13:9c:fe:5b:c6:3f:0e:
54:6a:65:88:24:1a:2d:1d:e7:21:94:e6:18:22:0b:9b:83:59:
ed:9b:be:ad:70:bd:16:16:9f:92:a0:da:df:08:b8:d7:b1:e4:
e0:69:95:a4:96:8a:90:fb:7d:c7:b3:88:90:ef:b0:63:22:ef:
96:9b:78:bf:ba:b1:90:a8:2a:5a:4b:33:06:98:cd:78:74:66:
46:ff:c0:b8:4e:ec:c0:27:dd:1f:ba:7f:00:b1:86:7c:78:6a:
90:89:fd:68:7d:21:bb:0d:3b:3d:82:3f:4b:95:54:cf:b9:8b:
03:96:44:f4:eb:47:5e:32:48:b1:0b:8d:d3:ae:63:c3:e6:27:
1b:da:26:80:8b:cf:d3:d2:e6:44:cb:b0:98:4a:3e:1b:a0:a6:
5b:9f:bf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:14:24 2026 by rpki-client