
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/DB21824E24D411F1AAE44A56AB833773.roa
File: DB21824E24D411F1AAE44A56AB833773.roa (raw, json)
Hash identifier: 8GyDfBA1IZDhkRGLkiUjHXF95KxrCV2FUfNeUOQyYBE=
Subject key identifier: BC:71:30:5B:3F:BB:3B:84:1F:68:C2:18:B8:2E:05:03:87:BE:7F:02
Certificate issuer: /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial: 01C6
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/DB21824E24D411F1AAE44A56AB833773.roa
Signing time: Sun 03 May 2026 04:36:57 +0000
ROA not before: Sun 03 May 2026 04:36:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64200
IP address blocks: 103.111.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 May 2026 22:28:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Validity
Not Before: May 3 04:36:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f6d0e8-4970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:df:aa:38:e9:fd:9d:38:ca:af:16:11:68:
bf:b2:13:09:8a:61:5f:69:fa:c3:89:96:05:71:e1:
ab:d8:47:94:35:1d:6f:b5:26:7a:4b:77:99:51:05:
1f:c2:21:ae:e9:00:77:93:ec:08:b3:b0:09:19:5f:
a8:c3:03:d4:2d:ec:c0:74:a6:a7:bd:a7:75:dd:31:
99:94:22:10:3b:bf:71:ef:61:f5:4f:0b:70:b4:0c:
90:21:c0:9f:6b:b8:fb:84:5e:e1:f8:a3:11:e5:e6:
8f:a3:b0:f6:9e:9d:90:62:55:26:d0:61:36:fb:9c:
3d:22:1d:de:da:aa:42:d4:c2:04:3d:e3:7b:65:ea:
8e:5d:16:70:52:85:83:15:4d:c6:2f:43:c8:14:5c:
56:e5:84:58:00:fd:f5:8b:10:14:d6:b0:e2:3c:11:
da:86:a9:1c:b3:29:a6:78:f8:52:26:ca:bd:33:c0:
0b:92:c0:0e:8b:f0:ad:79:6d:9e:32:bc:82:64:5b:
10:a7:e9:17:e9:19:1e:ff:49:b1:28:59:a9:02:2f:
7e:ba:0b:33:98:ab:67:07:89:15:8b:82:42:f2:21:
ee:87:d7:eb:0a:1b:17:9e:49:f6:77:06:4d:1b:25:
55:b0:3d:4a:7c:5d:b8:05:ab:10:c0:c2:2a:63:c4:
54:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:71:30:5B:3F:BB:3B:84:1F:68:C2:18:B8:2E:05:03:87:BE:7F:02
X509v3 Authority Key Identifier:
keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/DB21824E24D411F1AAE44A56AB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.60.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d8:80:f1:11:04:2f:f3:d9:0c:3f:5e:b7:b9:64:fb:78:db:
ec:2a:05:92:bd:08:2c:dd:78:7a:c6:ed:ee:74:23:1d:0c:05:
e7:cb:ca:24:74:af:cd:0a:b3:d0:14:0d:6a:9e:e0:de:6b:fb:
14:52:56:c2:f0:6b:76:ef:35:e1:22:fb:17:e5:df:ce:a3:67:
67:32:c5:1d:78:ad:18:07:6c:0e:37:13:89:ab:52:9f:49:fc:
dd:98:4c:2b:8e:71:5c:ab:1e:dd:7d:20:9a:86:e9:e0:0f:74:
cb:a3:5e:44:98:fe:73:e6:7c:a5:c4:eb:91:d7:f6:6d:78:5d:
ee:88:ce:03:2e:8a:77:29:e6:dd:53:03:a5:e0:33:8c:5a:fa:
49:f4:0e:45:b9:92:fa:f4:96:56:50:ef:22:ab:2b:1e:b5:13:
1b:fa:9b:f0:a6:a9:c7:a7:b3:d5:21:55:2d:72:45:53:63:90:
41:83:81:52:fb:e2:c1:c1:0a:32:d6:c0:ab:ff:60:40:3a:56:
e7:83:ac:9e:78:51:97:98:6a:90:27:d0:f9:98:e1:f8:5a:80:
f7:2e:a8:95:b7:37:3f:88:69:cd:82:fc:01:e6:89:e9:c3:f6:
fd:5f:93:42:ce:7d:83:ff:e8:b5:30:29:8a:49:a3:3a:3b:bb:
4e:57:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:15:32 2026 by rpki-client