
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa
File: 4A30B41CC09F11EEB2E48256C4F9AE02.roa (raw, json)
Hash identifier: 5mtV+GZhfJ6PMTVF6cgNLYEzmHzrnANYvKeDRcQ91o4=
Subject key identifier: 68:E1:31:5E:D0:25:F8:85:65:B7:12:0F:27:AC:0F:F5:76:C0:49:98
Certificate issuer: /CN=A914A2C1/serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Certificate serial: 01FF
Authority key identifier: A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa
Signing time: Sat 03 Oct 2026 04:52:34 +0000
ROA not before: Sat 03 Oct 2026 04:52:34 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 151678
IP address blocks: 103.23.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A2C1, serialNumber=A3154EC71AFF0CEC368C796D257C3A9C0589A3FF
Validity
Not Before: Oct 3 04:52:34 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac08a12-48a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:a2:f3:88:d0:85:2a:8d:0e:4b:a9:ed:03:
18:1b:45:fe:c4:5f:50:e3:8d:bb:8f:95:bd:b4:a9:
ad:0e:65:fd:72:d9:45:61:3b:5a:d8:e5:e4:2c:54:
4b:04:c9:3d:31:c8:f0:ee:80:65:14:4b:7a:85:fd:
ca:ab:6e:69:4e:2a:34:35:8c:c4:7f:52:de:a9:1c:
7e:09:9a:21:8b:37:6c:45:84:30:3d:bc:ac:06:e8:
72:89:08:9f:3e:6a:2c:b2:c5:1e:69:6b:cf:f0:23:
5f:fa:e4:d8:32:c3:ee:9a:c3:20:d2:69:d5:b3:4f:
94:5d:9f:d5:41:6f:90:61:ac:7e:5f:0d:d6:22:b1:
c7:d7:98:2a:ac:32:05:8f:12:3a:de:7d:89:41:a9:
91:5b:7a:c8:69:66:2d:72:08:63:fd:02:0a:a3:4d:
ad:02:c4:51:ba:3a:9d:8b:06:70:dd:cc:a2:ca:23:
48:f1:dd:76:20:de:dc:8a:e9:c8:f1:25:f6:df:84:
97:bf:94:6a:30:96:d9:ab:e8:74:3b:67:2b:c4:36:
d2:88:f1:8b:b6:ab:2e:4d:77:5a:3a:e0:f9:36:64:
6b:a6:de:bf:01:7d:70:5f:9a:19:57:3d:72:28:86:
ed:b0:23:0b:5d:3e:4e:b0:6d:5b:c2:09:aa:99:18:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E1:31:5E:D0:25:F8:85:65:B7:12:0F:27:AC:0F:F5:76:C0:49:98
X509v3 Authority Key Identifier:
keyid:A3:15:4E:C7:1A:FF:0C:EC:36:8C:79:6D:25:7C:3A:9C:05:89:A3:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/oxVOxxr_DOw2jHltJXw6nAWJo_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oxVOxxr_DOw2jHltJXw6nAWJo_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2C1/7FFDFB64C09E11EEAD3B8554C4F9AE02/4A30B41CC09F11EEB2E48256C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.23.94.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1f:9a:88:9f:0b:96:d9:34:c9:10:84:bd:f8:ca:44:ce:ca:
0e:ec:c8:7d:05:68:43:d9:0a:c5:eb:e0:cb:27:dc:d9:c8:78:
60:47:33:d7:71:1a:0d:c3:92:c0:96:f1:39:f9:02:8e:6a:76:
4f:ec:d1:47:a3:4a:06:8e:2e:67:20:94:29:7f:4c:57:d9:35:
ec:7c:cf:7d:01:7b:2b:c4:2d:08:76:32:66:df:1e:63:9b:a5:
7c:cb:74:01:b2:8c:3f:53:14:d7:56:ac:5f:8c:d8:62:88:a7:
53:85:ac:5c:1d:aa:7e:b3:fc:d9:b2:de:bb:89:08:e4:73:b0:
14:d5:b4:2f:3f:36:63:5e:40:e3:65:b1:70:2b:3e:f9:d4:57:
e7:4b:a7:1a:fa:10:29:c0:fc:a2:57:92:42:09:67:28:7a:4f:
2f:f9:1f:24:05:39:86:ba:98:57:0e:98:d5:5e:f7:9c:19:d4:
68:d6:60:fd:f3:9c:96:02:92:db:38:f0:87:17:32:4d:64:d8:
df:38:cd:19:3f:3f:44:4a:1b:8f:8f:32:ee:35:4e:5b:a3:a6:
3a:66:3d:2e:7a:73:16:c6:82:d7:a4:89:2d:0e:62:ab:54:fe:
05:a7:63:0d:8e:2d:07:b8:32:88:c3:72:fa:34:7d:78:04:96:
52:46:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:24:32 2026 by rpki-client