
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa
File: 41C460BE1BE911ED81DB667EC4F9AE02.roa (raw, json)
Hash identifier: avd1BRD3UmGj21dyPoHC4i5mdB/6dCsth0FrDgLd998=
Subject key identifier: 4F:B8:F4:E8:C2:8C:C0:DD:B0:F8:2D:2C:EA:16:A6:FE:FC:54:32:52
Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial: 03EC
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa
Signing time: Sat 15 Aug 2026 00:49:19 +0000
ROA not before: Sat 15 Aug 2026 00:49:19 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137967
IP address blocks: 103.189.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 00:15:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1004 (0x3ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Validity
Not Before: Aug 15 00:49:19 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a7fb78f-4d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c3:58:18:cb:97:02:f6:d3:9f:66:59:7f:0b:
19:f2:25:e0:c1:f4:75:bc:69:37:7c:71:70:12:d5:
56:d9:0f:8f:2d:0d:df:ce:5f:03:e8:25:a3:62:d0:
e8:34:d5:74:9e:2a:c3:f8:81:5d:e2:0f:8a:bd:99:
6b:76:c4:75:e6:09:15:9b:f5:e0:1d:d6:e0:0b:e6:
32:54:f4:9a:a4:f4:b5:f1:ab:8e:7d:8b:1d:51:69:
44:2d:a2:11:2e:9e:f9:9b:b4:b0:6d:e1:d2:35:3b:
a5:ed:5f:4b:e4:ee:0f:15:0d:36:66:93:04:d9:83:
b1:f1:19:db:1c:ff:66:63:e6:9e:bf:d0:31:72:7e:
0e:1b:fc:b9:a2:d2:51:df:8b:43:12:0d:aa:5b:42:
4f:60:c4:29:20:63:bf:05:18:bf:42:a9:d3:26:70:
6f:1e:ef:7e:9a:e4:42:5c:09:b8:d1:4f:7b:5c:f7:
69:9c:4e:3b:cb:85:14:41:bb:15:51:9a:ca:dd:50:
15:36:ca:dc:9a:df:5a:bd:3d:c1:0d:ab:a9:3e:3e:
c8:72:1c:72:cf:77:67:12:12:e4:02:08:18:99:c1:
4d:7a:65:0c:40:03:32:4f:fd:83:7d:77:5f:f8:68:
48:53:cc:3b:22:3d:9c:31:bb:ea:c7:73:a3:7d:3e:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:F4:E8:C2:8C:C0:DD:B0:F8:2D:2C:EA:16:A6:FE:FC:54:32:52
X509v3 Authority Key Identifier:
keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3a:d4:28:a9:ab:2a:ae:8b:40:26:bf:59:61:7f:98:90:b1:
4e:e5:fe:3f:f7:e0:c0:a7:70:97:22:90:58:cc:0a:bc:76:2b:
9b:d5:b4:51:7f:0f:4c:3b:09:f7:03:72:e7:91:a0:9e:46:90:
37:96:d8:f4:37:b3:bd:79:16:0e:e2:08:d8:16:f3:bb:7d:cf:
29:96:9a:df:58:2b:4e:ef:85:6c:2e:9c:60:81:9a:2d:39:e4:
d3:4a:40:32:55:c6:3e:83:88:84:d8:ce:a7:6c:ba:ae:0b:84:
dc:dc:25:2b:fc:72:00:37:2c:92:77:f9:ca:70:b4:9f:81:31:
25:45:c6:8e:cf:1e:5a:ff:3e:d1:f4:81:0c:5f:e1:7e:51:42:
42:bf:27:86:a0:bc:90:d9:87:fe:db:3f:94:27:89:23:f5:76:
ed:cd:63:ca:60:f2:7f:77:3b:79:88:d0:08:53:a0:ee:d4:72:
b3:7e:13:2d:50:64:1c:a2:f1:b3:5b:e2:19:72:c8:1b:e8:2f:
dd:73:f6:15:33:5c:70:1d:bd:5a:af:67:a8:8e:99:e8:d5:06:
05:0f:fd:02:6e:f9:c6:3d:35:87:53:c2:68:c7:89:de:71:95:
af:20:3e:78:18:a6:3c:74:46:c3:b1:ab:51:6a:10:11:b2:16:
b4:c4:54:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:14:46 2026 by rpki-client