
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa
File: C611EE6CBCF711EEA90A1F1DC4F9AE02.roa (raw, json)
Hash identifier: Eq4c/k48Xd+1bpFV/2X77GWkY8FtTfrGNLYzXkN6+qg=
Subject key identifier: 1F:DB:74:B0:0C:BC:74:A7:81:15:C9:71:5B:AE:98:15:4D:F6:0A:24
Certificate issuer: /CN=A917E5DC/serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Certificate serial: 0600
Authority key identifier: 45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:06:18 +0000
ROA not before: Wed 12 Nov 2025 22:14:10 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 203963
IP address blocks: 103.31.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 22:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E5DC, serialNumber=452FABBDF09DDF7E55FD0F9DBDDD4278F44FB881
Validity
Not Before: Nov 12 22:14:10 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a463fa-af48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:55:f6:fc:23:62:9c:e3:e4:93:8b:51:73:
b1:b2:68:cf:9d:00:29:95:66:7a:62:34:ad:80:5e:
e6:65:fc:cd:7d:ef:9b:98:21:f3:ed:02:39:6f:15:
94:a4:eb:1d:80:34:8b:8f:77:de:32:a7:b3:5a:27:
44:f3:d4:f3:43:e8:22:ed:fe:5f:91:2f:4c:98:84:
eb:81:5f:73:60:ab:b9:9d:e8:54:60:86:a0:97:6a:
fd:40:b6:2d:4b:47:62:72:07:7e:b5:74:33:21:31:
aa:bf:b1:13:ac:3a:d7:cb:45:8e:38:d5:b5:36:f0:
7f:25:c4:63:5d:24:c4:22:ae:9f:be:43:41:f5:15:
db:03:d1:34:c0:75:85:86:c0:1c:fa:50:b2:fa:37:
80:9e:c5:32:b6:a3:e8:15:12:9d:11:eb:10:92:9a:
8f:c4:05:66:ce:50:a1:31:81:b5:e0:a4:60:0d:93:
a2:18:ef:b4:ac:fa:88:64:56:db:c9:5c:e4:d6:6e:
8e:e8:68:84:91:03:ee:77:a2:4a:a9:9f:0f:8d:08:
d7:9e:35:2f:0e:0a:5a:4f:45:73:a2:15:d3:0c:f2:
9b:0c:f8:51:cf:63:87:3c:a3:f4:82:2a:92:9e:aa:
e7:b6:23:84:b2:ff:be:d8:84:cb:cb:79:63:4d:dd:
67:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DB:74:B0:0C:BC:74:A7:81:15:C9:71:5B:AE:98:15:4D:F6:0A:24
X509v3 Authority Key Identifier:
keyid:45:2F:AB:BD:F0:9D:DF:7E:55:FD:0F:9D:BD:DD:42:78:F4:4F:B8:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/RS-rvfCd335V_Q-dvd1CePRPuIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RS-rvfCd335V_Q-dvd1CePRPuIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E5DC/BBE2B502F8EB11EBBEF5AA37C4F9AE02/C611EE6CBCF711EEA90A1F1DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.31.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:af:e8:0e:17:d2:de:e1:bb:94:1a:e4:2f:a6:4a:f9:9e:c7:
b4:d9:21:b9:e9:f6:d3:7c:29:e1:99:4b:ff:ee:db:45:a8:36:
e0:15:4b:a6:fa:78:f8:2c:b3:98:dd:85:6c:08:e3:92:db:d0:
96:dd:20:b3:3b:b1:89:ff:d9:d7:62:51:d3:9e:17:71:82:be:
0e:b4:fb:23:8d:1c:35:d2:15:2a:e6:9b:52:82:38:b0:23:35:
1a:ea:58:4a:52:8f:fe:f8:77:1f:1b:a9:b2:b2:ae:cf:67:3c:
97:c5:08:64:da:2e:8b:e7:71:75:04:6b:6e:02:21:e8:83:ba:
96:ae:00:70:70:c0:39:01:9a:26:db:5d:4e:04:d5:ac:97:1a:
1c:b4:5d:a9:8e:01:68:f5:01:9f:57:dd:45:54:96:69:b8:e5:
62:3a:60:f5:8c:c8:cc:27:b5:f7:88:44:cf:6e:56:7c:e0:b1:
7e:2d:74:c5:7c:28:d1:c5:12:5c:3d:1a:1c:07:9c:af:15:42:
16:0b:ae:16:c6:8e:9a:f3:ff:14:e4:66:d4:58:14:c3:7d:a4:
c6:dc:7e:7b:cb:8a:09:9c:06:ed:af:70:97:b3:2f:9e:a9:6c:
a4:25:c2:a1:59:65:71:04:2b:c1:0b:0d:e3:41:4e:12:3c:46:
a2:18:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:22:29 2026 by rpki-client