
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/CDA4E0082E6511F19AB402C39E833773.roa
File: CDA4E0082E6511F19AB402C39E833773.roa (raw, json)
Hash identifier: rh39GitPC7cxp3eJsYGmMJX7W8w6fDSBPZHHe7mWb+M=
Subject key identifier: D9:71:40:63:DC:FF:D2:65:F5:BE:BB:7A:FE:D1:9F:EE:76:75:96:F0
Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial: 0E4E
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/CDA4E0082E6511F19AB402C39E833773.roa
Signing time: Thu 02 Apr 2026 07:39:04 +0000
ROA not before: Thu 02 Apr 2026 07:39:04 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 133854
IP address blocks: 103.111.13.0/24 maxlen: 24
2402:76c0:5020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:44:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3662 (0xe4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Validity
Not Before: Apr 2 07:39:04 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ce1d18-66e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:94:f1:cd:3e:04:75:7b:3a:06:04:a0:45:
ca:02:7d:41:d0:53:2d:5b:8f:b4:4b:eb:50:4b:1f:
4c:f2:ff:46:b9:6a:b4:be:d3:cf:28:a1:e4:21:2f:
da:e1:f2:56:5b:0f:d7:7e:94:cb:1b:ec:79:19:d3:
07:5e:f0:72:dd:fa:7c:15:91:b0:25:47:ce:f2:33:
02:dc:b7:bb:81:54:d3:6d:7d:4b:6c:84:8c:cc:83:
22:d5:68:cf:48:3f:c9:ec:9f:b1:ec:b7:2e:4f:9c:
d5:ba:8b:32:4a:34:cb:84:25:6d:82:9b:55:de:4f:
13:c1:0b:ee:8b:d8:d8:0c:d4:50:35:37:a7:1b:12:
e7:25:e7:f1:cb:50:00:1f:65:0e:8d:e2:7e:c8:d1:
bf:43:82:a0:84:e3:7c:61:29:d3:22:d4:f0:5c:37:
4f:37:80:83:f7:01:f0:c2:29:66:f1:f4:43:b1:90:
80:87:6a:90:d8:40:94:ab:cd:c7:f2:eb:92:fb:91:
7c:51:57:f2:39:54:44:a0:5a:f0:04:3c:1a:a7:1c:
3b:af:3c:00:e1:14:e1:bf:59:70:33:f1:45:a8:eb:
3d:b7:aa:8e:9f:29:e8:16:2d:39:b9:b3:12:e1:45:
87:bb:88:20:ac:25:c1:9b:2b:f9:b9:e8:4b:44:da:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:71:40:63:DC:FF:D2:65:F5:BE:BB:7A:FE:D1:9F:EE:76:75:96:F0
X509v3 Authority Key Identifier:
keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/CDA4E0082E6511F19AB402C39E833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.13.0/24
IPv6:
2402:76c0:5020::/48
Signature Algorithm: sha256WithRSAEncryption
a3:15:db:4f:d2:d8:fe:a9:9d:ba:9b:75:8c:4d:db:f9:fa:b3:
1e:50:e3:79:fe:eb:0a:1d:84:be:77:15:4a:df:8c:b0:64:6f:
91:9a:16:db:73:9e:7e:a0:2b:7d:6d:ae:4b:b7:8c:8e:a9:05:
3b:59:c3:7f:d9:12:88:69:c2:85:85:0f:4b:5a:3e:b2:e6:c0:
13:62:d9:c6:c2:ba:94:df:48:5b:c6:d4:38:d4:7f:12:37:be:
89:24:41:6b:5c:f2:29:18:8f:23:b9:bf:e2:82:64:b6:3b:3b:
a6:b2:47:4f:60:60:43:60:dc:0f:df:f3:53:67:11:61:b7:61:
17:fa:2f:f9:f1:3c:c0:c8:02:eb:8d:57:49:df:a0:86:4e:ce:
30:36:34:5e:4d:c1:c5:14:08:9f:1e:7b:81:c8:21:4e:b6:12:
6e:22:02:35:d3:7a:6a:1d:90:f7:31:43:36:38:4f:ef:41:aa:
21:1c:36:21:b5:ae:e5:b7:88:2b:6f:c5:3f:3b:84:f7:5e:cb:
d9:5d:f2:ea:28:0e:dd:6d:dd:b9:c2:cf:9c:e5:db:07:45:b4:
2e:fd:2c:34:cf:aa:30:7c:0e:bc:da:c7:67:13:7f:66:d1:fe:
6f:8c:02:93:7b:da:af:f5:94:c1:9c:96:c8:1f:76:5b:eb:b7:
4a:90:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:40:46 2026 by rpki-client