
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24D6C7C4F1FD11F0B766F66D486F56BC.roa
File: 24D6C7C4F1FD11F0B766F66D486F56BC.roa (raw, json)
Hash identifier: tqtw4ZzPM+7v2OXL4ee9j+OhCHpdq+ETgmzVjNEKuZM=
Subject key identifier: CA:0F:D0:CE:C7:A2:AD:E9:4D:37:B4:C9:D1:1D:DF:3E:37:F3:D4:9A
Certificate issuer: /CN=A919D64D/serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Certificate serial: 35DF
Authority key identifier: C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24D6C7C4F1FD11F0B766F66D486F56BC.roa
Signing time: Sun 04 Oct 2026 15:10:25 +0000
ROA not before: Sun 04 Oct 2026 15:10:25 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 138985
IP address blocks: 103.255.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13791 (0x35df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D64D, serialNumber=C4220F50355647B7C80B2CE8BC7126AAC2E22D37
Validity
Not Before: Oct 4 15:10:25 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac26c61-ac03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:9a:18:86:09:8e:22:96:95:33:55:c5:44:
d7:5f:bb:a0:32:85:59:05:5a:7f:6e:bd:13:8c:12:
ed:63:7d:a8:69:08:f1:20:ec:38:da:ec:d0:d3:6a:
fd:65:8e:ff:13:1b:d7:52:85:43:2a:d1:f9:a5:ab:
e1:49:73:bb:db:ac:da:ca:a7:bf:e4:a5:89:56:7d:
ba:ee:26:a5:cb:c1:0e:d8:dd:07:8f:f8:8b:48:c0:
36:e8:da:b7:13:8d:75:95:24:b1:93:9d:5e:99:a6:
15:a1:9c:bc:97:1c:26:b8:47:0c:a6:c7:d4:84:c2:
27:70:5d:f0:24:02:1f:08:ed:a6:2b:5b:cb:af:09:
81:13:fd:15:55:0e:ec:86:d0:e2:69:3d:91:8f:21:
d7:2a:79:f4:ed:f5:40:2b:04:cb:4f:3b:f3:e3:78:
8e:b9:dd:f0:e8:94:fc:9a:af:41:1e:ba:70:f0:4d:
ad:0c:04:8b:ba:29:ef:7a:32:04:27:03:7b:a9:2d:
83:70:71:03:f9:b9:e5:31:f5:1e:8a:a3:a6:37:bf:
e5:87:6d:c3:2f:d6:7d:63:05:a8:d1:d2:dc:0e:a3:
95:3a:96:34:92:35:ee:d6:38:2c:37:55:ad:f7:c1:
c4:f6:3f:5a:0b:a4:ff:63:65:6c:68:22:be:2d:6b:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:D0:CE:C7:A2:AD:E9:4D:37:B4:C9:D1:1D:DF:3E:37:F3:D4:9A
X509v3 Authority Key Identifier:
keyid:C4:22:0F:50:35:56:47:B7:C8:0B:2C:E8:BC:71:26:AA:C2:E2:2D:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/xCIPUDVWR7fICyzovHEmqsLiLTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCIPUDVWR7fICyzovHEmqsLiLTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D64D/D9333FE41D6E11E2A85080B008B02CD2/24D6C7C4F1FD11F0B766F66D486F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.255.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d7:90:e9:8f:a6:b2:93:e3:19:fb:77:6c:4b:07:57:fd:93:
d5:4d:67:28:22:2a:b3:40:4c:c9:d7:29:39:be:47:55:b9:05:
ef:d1:6a:23:35:b3:a8:84:d2:1d:6d:3d:64:8a:1f:a1:a5:42:
3b:23:f5:df:17:b2:70:fc:36:a1:01:5b:17:ee:7f:d1:aa:d5:
5d:5f:fb:fa:ae:98:d7:ed:e2:dc:87:51:04:87:3f:0c:c0:c5:
f2:58:c4:fc:36:6e:3b:f3:1d:1d:a5:15:9c:6f:30:8f:2d:ff:
a6:21:64:df:2b:70:fb:5d:85:ff:0b:1a:2a:0b:46:50:40:a3:
fb:03:01:be:a4:03:81:58:c3:69:2d:8c:01:7b:1e:0f:d7:bb:
a9:d9:cf:4b:e6:6e:68:b5:fc:7c:14:9a:c1:1d:b0:d6:92:47:
32:7a:31:34:94:5a:3d:89:e0:24:4d:e1:a2:92:bf:80:99:75:
33:c0:b5:51:49:e2:d0:fa:be:22:67:bc:b7:d4:32:33:5f:dc:
f9:4e:b1:34:0c:df:f5:a2:a5:19:31:d1:27:3e:6b:48:5d:1a:
20:55:94:58:af:50:b3:d7:b0:70:a9:34:d3:14:d6:fe:3d:79:
8b:fc:4b:46:6a:40:96:2a:51:d9:b0:af:27:d4:c9:fd:6d:7d:
b5:50:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:24:19 2026 by rpki-client