
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F43C06002CDB11F1BC42816D9D833773.roa
File: F43C06002CDB11F1BC42816D9D833773.roa (raw, json)
Hash identifier: JW540ZtAWiXpZ1q8haC7YUAsDjMInYnmK4k2CEDxvw4=
Subject key identifier: 06:57:4B:D2:38:2C:E3:A3:C8:2F:2E:B9:EC:A7:03:79:7A:6B:D7:F5
Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial: 0277
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F43C06002CDB11F1BC42816D9D833773.roa
Signing time: Tue 31 Mar 2026 08:31:04 +0000
ROA not before: Tue 31 Mar 2026 08:31:04 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133112
IP address blocks: 103.74.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 631 (0x277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Validity
Not Before: Mar 31 08:31:04 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69cb8647-5bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:8b:02:7e:1f:53:76:e8:f0:25:b4:7a:0c:
2e:db:3a:9e:88:73:32:82:40:a2:0d:9e:fb:11:ce:
82:aa:af:68:c3:e6:5a:fa:69:57:c2:21:9e:89:ce:
09:e7:8f:26:ca:a8:90:1e:c2:b3:b0:b8:0f:cc:cc:
2b:76:59:17:f3:6d:44:88:c3:bc:d3:1f:42:e4:be:
16:84:f1:6f:2a:d0:2d:5c:3e:da:47:d7:d3:89:07:
03:ee:eb:4f:5d:9d:64:d7:23:ad:85:aa:1a:ce:d2:
ec:d7:8c:d1:bd:20:40:ba:0c:9b:af:fd:c7:f2:a9:
7f:23:97:04:86:3b:b5:66:62:81:51:3b:c3:bc:62:
c4:7f:a2:fd:7c:5f:b7:be:30:d3:44:d9:31:b5:50:
0f:84:50:57:9a:f4:a0:5f:ef:fb:66:8c:74:44:06:
3f:b9:8d:bf:a5:76:1d:b7:63:b9:bd:cb:85:47:a5:
4e:3a:2d:da:42:46:7c:55:87:43:0b:5e:59:2e:60:
b6:9f:cd:55:01:07:30:24:a7:ac:ba:9b:52:97:9f:
63:e3:ff:9f:91:6c:06:90:d5:eb:7f:3a:ad:6f:9a:
2a:aa:f1:72:d8:2a:c7:7f:9b:e9:11:0f:86:69:20:
03:7b:22:63:5d:e2:65:97:03:a6:8a:27:87:c3:e4:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:57:4B:D2:38:2C:E3:A3:C8:2F:2E:B9:EC:A7:03:79:7A:6B:D7:F5
X509v3 Authority Key Identifier:
keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F43C06002CDB11F1BC42816D9D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.74.11.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ed:ff:f8:cf:dc:cf:5a:82:c5:02:78:08:0d:b5:fa:fa:e0:
46:59:b2:06:d9:81:2f:d4:6f:e1:65:27:0e:18:36:0c:0f:44:
22:c8:46:4a:d5:79:36:7d:b6:8a:4e:cf:e4:ec:79:6d:bb:f9:
5f:da:e8:9e:c4:a4:75:bd:f3:0c:68:71:d5:b9:47:0e:d6:3a:
e8:05:86:b9:e2:9b:c9:e3:f6:bb:9c:f7:7e:3a:5b:d0:34:7f:
13:0b:eb:ee:f8:0e:09:3d:6b:22:86:0e:1e:6a:a5:e7:57:7c:
91:7c:b5:b2:66:a7:d8:01:b2:e0:77:3f:dc:ff:29:bb:ab:7c:
46:fe:25:09:c8:98:34:16:2f:fa:d6:71:27:91:62:7d:44:77:
f0:94:67:9e:2e:7a:b8:2e:94:60:d5:e4:60:0c:28:0b:36:50:
02:46:c2:8e:ef:b7:3e:91:ba:1a:56:39:00:4e:44:00:18:b4:
c1:1a:23:b3:43:5e:1e:a3:d4:a9:9c:4a:9a:0a:24:55:0e:56:
96:bd:76:71:4a:b5:9e:64:4e:61:48:02:9a:09:12:e6:13:df:
52:5e:b6:f0:8f:02:19:55:cb:5f:c6:b6:ce:90:b0:3b:e6:f8:
5d:db:e1:fa:e6:c1:7f:49:89:8d:b0:7b:ff:35:c9:10:7f:a2:
00:c4:19:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:29:54 2026 by rpki-client