
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa
File: 511F1EDCFC0511F081195104746F56BC.roa (raw, json)
Hash identifier: 3ZY9LtMnfjJy2QVhjYp4QqSiXFPZWzNKEPSHSZcoGaM=
Subject key identifier: 44:58:3A:15:D5:DA:18:FD:3E:56:10:61:43:2A:D1:19:9A:B8:9C:93
Certificate issuer: /CN=A91CC473/serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Certificate serial: 70
Authority key identifier: 33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa
Signing time: Wed 29 Jul 2026 09:59:19 +0000
ROA not before: Wed 29 Jul 2026 09:59:19 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 132874
IP address blocks: 103.26.196.0/22 maxlen: 22
103.26.196.0/24 maxlen: 24
103.26.197.0/24 maxlen: 24
103.26.198.0/24 maxlen: 24
103.26.199.0/24 maxlen: 24
2001:df4:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:40:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC473, serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Validity
Not Before: Jul 29 09:59:19 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a69cef7-0e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:5b:89:6d:d8:d1:f2:06:2f:ed:8a:f9:1e:
e4:ba:3d:7e:a7:8d:f1:58:64:c7:41:8f:3b:be:a3:
31:22:1f:d9:65:86:b5:66:47:40:1d:5d:e2:3d:0a:
53:21:cf:f2:70:ef:33:13:d1:f0:7a:61:37:90:96:
88:aa:7e:fa:25:96:4b:aa:f5:38:d2:bb:f0:85:94:
c0:f7:c6:35:ab:7b:d3:72:cb:8a:c7:d4:be:c0:23:
de:14:7b:45:4a:9f:f6:5d:7d:c4:b0:b8:1b:b6:82:
46:22:bb:ee:21:3f:d8:0b:47:6b:eb:fd:be:6b:6a:
37:11:cb:da:f9:c4:d0:f3:72:dc:24:a8:eb:df:5e:
97:10:40:61:d1:f4:df:d8:5e:b2:54:ac:5c:7c:5a:
bb:61:8d:08:50:14:45:5b:0b:c8:29:ee:46:83:f3:
4b:f4:30:ec:c1:6f:72:05:9f:12:8b:97:af:72:31:
9a:65:c7:6a:02:1a:6f:5c:40:fc:17:b4:c1:a1:4b:
94:bd:83:20:43:71:5a:6e:41:37:aa:44:48:fd:07:
81:ad:55:37:95:9e:f0:b7:9d:95:c9:89:c1:5e:9f:
0a:17:b4:46:01:eb:54:03:a1:b5:2a:cf:3f:78:0d:
b2:dc:8f:d6:e9:fd:9a:73:c6:75:5c:39:d6:c1:df:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:3A:15:D5:DA:18:FD:3E:56:10:61:43:2A:D1:19:9A:B8:9C:93
X509v3 Authority Key Identifier:
keyid:33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.196.0/22
IPv6:
2001:df4:6000::/48
Signature Algorithm: sha256WithRSAEncryption
b4:00:e9:06:3a:e5:77:e6:a3:06:04:9a:9b:e5:55:13:94:cd:
df:74:31:d1:3e:56:51:f5:2a:89:e5:b6:87:e5:e7:a6:3f:d6:
07:de:b6:24:42:1c:05:fe:aa:61:7b:4d:82:22:25:b1:dd:b3:
6a:b9:7d:2f:38:b1:2f:6b:1d:a8:9c:f6:9c:77:68:ab:53:35:
8c:0f:17:f3:69:c4:a5:cc:d7:37:ce:a8:ab:21:bf:88:3a:31:
6a:fc:34:ff:24:83:a1:1b:08:6f:72:31:f0:fb:0d:4c:17:ce:
06:1b:cb:af:cc:40:46:cd:31:4b:25:42:6c:01:20:b6:88:4d:
eb:b5:a3:d9:01:f9:16:02:db:d1:95:f8:cd:81:19:5d:2b:8f:
a4:e1:d1:b8:2d:34:24:9e:0f:b8:8b:56:0b:e2:48:97:ab:aa:
e6:28:d6:c0:71:fc:e8:89:ac:91:9f:f7:4c:93:24:4c:58:80:
ed:37:79:c5:c1:ba:93:59:52:19:5b:99:3b:0a:5b:e8:a0:3b:
7b:1e:55:ce:5e:e3:0f:d0:28:76:8c:ef:55:94:f6:cf:5e:99:
46:43:42:12:bb:ac:88:e3:58:a6:f6:5c:87:12:6a:11:1a:52:
c8:8c:d4:af:55:aa:6f:18:b7:ed:8c:80:07:74:f1:e8:7e:58:
51:e3:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:15 2026 by rpki-client