
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa
File: 1043B2347BBD11EA8356C986C4F9AE02.roa (raw, json)
Hash identifier: a6rMYG+rFHuKykrCLdfsIEgFERicXBXZf3yRaSnpCZA=
Subject key identifier: BC:79:D7:21:99:95:E6:2F:B3:A6:E1:B8:BA:A8:2F:AC:5B:96:30:B3
Certificate issuer: /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial: 0AB7
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:01:13 +0000
ROA not before: Tue 16 Dec 2025 03:12:12 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137580
IP address blocks: 103.114.24.0/22 maxlen: 22
103.114.24.0/24 maxlen: 24
103.114.25.0/24 maxlen: 24
103.114.26.0/24 maxlen: 24
103.114.27.0/24 maxlen: 24
2407:44c0::/32 maxlen: 32
2407:44c0::/40 maxlen: 40
2407:44c0:1::/48 maxlen: 48
2407:44c0:8000::/48 maxlen: 48
2407:44c0:8001::/48 maxlen: 48
2407:44c0:8002::/48 maxlen: 48
2407:44c0:800a::/48 maxlen: 48
2407:44c0:800b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110C51, serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Validity
Not Before: Dec 16 03:12:12 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a446a9-013d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:77:c0:ea:9b:63:e1:2a:d1:67:21:72:a0:19:
83:3a:94:8a:f7:70:85:3a:83:43:f3:a2:8d:55:0a:
5f:5c:fb:93:c1:03:a5:d8:dd:08:ac:ca:7d:9d:b9:
cb:15:94:e2:94:e9:8d:4a:80:04:f6:95:78:7e:7e:
4f:c5:5d:7e:e6:87:eb:bf:0c:46:25:c8:fb:5c:8f:
9d:28:7c:5f:fc:c5:12:16:98:da:c4:6e:4e:d4:0a:
0f:51:71:dc:09:ae:c7:2f:a8:54:c0:eb:61:4d:51:
c9:e7:20:df:f6:70:88:a3:86:a1:7e:c9:27:a4:05:
0e:48:64:ca:dc:72:c8:73:e4:f9:f2:c2:dd:74:59:
06:48:07:cb:f1:3d:59:b1:be:91:7c:04:0f:e1:5b:
4b:a5:b8:6b:82:34:a3:0b:a9:c5:7e:3c:ef:f4:16:
53:62:99:64:5e:5c:cc:28:9c:8b:c3:93:66:e5:2f:
dd:ae:e3:47:12:74:98:8f:8b:ee:1a:a3:4d:e8:ef:
d5:87:d9:11:19:73:ad:bd:1a:74:96:96:2b:b4:2f:
2e:28:d4:19:41:ee:16:f4:e5:42:11:e5:67:8e:69:
e8:55:94:37:ff:a5:4d:1f:2e:e9:5a:8b:9a:7f:aa:
7d:94:2c:84:a5:68:ae:8b:c3:e9:a6:12:73:37:c3:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:D7:21:99:95:E6:2F:B3:A6:E1:B8:BA:A8:2F:AC:5B:96:30:B3
X509v3 Authority Key Identifier:
keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/1043B2347BBD11EA8356C986C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.24.0/22
IPv6:
2407:44c0::/32
Signature Algorithm: sha256WithRSAEncryption
83:d1:83:90:3a:d0:11:3e:06:be:3f:99:52:2e:ef:85:c2:c5:
0d:49:ca:71:51:8d:d8:0d:23:f5:86:e5:ee:dc:d4:b0:3b:ae:
c8:b0:a7:31:08:11:4f:9c:18:75:46:8b:ed:a8:59:4d:81:1a:
a0:46:6a:f7:73:f9:7c:cd:f4:80:72:cb:7f:0c:97:0f:bb:fb:
5b:21:6a:d0:74:04:bc:1f:dd:7e:fe:3b:d2:79:41:34:e8:08:
29:c9:ff:07:13:ba:ee:06:b1:7c:98:74:99:36:36:40:d3:f7:
50:ae:72:9a:94:14:53:5d:05:18:ae:30:f7:1d:99:63:96:9d:
9f:73:f0:26:65:fd:43:47:2b:8c:11:35:02:3c:6d:8c:ef:68:
31:50:66:6c:ea:1f:28:f9:59:05:19:33:ba:11:5a:e4:6f:9d:
12:87:c7:56:69:fe:92:c3:c7:f4:4a:5c:64:4b:dd:ac:f6:07:
bf:37:6a:92:d3:a5:89:98:f9:db:d9:0e:f9:5c:64:b2:96:35:
a1:a2:88:12:bb:39:05:94:41:ec:af:1f:8c:10:2c:ef:42:1a:
21:f4:e6:94:62:ac:cc:55:87:9a:0e:4d:a0:44:42:2e:de:fd:
17:1e:80:0f:b2:78:f4:7a:53:9f:39:cb:f3:f7:6f:02:f7:e0:
46:6b:f3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:32:32 2026 by rpki-client