
$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa
File: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (raw, json)
Hash identifier: 0TbpAuowqPfcDyizvEs22/k+1Y1scBoPmMmKVAfXXbs=
Subject key identifier: E4:2A:E2:47:8C:61:B1:DF:1B:44:B4:4B:E7:59:8B:C6:16:E2:CC:7C
Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
Certificate serial: 06AE
Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa
Signing time: Sat 16 May 2026 22:29:09 +0000
ROA not before: Sat 16 May 2026 22:29:09 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 10122
IP address blocks: 103.166.232.0/24 maxlen: 24
103.166.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl
rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 22:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1
Validity
Not Before: May 16 22:29:09 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a08efb5-a5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:83:aa:62:cb:4e:79:d0:2e:78:bd:ec:d4:
fc:9d:db:43:18:2b:36:8f:26:6a:71:a8:e0:9e:8a:
78:4b:0f:22:7b:20:98:56:d5:84:eb:59:9e:20:06:
77:ac:3f:03:22:65:bf:d2:21:0e:a3:6c:27:10:37:
e1:4f:9f:39:ae:16:1a:95:7d:52:56:ee:93:7c:e0:
d9:b1:e6:b5:17:16:d7:75:ee:be:fa:21:52:2f:a7:
c5:16:02:87:e6:11:bc:b5:f0:2c:9d:9f:01:19:d6:
f3:5d:8e:8e:b2:22:fd:0f:dd:8b:98:64:0e:20:59:
a6:71:42:5d:e6:9a:dd:0d:4d:e4:37:0f:5d:83:0a:
24:fa:55:57:1b:c0:a9:24:0a:ac:b2:d4:56:6d:ca:
e2:77:c7:b9:7b:80:00:59:bc:52:ff:eb:60:1e:e1:
25:29:29:d6:ec:6e:1b:e5:e4:11:da:08:3e:f5:ac:
74:4c:b8:bd:96:c1:84:34:0b:71:3f:1a:0f:11:81:
db:79:d8:9c:df:bd:70:d2:6a:ec:28:16:fe:3d:67:
1f:0c:fe:ca:be:57:15:9b:5c:58:f4:96:5b:d1:2a:
27:b3:f2:2a:f4:c2:54:bc:32:94:da:b8:99:5d:46:
f7:4d:3c:c0:40:ee:35:9b:f8:4c:72:05:9e:ff:c8:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2A:E2:47:8C:61:B1:DF:1B:44:B4:4B:E7:59:8B:C6:16:E2:CC:7C
X509v3 Authority Key Identifier:
keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.166.232.0/23
Signature Algorithm: sha256WithRSAEncryption
75:c4:06:8f:b9:27:28:c1:08:ac:11:c8:35:21:64:02:0e:88:
42:c8:75:e4:25:1d:17:e7:10:e0:1a:85:85:05:27:e9:7b:4f:
f7:c7:b9:91:29:ef:b8:2f:7f:35:c4:ed:56:9c:94:4b:83:ff:
15:d5:7a:ad:e4:12:fc:6d:4a:50:53:99:0a:41:8c:55:10:a3:
9c:d9:7b:30:aa:68:51:9b:7b:96:81:11:bf:c5:68:6d:58:89:
f0:77:c0:da:ac:1a:8b:98:3e:77:22:42:f4:3c:85:b7:57:6f:
04:0c:4d:0f:5b:5a:f2:2f:4b:0d:67:52:d7:9a:4b:fe:10:64:
39:a5:52:25:70:fe:2a:14:b1:fe:a3:af:da:58:ea:f7:80:e9:
02:5f:e9:23:f3:2b:5a:ac:f5:32:6c:62:a4:7c:80:19:a6:d1:
75:2e:df:f3:99:a5:17:22:1e:a2:a8:5b:93:e4:f8:19:9c:09:
2e:6a:4d:f3:fd:f7:54:b9:4d:34:82:f6:37:a4:61:55:da:ef:
be:44:c2:30:22:d0:c6:09:60:16:77:92:16:46:74:2e:8b:9b:
4b:81:50:58:4b:b5:84:f1:93:3d:b0:8c:3b:36:6a:26:d7:3e:
f0:d3:a1:dd:cc:1e:d0:49:34:e2:ce:fe:3e:02:47:db:42:65:
f8:45:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:17 2026 by rpki-client