
$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa
File: 2D8428C662F511ECA1FC5A6CC4F9AE02.roa (raw, json)
Hash identifier: tWz/6xO64zB/1Qqhs2Ax95uvHFJIaUVINpHba9CIrQI=
Subject key identifier: 0D:6E:22:61:A0:B6:69:0E:2C:1A:B1:B3:3C:E9:89:F6:37:C4:93:22
Certificate issuer: /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Certificate serial: 04C2
Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:20:27 +0000
ROA not before: Wed 04 Feb 2026 23:20:07 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 136511
IP address blocks: 103.178.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218 (0x4c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911403B, serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Validity
Not Before: Feb 4 23:20:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a44b2b-2aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:8b:7e:77:d8:5c:bb:59:b3:dc:89:28:80:
38:2c:1b:ed:09:4f:f7:52:54:f5:84:c3:b1:1b:89:
1d:52:06:4a:6a:27:fd:78:5d:7b:60:34:73:1b:e0:
e7:7c:b9:12:56:6c:93:ac:d7:96:a5:fc:4b:f6:30:
92:22:75:8f:2c:3b:28:68:d7:db:9e:5f:b8:b7:8d:
66:29:40:13:de:1c:81:34:5c:a1:b9:c5:ad:1e:96:
27:8c:53:74:6e:f2:d4:bd:74:00:2e:69:88:73:f3:
02:4e:d0:71:96:35:95:10:43:47:d9:9a:55:50:61:
4f:99:aa:40:a3:ab:9d:53:27:fa:39:50:61:cb:d1:
77:27:9b:f6:a2:ea:d9:9b:90:5c:b4:c3:45:5f:a6:
88:c9:bc:d4:ab:de:e5:77:4b:5e:33:d4:ca:44:49:
a3:51:68:02:36:35:9a:76:50:18:b3:a0:93:a9:c1:
56:f6:8d:b1:6f:f2:34:bc:35:db:be:5f:5d:90:19:
52:2f:61:02:cc:16:21:ce:f2:6c:11:b4:1d:5e:10:
66:aa:ed:d5:22:a3:a1:d3:e0:3c:9c:73:70:dd:f9:
60:cb:05:bd:6d:bd:d8:03:46:ef:12:dd:4e:b0:b9:
db:7e:50:f4:76:10:1d:81:4f:b2:e3:24:0e:c2:11:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6E:22:61:A0:B6:69:0E:2C:1A:B1:B3:3C:E9:89:F6:37:C4:93:22
X509v3 Authority Key Identifier:
keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.178.39.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5c:0f:0a:7f:aa:bc:db:f0:08:3b:d1:2d:d4:6e:f2:7f:8c:
6c:3e:e3:01:f1:2b:47:ab:14:c6:77:47:91:23:ab:65:70:48:
15:42:0b:68:ec:40:89:31:a3:91:91:70:70:14:2e:85:84:5b:
93:d3:7d:ce:a6:a7:f8:e6:1e:56:8f:28:c0:8e:50:60:bf:3b:
c4:0c:0b:05:77:3b:3d:9c:06:81:94:f8:11:0b:9b:9d:5d:25:
b3:23:4e:c4:8f:ba:1c:40:9e:2a:62:f5:3b:73:3c:6b:e2:78:
90:b6:fe:9b:de:47:1c:a5:7f:ae:37:3a:0f:30:28:b7:05:3e:
9f:a5:9e:e2:79:5a:93:e8:13:98:f3:d8:a1:82:8f:0e:ef:20:
28:db:04:06:ad:41:cf:42:f0:a5:bf:f8:8b:08:4b:5a:ef:f1:
95:ea:5e:45:69:00:87:70:f2:ad:d4:45:98:09:b8:c8:6c:4f:
6e:f1:74:d1:f1:c0:90:9b:8f:1e:90:f4:f2:e8:ca:86:9d:c7:
70:a6:a7:23:1a:f8:67:ce:61:54:60:6f:59:ba:0c:86:1b:07:
4e:5c:fa:c3:8b:61:cd:df:af:80:35:89:77:46:5d:46:2d:72:
90:54:8b:0a:2d:f5:19:c2:0e:aa:71:db:5e:d9:03:23:70:a5:
1b:96:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:09 2026 by rpki-client