
$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa
File: F7AB4FF8058F11F1B7BFF5793E3D8C67.roa (raw, json)
Hash identifier: FFO72rwWU9BzKR75I8zk3drp+LjLt3Z/rvU6gC8z1bA=
Subject key identifier: FA:70:D0:3E:71:F4:4C:F3:9E:6F:AB:DD:60:E1:E1:2C:8C:D4:12:A5
Certificate issuer: /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial: 0624
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa
Signing time: Sun 01 Mar 2026 16:49:38 +0000
ROA not before: Mon 09 Feb 2026 08:18:52 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137550
IP address blocks: 103.112.236.0/24 maxlen: 24
103.112.238.0/24 maxlen: 24
2406:d1c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Validity
Not Before: Feb 9 08:18:52 2026 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a46e22-9313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:5b:97:b6:0e:2d:ee:43:42:90:56:bb:af:
3e:98:3b:4f:51:34:f7:73:09:e0:97:d6:4d:a6:05:
ac:e8:2d:5e:0f:d1:97:23:d9:22:50:0b:ab:e9:78:
c5:e1:d0:9e:17:4d:8a:c7:e0:43:40:9e:e5:33:98:
a8:20:b8:31:8a:60:f1:6c:3c:0a:bf:ae:71:14:a8:
d6:25:31:bd:31:73:b2:d8:b2:a9:b0:82:14:f7:5c:
4f:24:8b:b1:e2:85:1c:cc:54:d3:0c:83:a2:0b:2f:
b2:ea:fa:2c:a6:48:96:61:53:fc:82:b8:11:56:f9:
d3:87:82:98:ad:68:df:69:46:7d:01:36:95:04:ae:
36:f2:09:65:3d:c6:d6:8c:b9:69:e6:63:10:61:37:
86:1b:80:de:67:97:96:18:52:6e:d1:08:7b:dd:2d:
23:26:6f:4d:df:dd:dc:b8:7f:4c:49:85:49:b5:6f:
aa:4a:40:9f:dc:da:45:f1:ad:ff:67:63:fc:dc:6b:
75:49:8b:d3:ec:45:b1:26:33:7f:42:33:55:47:20:
55:a9:69:06:92:08:51:fc:fe:90:f3:00:85:d1:f1:
0a:e8:7a:1d:74:c6:cb:07:09:14:ac:c1:f3:5b:05:
7a:cc:1d:1a:b9:d8:78:21:42:29:7d:25:0d:ae:e6:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:70:D0:3E:71:F4:4C:F3:9E:6F:AB:DD:60:E1:E1:2C:8C:D4:12:A5
X509v3 Authority Key Identifier:
keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/F7AB4FF8058F11F1B7BFF5793E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.236.0/24
103.112.238.0/24
IPv6:
2406:d1c0::/32
Signature Algorithm: sha256WithRSAEncryption
66:db:f7:92:7e:c8:f1:c7:db:1c:00:66:dc:95:62:92:00:ae:
1f:b0:72:82:08:76:b5:0e:ce:58:8b:c6:00:10:fd:9b:2a:08:
b4:ce:dd:b8:24:5a:a1:66:6e:57:7b:f3:9a:50:df:80:fd:4b:
fe:70:9a:05:90:15:8f:c7:91:44:1b:09:e6:53:41:f4:ba:d4:
7e:40:ef:3c:55:da:ab:01:77:40:b7:a7:6e:e6:a8:2c:2c:33:
fe:c6:f3:f1:4d:3a:c9:1e:a8:95:59:b4:6b:97:90:5b:df:fb:
32:2b:dc:94:2c:88:78:db:64:17:93:70:70:05:77:2c:24:9f:
03:40:f1:32:24:cc:9b:3f:30:1a:bf:54:c1:4e:82:73:e2:b8:
f6:a8:e2:73:fd:9e:d0:f5:bb:db:44:55:75:a9:0a:ad:16:c8:
4f:96:30:6b:04:ba:28:ba:44:a5:f7:79:f1:42:0c:7f:ec:a1:
e3:97:86:dc:48:f8:7a:15:e6:76:14:ac:d2:fc:53:f3:8e:1f:
ce:26:e8:4e:14:cc:8d:89:b0:ff:6d:8c:5c:2c:e1:6e:59:2c:
34:8a:13:9f:00:42:65:07:dd:1e:87:a5:37:87:45:23:fe:95:
8e:f8:bf:67:57:6c:fa:65:2b:82:54:d7:3f:db:45:a9:fc:3f:
cb:ac:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:53:37 2026 by rpki-client