
$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9442231871C311EEB4110C83C4F9AE02.roa
File: 9442231871C311EEB4110C83C4F9AE02.roa (raw, json)
Hash identifier: CtXBhxoisr4SYK/f9f/omh5fKwAOo6P6cylFnj5/1Yo=
Subject key identifier: 89:39:B6:98:25:ED:A1:F7:7B:6D:01:1B:77:10:8D:14:BC:9F:1E:42
Certificate issuer: /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial: 01F8
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9442231871C311EEB4110C83C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:53:08 +0000
ROA not before: Thu 23 Oct 2025 05:18:46 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 151797
IP address blocks: 103.77.210.0/23 maxlen: 24
2401:3620::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:09:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Validity
Not Before: Oct 23 05:18:46 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a46ef4-e926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:96:30:6b:9f:2b:69:e9:71:36:43:76:91:
13:a5:b5:9c:96:ce:47:4a:99:f5:3b:da:90:71:4c:
eb:51:b7:a8:00:01:5c:2c:f0:12:9b:b8:69:f2:98:
be:0b:58:ce:1c:70:de:a5:85:b8:88:0d:68:04:b7:
13:96:3d:68:b1:af:3e:c2:4a:b1:7f:02:ed:5f:50:
18:5a:d1:02:0c:ab:73:09:83:21:ac:49:e2:7e:c1:
d7:29:33:d0:39:ac:b6:70:7b:df:e2:0a:1a:da:db:
7a:8b:6d:26:50:f4:9a:29:31:6b:a8:24:87:0e:a8:
b8:90:a4:3a:b7:cf:e4:ff:0a:a4:62:59:c5:bf:5a:
79:6f:58:11:db:8e:f4:b5:c6:17:39:41:80:ae:ae:
06:0b:0d:df:7f:1e:05:2b:b5:84:fa:a1:06:8b:23:
b2:40:d5:fd:39:16:94:66:ba:e8:63:4f:85:16:aa:
33:50:25:45:0f:1c:c2:68:a6:11:15:94:0f:ca:c6:
22:cf:0f:4f:90:ca:c0:80:85:0e:8d:4f:2c:6b:b5:
cf:aa:0e:ce:f8:20:d6:de:58:bc:6c:21:e6:09:ac:
44:10:b9:68:22:f0:3b:50:fc:db:b3:e1:47:9f:fc:
f9:3f:93:cf:d0:79:fb:cd:13:55:a4:8c:c4:c8:54:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:39:B6:98:25:ED:A1:F7:7B:6D:01:1B:77:10:8D:14:BC:9F:1E:42
X509v3 Authority Key Identifier:
keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9442231871C311EEB4110C83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.77.210.0/23
IPv6:
2401:3620::/32
Signature Algorithm: sha256WithRSAEncryption
15:aa:04:6d:81:a7:38:a7:93:8f:99:49:b0:3a:74:5d:fe:fc:
35:6c:24:7e:0a:bf:88:cc:8a:9b:28:d0:8c:61:0c:1b:15:95:
db:f6:86:9d:48:c1:a5:9f:03:3b:5e:0c:2e:6f:32:a7:e3:d4:
f1:63:4f:b5:bd:a0:50:d0:bc:23:2b:ef:b9:20:7c:02:3f:9f:
f6:a0:41:50:ec:bf:09:aa:29:44:aa:86:f6:1a:da:fa:50:e4:
ac:58:8a:80:9f:f1:d2:66:26:ca:30:34:01:f8:92:80:a2:b2:
14:d8:1a:f8:a3:ca:46:6f:3d:aa:f2:40:dd:d5:6a:48:b0:70:
44:48:b7:b6:91:5a:3d:da:48:52:e0:09:0b:af:82:c1:be:e2:
24:44:f5:4d:56:9c:e8:de:b3:10:29:c9:6d:7d:0e:e1:30:14:
b4:c2:8b:0d:1c:b6:b3:44:04:57:76:bf:13:10:db:c2:ac:b6:
3a:87:9a:c5:0f:a6:dc:a9:de:b4:bf:7c:01:8b:aa:49:5e:88:
7e:b7:dc:c7:f4:ad:1e:67:f6:9a:43:35:bd:28:1d:48:75:18:
74:27:0c:d0:15:11:4b:67:a2:15:48:26:a1:bd:1f:84:50:ff:
b5:60:d8:d3:4f:8c:5b:ea:1d:28:6d:cb:aa:f2:8f:e4:36:91:
b0:22:b6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:10:25 2026 by rpki-client