
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/C2D236E6B70E11EAAE6CE049C4F9AE02.roa
File: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (raw, json)
Hash identifier: kbaHV7eynVmH3S7Xw1Qu937Ri+cv+/Js1fwdNg6bgMc=
Subject key identifier: 04:CA:F2:77:A8:AA:25:58:A9:97:05:93:41:4C:A7:53:6D:04:7D:95
Certificate issuer: /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Certificate serial: 09C9
Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/C2D236E6B70E11EAAE6CE049C4F9AE02.roa
Signing time: Wed 16 Sep 2026 20:40:20 +0000
ROA not before: Wed 16 Sep 2026 20:40:20 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 63399
IP address blocks: 103.35.126.0/24 maxlen: 24
2402:c580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 20:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2505 (0x9c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911849D, serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Validity
Not Before: Sep 16 20:40:20 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aaafeb4-0d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:fa:44:ae:45:7a:76:38:49:51:f6:f6:92:
d6:a7:3d:f0:35:25:23:dd:b1:24:f5:dd:8a:1f:8a:
24:54:cc:ae:16:0b:3e:04:9b:b1:bd:65:03:5d:5d:
83:e6:6a:69:db:6d:9b:66:db:39:41:fd:eb:5d:96:
72:fe:67:68:61:b5:fc:a5:a7:d8:b0:9f:25:23:9c:
8f:4d:29:62:25:09:ee:92:6e:92:ea:20:df:ec:c0:
7c:73:02:fc:2a:5e:5f:27:bc:49:9f:ad:88:e8:85:
96:bc:9e:67:0c:e1:32:ef:6c:16:85:42:af:54:90:
08:2b:b5:71:5f:8e:29:28:84:94:ce:f3:25:4f:82:
1b:8f:80:14:6c:26:87:5f:9a:08:8c:5f:a9:b4:d3:
44:93:03:38:f6:a2:2f:29:67:2d:24:10:9c:2e:d5:
95:57:c1:9f:f6:0e:17:2e:ed:87:71:ac:c1:ce:7d:
d5:94:57:46:b2:d1:f9:f3:81:39:e3:de:8f:51:df:
06:50:e2:0f:14:cc:64:0c:2d:2e:ac:fd:43:59:c4:
5d:2c:53:f0:c8:75:1a:a1:e3:10:8b:85:d6:8e:f6:
cd:df:53:70:a5:66:cf:9a:1b:48:a1:ef:c8:1e:ce:
b2:ef:15:8a:b2:78:77:fe:b2:17:c0:92:f8:23:84:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CA:F2:77:A8:AA:25:58:A9:97:05:93:41:4C:A7:53:6D:04:7D:95
X509v3 Authority Key Identifier:
keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/C2D236E6B70E11EAAE6CE049C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.35.126.0/24
IPv6:
2402:c580::/32
Signature Algorithm: sha256WithRSAEncryption
0c:60:db:7d:f8:cc:42:4b:c9:d8:0e:d4:53:70:bb:ab:5d:2d:
bd:2c:3d:e0:f9:4a:d4:13:44:47:91:9f:9b:b6:24:ad:eb:5f:
e4:28:52:86:b6:b7:2f:9a:e9:55:4a:6e:0e:d1:b2:10:d1:37:
a9:b1:93:0c:ca:af:01:e2:3d:75:a2:33:43:06:a0:57:ec:b7:
34:49:fe:06:03:28:f5:b8:6a:85:75:cc:c4:0f:46:4c:10:aa:
ee:87:73:83:a8:e8:35:74:63:12:89:08:0b:62:61:7e:d3:71:
83:fd:06:c6:82:35:f0:ca:c7:65:b5:28:5f:69:be:05:29:ef:
f5:3f:5c:80:a5:0e:be:e2:3e:f3:dd:08:3f:01:dc:e3:d8:0d:
84:c4:a2:9a:9a:22:17:a0:30:06:05:28:77:8f:24:8d:31:ff:
c4:a3:3b:be:b2:6f:26:13:41:69:cc:22:e4:a0:82:1a:c8:10:
03:a0:c1:76:1e:ef:e2:22:a9:92:6e:2a:bb:8a:8a:0b:a8:ab:
78:b3:b3:1b:03:56:bd:c6:2c:76:b5:40:01:8f:b3:fb:b4:5a:
72:0d:02:a8:eb:0e:6f:58:a3:3b:0d:d2:b7:a5:32:dd:a0:da:
7b:c5:8a:a9:57:bf:3b:0e:7f:e9:57:e6:56:1a:d8:7c:5c:e2:
54:2b:78:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:23:03 2026 by rpki-client