
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa
File: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (raw, json)
Hash identifier: cNRSSCBGXrEJtVY9a3ODwV8okDz9FeXvjg7YBI8iA68=
Subject key identifier: 4F:7A:13:D5:D8:05:17:90:6B:7A:E2:35:AC:60:DC:CA:D2:7C:07:E9
Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial: 024C
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa
Signing time: Fri 27 Feb 2026 02:21:43 +0000
ROA not before: Fri 27 Feb 2026 02:21:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138509
IP address blocks: 103.84.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Validity
Not Before: Feb 27 02:21:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a0ffb7-f746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:2f:0b:fe:59:cc:11:e6:41:5f:4b:f5:9c:
e0:67:b8:8d:2c:cb:0c:2d:1f:9e:39:42:92:3b:fa:
11:66:38:99:85:8d:6b:ac:a9:ce:68:b8:19:be:22:
19:71:b8:58:e3:6b:f0:21:71:11:7d:32:a7:4f:c6:
49:ae:26:34:9b:f9:1a:dd:87:c9:67:15:e4:46:60:
60:55:2d:59:a9:b9:5b:f0:36:28:16:d6:2c:1d:2a:
f6:15:c2:b7:55:de:18:ce:76:5a:e0:3d:6e:5d:f5:
50:60:e5:89:5d:ae:a0:4d:bb:cc:ef:77:78:1d:19:
09:05:54:bd:44:a1:35:4e:6f:91:eb:76:6e:84:df:
71:04:ef:84:ce:3d:55:88:2f:3f:74:cd:0f:69:14:
15:47:0c:c9:a0:93:81:4e:54:39:2e:22:c6:e2:f1:
53:66:c0:c1:ca:94:8e:8a:3e:98:27:df:b6:0d:fd:
d6:b3:4d:aa:aa:90:e7:fc:52:7e:6f:f1:5c:82:cb:
4e:2c:96:27:48:78:51:3a:5f:d7:de:a5:98:d3:44:
ab:ff:16:d9:ad:db:49:e7:1a:ac:ab:86:61:ac:11:
6a:9b:c5:7d:6c:88:1d:49:61:e7:b9:61:10:f3:4c:
bf:89:3b:b4:e6:a7:c6:0e:36:d4:2b:9d:64:27:0f:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7A:13:D5:D8:05:17:90:6B:7A:E2:35:AC:60:DC:CA:D2:7C:07:E9
X509v3 Authority Key Identifier:
keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.59.0/24
Signature Algorithm: sha256WithRSAEncryption
62:19:a2:d1:03:16:68:b0:d7:e0:ca:8f:d8:78:c5:cb:e5:4f:
79:ad:ba:86:6a:6d:92:c7:62:e0:8a:96:68:64:a1:18:35:b4:
92:67:23:4b:6d:74:01:e9:ca:e7:d7:42:73:92:b8:73:a3:42:
ce:46:4b:b9:74:30:30:71:b5:42:0b:4b:01:b6:34:e7:a6:ea:
44:e0:37:36:0a:87:7a:e1:cd:a6:1b:b4:bb:5a:fc:de:c1:3c:
97:96:63:44:07:44:e1:85:c7:8f:e4:11:e5:fe:eb:9e:78:1e:
32:98:10:47:11:01:aa:82:24:ba:17:4a:f5:a6:f9:9d:4a:96:
83:5c:7f:d5:c4:36:de:50:6c:cb:71:db:99:c8:4d:22:9a:05:
48:9b:d2:5a:e7:c6:c8:46:e6:e5:7d:3b:30:c5:e5:f1:54:79:
97:ee:37:48:91:69:a6:9d:5e:5e:9c:f2:fb:f8:7d:73:02:ee:
a9:3b:ad:20:2e:a8:a2:7d:64:bf:ed:1e:02:20:ce:ab:53:62:
e1:19:36:53:a7:14:fd:1f:93:80:d8:3e:b8:a4:6e:bb:f3:de:
0a:80:83:5b:f2:e0:bf:53:90:8b:42:44:6b:9d:a9:ec:1c:51:
64:fd:e5:77:73:ea:d3:5d:20:c2:32:3b:bb:4d:62:25:23:0f:
a2:d6:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:27 2026 by rpki-client