
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa
File: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (raw, json)
Hash identifier: rbn5lAjWWtq0NJobJ3gQQ+/3GQGL5IrkjkxyophftGs=
Subject key identifier: 39:7B:FD:54:75:2E:B7:89:6A:A2:44:C7:F0:55:B9:E1:C1:90:86:BA
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 08D8
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:53:44 +0000
ROA not before: Wed 08 Oct 2025 22:54:09 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 150436
IP address blocks: 103.228.66.0/24 maxlen: 24
103.228.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2264 (0x8d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 8 22:54:09 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48b38-f2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:98:25:48:6b:4f:8a:14:fe:38:bc:59:19:
80:5d:86:32:8b:18:31:18:40:73:69:6e:0b:2b:b6:
19:7b:e4:2d:1b:57:33:c1:1f:99:61:c1:10:6e:c0:
5d:ec:c7:3d:20:8e:ca:20:a1:29:ef:7c:f9:64:65:
65:3d:f1:f5:25:23:bb:5b:6f:bd:66:fc:0b:7f:5e:
40:9c:02:2d:0d:72:18:25:28:56:f1:4d:cd:c3:30:
32:a4:99:c2:85:e0:c6:ec:0b:10:f4:ae:dd:66:4e:
6f:88:f4:fc:eb:f3:59:6c:a1:4a:5c:e1:ac:3b:44:
b9:d9:66:36:7a:93:a7:d9:5a:d2:33:ba:56:79:74:
47:f9:4d:ae:a3:5d:d9:5c:91:3a:f6:31:44:ca:ca:
c2:93:be:e2:12:bf:7b:21:e6:d8:1f:db:44:93:58:
af:0d:7e:49:0f:00:65:70:92:a2:97:3d:09:89:81:
67:91:d9:37:7e:68:cd:d5:fe:f4:58:82:b7:ce:24:
73:7d:23:9d:41:19:7a:fa:a5:2a:a6:de:96:66:0a:
36:96:24:02:5e:78:4f:aa:62:ef:19:52:c1:b4:7b:
12:4d:9e:23:be:3a:27:58:49:a5:c7:32:e9:50:2f:
11:32:2e:7a:56:9c:d9:6f:07:46:57:7f:e4:25:10:
8f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:FD:54:75:2E:B7:89:6A:A2:44:C7:F0:55:B9:E1:C1:90:86:BA
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/738CDD3E2C8A11EF93B8A709C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.228.66.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:89:67:29:ef:bf:45:af:a8:ae:c6:b6:f2:4a:79:e2:94:e9:
d5:12:99:ae:8a:49:5d:a7:e5:58:20:27:3e:aa:e6:bb:31:70:
d1:25:46:40:d8:88:25:0a:31:d9:7d:00:00:82:91:a9:0b:44:
57:b5:b9:c5:a7:82:8e:2a:32:04:07:38:18:e1:06:f3:8e:cf:
26:77:c4:0c:7e:9b:22:3f:1b:4b:b2:9a:4c:e8:cb:70:35:9e:
b4:cd:d3:67:7d:fe:dd:e2:5a:9e:ed:d9:48:aa:88:4a:de:a7:
d0:5f:eb:5e:1f:2e:be:77:ac:8f:53:1b:20:08:dd:6f:a9:bc:
a3:b8:c0:46:69:a0:99:68:59:9b:22:7f:44:1c:22:7e:10:4d:
bf:dd:38:bb:ab:a0:9c:51:72:09:78:23:73:21:93:4e:21:3a:
c4:47:12:00:9c:45:da:66:85:33:d2:a4:fd:66:73:69:69:73:
f7:8b:6a:b4:ab:a4:4d:7c:b5:90:4d:9c:71:89:c1:12:d3:0d:
28:d1:41:fa:93:2f:39:c2:d3:98:cb:61:50:76:42:c1:b9:01:
74:c3:42:b1:9d:32:8d:88:5c:3d:41:96:7e:f7:49:9d:8b:6d:
29:82:9c:44:7c:83:91:aa:d6:77:b7:25:8e:34:b6:73:33:e9:
c1:0b:c4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:07 2026 by rpki-client