
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
File: A155AE68315611F0B557CE7CC4F9AE02.roa (raw, json)
Hash identifier: RVRZgV4fJVpoPwGdDiHdzAu6+X6qPhTTWxeMaspLkF8=
Subject key identifier: 18:E5:75:54:D7:6D:A4:94:92:1E:81:B3:D4:BE:33:A9:EF:AA:77:42
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 08D3
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:53:40 +0000
ROA not before: Wed 08 Oct 2025 22:54:02 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 140630
IP address blocks: 103.209.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 8 22:54:02 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48b34-02bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:c4:09:2c:91:92:24:16:e3:4e:f4:85:97:
e9:7d:9d:2d:6d:86:68:02:dd:98:c6:f8:47:1e:77:
d1:05:35:92:3f:5b:cd:f3:f9:58:06:b6:9a:76:d3:
9c:a0:32:b4:f9:6c:4e:b5:d5:1d:de:e6:15:70:8c:
87:6f:56:c3:cf:6d:21:bb:91:1a:1a:95:03:20:89:
62:7b:a3:cf:4d:cd:39:0d:7e:80:2d:6c:34:0a:1b:
42:32:90:b2:fc:52:0d:0b:79:c8:1e:24:b2:48:2b:
1f:d5:c0:84:0b:bf:38:d3:9f:97:a3:23:ca:b7:90:
e3:f5:77:d4:e9:fe:08:31:45:9d:a1:10:f1:a8:eb:
60:59:84:aa:3f:a1:21:ae:ed:4a:d8:3a:cc:40:ec:
b0:ba:12:ed:91:3b:29:8d:6f:d3:1c:89:91:00:cf:
3a:dc:20:c7:10:48:a3:8f:f7:5c:82:f6:3e:4a:82:
f1:04:21:b0:5e:0f:28:de:d2:42:4e:63:92:35:b9:
f5:e0:33:0d:6d:5d:21:f9:a3:1a:be:d4:78:fa:0f:
9d:77:a6:df:4b:41:92:13:c4:e1:e7:78:3c:bc:f3:
cc:a5:ca:58:12:1f:f4:ad:b1:9e:7c:8c:28:f3:f1:
5a:13:06:9a:c6:31:b0:cb:ca:0d:4e:82:2a:88:df:
19:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E5:75:54:D7:6D:A4:94:92:1E:81:B3:D4:BE:33:A9:EF:AA:77:42
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.209.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:c1:b9:6b:c2:de:19:01:a0:6f:7e:70:d2:7f:b0:26:8c:e9:
52:b1:a8:32:7e:45:4c:da:5a:97:cf:c1:d5:c1:a9:10:45:20:
4b:6c:56:bd:e7:17:ba:17:6f:f8:64:10:3f:16:74:0f:e7:fd:
21:d1:49:5b:5f:5b:69:95:2b:c9:d2:35:00:03:26:48:ed:d8:
28:c4:40:64:c0:4a:a7:7e:80:52:3a:ad:02:86:0c:cd:cd:b8:
e5:05:7e:f3:0b:21:6e:13:57:74:dd:fe:d6:fd:b0:d8:10:ab:
0e:e8:39:ca:1d:e6:b3:1a:65:f6:2e:41:20:38:ef:9c:23:32:
2c:56:b0:48:29:1a:50:e7:16:24:be:79:41:65:4b:56:0f:fe:
cb:21:74:52:cb:87:5f:fa:a0:15:f7:aa:0c:82:1b:c2:5d:ec:
c2:74:1f:23:e8:e0:ce:48:95:8c:81:b9:94:5e:b4:d5:f6:c3:
6e:e6:7a:d8:e7:d6:24:7c:99:86:b3:96:29:9a:66:24:8a:c5:
e1:49:40:f3:fe:48:7a:7a:e7:bb:fd:d5:86:e0:ed:20:f9:ae:
3f:5e:41:90:b7:78:e6:9c:35:51:fb:f6:68:42:e7:83:a5:a7:
8b:d5:ed:cd:a2:e7:88:ac:98:46:39:68:39:17:d1:38:1e:68:
ad:e4:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:19 2026 by rpki-client