
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/4A074A90E19511EC8AD57C6CC4F9AE02.roa
File: 4A074A90E19511EC8AD57C6CC4F9AE02.roa (raw, json)
Hash identifier: j7HoHCdz64sq86gO6WNIo+MZn9FyOmtrk8UeOchCdv4=
Subject key identifier: 0D:C7:92:63:47:C0:6A:A4:76:15:60:3B:5F:E6:D1:4A:EF:4F:AE:12
Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Certificate serial: 0AB9
Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/4A074A90E19511EC8AD57C6CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:29:13 +0000
ROA not before: Fri 16 May 2025 20:28:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140502
IP address blocks: 103.150.6.0/23 maxlen: 23
103.150.6.0/24 maxlen: 24
103.150.7.0/24 maxlen: 24
2001:df3:4c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl
rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2745 (0xab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B7EB, serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Validity
Not Before: May 16 20:28:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a406e9-ae27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:7e:40:c3:81:a9:a9:4a:52:02:4a:73:21:
ac:65:93:a8:29:1c:7f:78:45:8e:74:cc:18:16:3d:
73:40:68:9f:75:64:32:c1:78:bb:27:6b:bb:44:3b:
4a:9d:78:81:e7:9d:00:f2:9e:4a:ea:96:a8:df:29:
57:f2:9f:62:f4:d2:39:6a:3e:00:61:75:be:48:85:
32:44:e3:0f:c0:a9:37:f4:95:31:9d:61:39:73:6f:
26:d9:85:b4:35:54:ef:fc:d9:d0:c3:c5:a8:0c:f0:
43:51:19:0d:43:87:c2:c8:b6:98:80:4b:da:ce:a9:
6c:16:1d:a4:4e:e9:d5:69:4a:d8:5a:9b:5a:36:05:
e1:e7:24:6a:5e:3a:a6:d4:c1:15:57:15:5a:b9:79:
4e:e5:c5:25:f0:fd:dd:dc:2f:70:17:1e:d9:b2:19:
5e:76:d5:bc:60:57:ab:d8:e1:fb:43:e0:79:01:e3:
8c:7e:32:c9:3b:9f:fe:f5:14:a6:6b:fd:7a:61:cc:
46:d1:e1:ed:59:18:40:1a:37:b9:92:f1:37:e0:fa:
d6:ac:da:89:61:ea:51:43:fe:9f:0f:2c:44:dd:96:
e5:9e:98:35:40:3a:2d:fb:0a:49:3f:71:79:9a:da:
b5:77:29:18:56:04:1f:0e:0a:02:15:0b:5c:9f:8e:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:92:63:47:C0:6A:A4:76:15:60:3B:5F:E6:D1:4A:EF:4F:AE:12
X509v3 Authority Key Identifier:
keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/4A074A90E19511EC8AD57C6CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.6.0/23
IPv6:
2001:df3:4c80::/48
Signature Algorithm: sha256WithRSAEncryption
7b:5b:bb:e0:2f:0c:f0:e5:91:7d:bf:97:13:b6:3e:af:11:36:
71:ce:b2:51:e2:57:e9:a5:c8:e8:ec:43:6a:a1:36:70:9c:81:
79:ac:e6:b1:da:ba:67:b6:14:1b:e7:ec:9d:23:a0:10:eb:cf:
74:fa:0a:9f:66:9c:a9:c6:07:38:60:e7:a7:af:dd:16:d6:01:
24:1e:7a:36:8c:20:2a:de:d8:0a:2e:0b:73:32:0a:c4:fe:3f:
2c:c2:74:09:c7:4e:de:e9:5a:31:73:43:89:cc:30:ac:19:a2:
52:7f:bd:d3:f8:3f:f2:9f:a5:4c:3f:5f:5f:2d:36:4d:29:b2:
59:49:3c:8c:36:7d:5d:68:d9:c0:e9:f5:ba:a3:48:70:37:1e:
52:00:90:a7:ad:a8:4d:92:e8:f8:34:09:e9:5b:b4:af:aa:51:
94:78:f2:46:64:a9:f6:47:53:5a:71:15:d2:b5:4c:21:dc:70:
ae:e4:b9:12:86:d7:7e:8b:3b:ec:72:98:72:f3:ee:ce:e2:95:
05:da:0f:d0:e8:76:ac:7c:54:79:89:23:4d:89:ca:37:63:70:
bf:6a:d8:59:8d:43:3c:82:29:41:ec:d8:5e:50:3b:22:37:17:
f5:35:5c:7e:c9:49:12:d6:eb:1a:2e:27:0f:f2:1f:60:ed:7b:
34:36:ac:de
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD
RDYwRDQ1ODcwHhcNMjUwNTE2MjAyODU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDZlOS1hZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApVl+QMOBqalKUgJKcyGsZZOoKRx/eEWOdMwYFj1zQGifdWQywXi7J2u7RDtK
nXiB550A8p5K6pao3ylX8p9i9NI5aj4AYXW+SIUyROMPwKk39JUxnWE5c28m2YW0
NVTv/NnQw8WoDPBDURkNQ4fCyLaYgEvazqlsFh2kTunVaUrYWptaNgXh5yRqXjqm
1MEVVxVauXlO5cUl8P3d3C9wFx7ZshledtW8YFer2OH7Q+B5AeOMfjLJO5/+9RSm
a/16YcxG0eHtWRhAGje5kvE34PrWrNqJYepRQ/6fDyxE3Zblnpg1QDot+wpJP3F5
mtq1dykYVgQfDgoCFQtcn45PEQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFA3HkmNH
wGqkdhVgO1/m0UrvT64SMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz
RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI3RUIvNzkxRjRFNzY3M0UzMTFFQUJBN0E4ODZFQzRGOUFFMDIvNEEwNzRBOTBF
MTk1MTFFQzhBRDU3QzZDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5YGMA8EAgACMAkDBwAgAQ3zTIAwDQYJKoZIhvcNAQELBQADggEB
AHtbu+AvDPDlkX2/lxO2Pq8RNnHOslHiV+mlyOjsQ2qhNnCcgXms5rHaume2FBvn
7J0joBDrz3T6Cp9mnKnGBzhg56ev3RbWASQeejaMICre2AouC3MyCsT+PyzCdAnH
Tt7pWjFzQ4nMMKwZolJ/vdP4P/KfpUw/X18tNk0psllJPIw2fV1o2cDp9bqjSHA3
HlIAkKetqE2S6Pg0CelbtK+qUZR48kZkqfZHU1pxFdK1TCHccK7kuRKG136LO+xy
mHLz7s7ilQXaD9Dodqx8VHmJI02JyjdjcL9q2FmNQzyCKUHs2F5QOyI3F/U1XH7J
SRLW6xouJw/yH2DtezQ2rN4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:27 2026 by rpki-client