
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa
File: B288EC9C870811F0A371DD81C4F9AE02.roa (raw, json)
Hash identifier: HCdyJODxfI8IL1YXPk8XnRbopQMr2u8omBFAgNNbZsw=
Subject key identifier: A7:75:64:D3:DB:02:B8:BA:EC:45:28:28:28:6E:3E:ED:68:CD:BC:26
Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial: 02A3
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa
Signing time: Mon 23 Feb 2026 01:21:49 +0000
ROA not before: Mon 23 Feb 2026 01:21:49 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 138004
IP address blocks: 103.10.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Validity
Not Before: Feb 23 01:21:49 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=699babad-6199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1c:61:32:bd:47:84:0c:e5:bf:bf:bc:93:bb:
61:c7:1a:e8:70:98:72:01:33:6a:49:83:96:06:18:
54:75:48:ff:fb:23:bb:9a:7c:fb:1b:0f:a8:9d:b4:
30:87:cb:56:3c:80:dd:5e:5b:b2:cb:91:d2:5c:7f:
90:ba:c8:39:e0:bb:06:56:ed:2a:8c:1e:06:70:8c:
42:1c:d5:16:3e:8c:56:38:5f:9b:80:7b:a2:0c:64:
21:ef:00:3e:a4:4e:c1:f0:6d:63:4e:21:8d:c1:a9:
1e:84:66:76:e0:18:e9:92:01:f3:37:45:ed:35:85:
3c:30:bd:b8:16:64:30:88:dc:8f:53:c9:61:69:a0:
da:bb:8d:0a:97:bc:05:51:f3:cc:09:bc:80:ac:2c:
8c:8e:af:82:07:c5:43:a6:c4:1b:ef:2e:9f:dd:0d:
37:30:2e:5b:fe:41:68:6f:cd:ed:10:9a:96:aa:b0:
2f:9a:c7:b1:1a:22:62:22:13:e9:02:b4:a4:4f:d2:
b0:d5:37:06:44:97:d9:81:9e:11:71:eb:7a:3c:be:
f7:8e:5b:d0:39:8a:ae:66:e4:78:f3:2d:9f:e4:25:
72:b1:e7:e3:a0:43:e3:8d:9f:3f:8f:8c:68:65:de:
8e:bd:1b:85:e4:f7:a4:b3:b8:a1:37:0e:50:b4:12:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:64:D3:DB:02:B8:BA:EC:45:28:28:28:6E:3E:ED:68:CD:BC:26
X509v3 Authority Key Identifier:
keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/B288EC9C870811F0A371DD81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.10.194.0/24
Signature Algorithm: sha256WithRSAEncryption
25:05:0e:07:c5:8e:6a:ab:6c:29:72:bd:ae:7c:7d:f7:d7:82:
a4:11:4e:b9:78:18:2b:8b:8d:de:40:21:e7:8d:94:1c:73:20:
f7:57:ce:ea:de:0b:da:6d:ed:8b:77:51:84:38:9a:6b:20:aa:
b9:53:18:1b:72:ef:d6:29:72:a9:ae:ce:f1:96:88:48:60:78:
58:89:ff:10:78:aa:e4:66:19:be:7b:ba:1c:16:bf:30:db:ce:
3a:c1:08:bc:10:e5:40:96:3c:a2:33:66:25:ad:b8:96:21:84:
0f:e3:41:85:13:5f:c1:19:e1:7c:a4:48:0b:34:e1:9b:ea:0d:
c2:43:6c:93:70:d9:14:6c:c2:83:43:e4:d8:40:8b:e0:af:ae:
1e:42:f6:a3:73:52:c0:da:29:b2:f7:cf:68:46:ef:49:b5:73:
e7:78:f7:9a:e7:38:69:67:80:ec:5b:de:41:40:89:ea:95:3a:
e0:61:5c:5c:f3:bf:a9:54:3f:f0:b4:b7:86:20:fa:5f:bb:e8:
b0:39:0e:94:bb:e1:36:0f:87:be:ec:82:55:be:71:8d:b2:27:
d6:84:dd:5f:b2:73:47:ad:6d:4b:29:96:02:4c:fd:ed:fd:69:
48:d0:9a:e8:0c:49:fc:86:fa:e5:ee:d2:bb:f3:24:71:af:df:
5b:be:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:29 2026 by rpki-client