
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
File: 6492D4985B9011EF8DB48C24C4F9AE02.roa (raw, json)
Hash identifier: 4DEeazGwAz5sYBPuOxnvCvjpQyUf0b00dh29elAufJM=
Subject key identifier: 28:AD:EE:23:41:A4:74:DC:F2:75:2D:B1:03:F3:5C:C0:11:62:94:97
Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial: 0199
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:17:24 +0000
ROA not before: Wed 04 Feb 2026 12:55:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 146943
IP address blocks: 43.230.203.0/24 maxlen: 24
45.64.107.0/24 maxlen: 24
45.113.224.0/24 maxlen: 24
45.113.226.0/24 maxlen: 24
45.113.227.0/24 maxlen: 24
45.120.137.0/24 maxlen: 24
45.120.138.0/24 maxlen: 24
103.26.205.0/24 maxlen: 24
103.250.186.0/24 maxlen: 24
157.119.41.0/24 maxlen: 24
157.119.42.0/24 maxlen: 24
157.119.43.0/24 maxlen: 24
2405:7140:2::/48 maxlen: 48
2405:7140:4::/48 maxlen: 48
2405:7140:5::/48 maxlen: 48
2405:7140:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:28:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409 (0x199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Validity
Not Before: Feb 4 12:55:53 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a46694-a5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7f:f4:c3:f1:83:e0:b0:2a:65:d3:7a:b6:c7:
67:ab:c8:6c:db:aa:18:b0:6d:f6:98:27:81:af:8e:
ba:b3:87:23:a7:fb:d8:ff:f2:ec:92:f2:72:72:7c:
61:3d:de:3e:c6:81:5b:f3:20:c4:ac:66:df:3a:14:
a3:d6:e4:f9:30:58:3d:c0:20:0a:9a:3e:f0:cd:22:
f0:3e:2b:71:69:52:83:6d:71:5a:15:b2:a7:5a:81:
8a:10:77:db:77:f6:d9:ff:c6:94:7c:03:47:28:9f:
00:b3:f9:75:72:4d:c6:a5:bb:54:75:a8:55:53:5e:
12:e0:5d:71:bf:f7:c5:34:66:01:16:f7:de:21:e9:
a6:20:c7:f2:a3:05:72:57:56:c3:12:52:4f:b9:6d:
c2:57:93:7b:37:cd:9d:40:34:e6:36:13:a2:8a:60:
24:f3:28:9c:34:be:fa:3c:e6:46:ed:17:83:8b:1f:
f6:bb:12:0a:ba:b6:98:03:44:3d:a9:78:ab:7e:9c:
da:e6:49:f2:aa:48:50:9b:fb:56:69:0e:fd:e7:d3:
67:b0:eb:1c:7c:f3:a2:4c:ec:0f:84:dd:a4:2f:ba:
d9:2a:56:7d:fe:7c:81:83:fe:08:ad:cc:02:22:c0:
07:b9:f0:d0:97:43:0e:8d:79:13:de:bd:83:48:9f:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AD:EE:23:41:A4:74:DC:F2:75:2D:B1:03:F3:5C:C0:11:62:94:97
X509v3 Authority Key Identifier:
keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6492D4985B9011EF8DB48C24C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.203.0/24
45.64.107.0/24
45.113.224.0/24
45.113.226.0/23
45.120.137.0-45.120.138.255
103.26.205.0/24
103.250.186.0/24
157.119.41.0-157.119.43.255
IPv6:
2405:7140:2::/48
2405:7140:4::-2405:7140:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:29:15:02:d6:87:ca:80:00:8b:d1:ef:3b:54:f4:b2:ac:75:
22:1f:e9:83:5d:7c:4c:0d:73:0e:8a:d0:06:29:27:08:29:f7:
ed:29:1b:28:48:da:1d:99:24:a6:41:be:c4:5a:a1:91:3a:77:
ca:93:19:b1:a9:31:ae:bf:e8:41:22:8f:56:a9:b2:fc:df:a3:
45:df:71:05:37:0d:1a:a2:8c:b5:83:1f:6e:77:62:14:d5:cc:
1b:aa:fe:24:81:4c:99:bb:3e:e9:97:38:63:43:4c:a8:eb:f4:
69:da:48:06:68:68:57:35:08:16:2a:62:90:c2:b5:31:75:ab:
9d:9b:ec:f9:1f:9a:f6:00:1c:c5:a6:90:0a:b0:8a:7a:c6:99:
06:0f:06:15:e2:4f:3b:5c:5e:bc:e7:a2:d6:1e:1b:e5:9b:44:
71:88:4c:ea:58:36:92:22:d3:5d:9f:44:9c:0d:13:2c:33:5b:
7d:d0:46:ff:b4:d8:55:6e:56:82:94:37:51:c1:da:52:9b:f9:
10:7c:9f:26:3f:c0:21:2a:1d:14:78:02:38:be:c6:ff:81:16:
cc:d9:6e:c6:f4:d6:64:ce:9c:9a:0b:cc:79:1c:77:07:88:1d:
56:d7:85:8a:75:e1:b6:da:17:0c:96:cf:e2:03:8a:07:b3:44:
56:9e:8a:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:05 2026 by rpki-client