
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/1D956B9E858811ED9CDCC91BC4F9AE02.roa
File: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (raw, json)
Hash identifier: 3O6BvMokBPQb3h3RA+cEG9OncfKf9sHCk/LbeGG4QfA=
Subject key identifier: FC:BE:48:40:7F:77:29:F6:8A:51:B0:A6:F7:46:F8:B5:A2:13:C3:F4
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02B5
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/1D956B9E858811ED9CDCC91BC4F9AE02.roa
Signing time: Wed 01 Apr 2026 02:34:18 +0000
ROA not before: Wed 01 Apr 2026 02:34:18 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 55720
IP address blocks: 103.86.122.0/24 maxlen: 24
103.86.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 01:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Apr 1 02:34:18 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc842a-a87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:a9:90:94:1d:d9:f5:d6:4c:db:f7:99:b9:
49:24:ce:e9:06:1b:4e:80:61:73:aa:72:2f:a2:ec:
90:15:06:1f:d9:ae:b1:1d:e7:12:9d:bf:06:07:f3:
f4:94:a0:05:48:00:b6:15:c0:ab:33:16:b4:a0:d3:
b6:3f:2d:87:2a:3c:1d:ab:fb:4b:c3:a0:99:0c:31:
6c:90:d7:c4:99:3e:c3:6e:d7:bd:e3:c4:c6:08:26:
80:d8:8f:36:68:f7:cf:3d:2e:35:82:1d:56:7a:fd:
1a:92:44:0b:71:5b:8e:da:0f:83:b8:43:e2:c6:d1:
29:56:de:9d:57:0e:11:cb:c3:e8:a5:78:d5:0b:73:
b2:04:b4:29:12:cf:d8:9f:e9:cd:e0:13:37:6b:6d:
ed:44:0b:33:99:e6:e8:aa:bc:94:3c:16:be:12:16:
f6:37:3a:45:d1:e2:e4:d7:00:a1:39:5e:b3:02:ff:
af:8a:62:a0:58:b7:87:66:a2:29:c8:36:cd:e2:ae:
10:53:60:b4:64:4c:7b:da:ee:7a:06:f3:a2:2f:54:
8c:0a:91:fb:89:57:ef:82:85:9f:ee:66:be:17:94:
dc:28:89:bc:00:0b:05:cd:af:bb:ea:db:e0:5c:b0:
ea:d2:cc:1e:8b:61:41:0a:bc:0e:c1:41:28:e8:bd:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BE:48:40:7F:77:29:F6:8A:51:B0:A6:F7:46:F8:B5:A2:13:C3:F4
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/1D956B9E858811ED9CDCC91BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:7b:3e:81:f5:2a:66:24:0e:2e:88:21:96:52:b9:94:a3:97:
4b:ea:b3:a8:c3:66:97:b5:8d:d2:32:23:f2:06:6c:1d:99:d2:
68:27:0e:88:45:1b:66:ed:a6:02:43:e6:3d:b3:c9:38:b9:4e:
50:0c:60:fb:0c:57:48:30:a4:60:0c:5a:f1:f5:55:2f:d7:f1:
39:85:1c:f6:80:f6:76:17:c9:06:32:1c:46:8b:a5:8a:67:53:
77:40:55:46:13:11:bf:fd:55:fd:89:cd:31:49:e1:bf:5e:f1:
95:bc:47:c2:87:61:a7:82:5e:23:cd:9f:3d:c6:dd:49:36:f4:
b4:20:60:82:1b:60:72:fc:f8:f8:f4:b5:fa:ca:a4:8e:7e:d0:
8e:20:94:c2:69:0f:45:31:a7:4d:8c:e2:6e:52:a6:4b:07:a7:
5a:21:33:c2:8e:84:9b:fc:4e:37:69:37:38:53:4d:b6:f0:a0:
2a:e8:51:23:77:d3:f2:4c:7b:6b:d5:e8:83:ee:3c:cb:2c:a8:
df:20:59:5a:ac:7c:bb:bf:3e:df:6c:33:b3:60:73:ef:64:ab:
08:6d:f6:5a:64:99:23:95:2a:ef:1f:d5:60:ec:68:7a:cd:e1:
6a:e7:4f:19:38:0e:d5:14:59:5f:f3:ef:7d:34:e1:44:8b:0b:
fa:cd:02:bc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICArUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0
ODJDNkY5QjQwHhcNMjYwNDAxMDIzNDE4WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNjODQyYS1hODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApdGpkJQd2fXWTNv3mblJJM7pBhtOgGFzqnIvouyQFQYf2a6xHecSnb8GB/P0
lKAFSAC2FcCrMxa0oNO2Py2HKjwdq/tLw6CZDDFskNfEmT7Dbte948TGCCaA2I82
aPfPPS41gh1Wev0akkQLcVuO2g+DuEPixtEpVt6dVw4Ry8PopXjVC3OyBLQpEs/Y
n+nN4BM3a23tRAszmeboqryUPBa+Ehb2NzpF0eLk1wChOV6zAv+vimKgWLeHZqIp
yDbN4q4QU2C0ZEx72u56BvOiL1SMCpH7iVfvgoWf7ma+F5TcKIm8AAsFza+76tvg
XLDq0swei2FBCrwOwUEo6L3tDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPy+SEB/
dyn2ilGwpvdG+LWiE8P0MB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0
MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM2MjEvRjdEMDBCRUU3NDM5MTFFRDk4NkQ3Mzg1QzRGOUFFMDIvMUQ5NTZCOUU4
NTg4MTFFRDlDRENDOTFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ1Z6MA0GCSqGSIb3DQEBCwUAA4IBAQBbez6B9SpmJA4uiCGWUrmU
o5dL6rOow2aXtY3SMiPyBmwdmdJoJw6IRRtm7aYCQ+Y9s8k4uU5QDGD7DFdIMKRg
DFrx9VUv1/E5hRz2gPZ2F8kGMhxGi6WKZ1N3QFVGExG//VX9ic0xSeG/XvGVvEfC
h2Gngl4jzZ89xt1JNvS0IGCCG2By/Pj49LX6yqSOftCOIJTCaQ9FMadNjOJuUqZL
B6daITPCjoSb/E43aTc4U0228KAq6FEjd9PyTHtr1eiD7jzLLKjfIFlarHy7vz7f
bDOzYHPvZKsIbfZaZJkjlSrvH9Vg7Gh6zeFq508ZOA7VFFlf8+99NOFEiwv6zQK8
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:53 2026 by rpki-client