
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/1D956B9E858811ED9CDCC91BC4F9AE02.roa
File: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (raw, json)
Hash identifier: JqaPwoYkZsoCryG868iVTZ8zY+76Lni/250smlWRpm8=
Subject key identifier: 91:F7:F1:87:7C:3C:9C:F4:39:35:72:7F:C7:68:5B:F3:AF:A4:2E:A6
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 0298
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/1D956B9E858811ED9CDCC91BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:14:54 +0000
ROA not before: Tue 01 Apr 2025 02:58:33 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 55720
IP address blocks: 103.86.122.0/24 maxlen: 24
103.86.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:28:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664 (0x298)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Apr 1 02:58:33 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4740d-d3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:6b:69:57:88:99:65:32:cf:8c:2b:55:2c:
2a:2b:e6:11:03:29:2a:20:b2:7b:62:b8:14:e4:c9:
97:6a:e6:75:18:ce:44:bc:dd:f6:b0:23:86:3d:e3:
1d:36:63:d5:60:57:5a:9d:a8:0f:c7:aa:01:fe:91:
7a:73:61:3b:bf:73:74:82:04:80:9d:af:f4:36:48:
1d:f2:9d:9f:17:b1:79:02:15:b3:31:ac:7d:6d:da:
0b:f7:03:c9:3f:43:64:86:a3:3e:ac:bb:54:d9:d1:
72:af:2f:af:ed:e5:36:a3:9b:ca:f0:2b:ae:75:95:
1e:e0:00:e5:7c:69:36:ee:df:4c:53:79:31:25:08:
74:45:d4:1d:9a:42:ff:fd:f7:89:fe:4f:88:8c:5b:
a2:4d:3a:ab:4d:9c:b7:bc:1c:83:55:56:41:32:35:
78:ca:b4:7c:38:f5:e6:bf:23:c2:56:27:ab:a1:6f:
c1:79:c8:ca:05:d3:dd:64:26:c9:8d:f6:e7:d5:07:
ed:ac:7b:e3:d0:92:ab:e4:07:d2:02:33:14:1a:17:
80:4d:d3:b6:44:03:46:b6:c8:c0:57:10:3e:61:3d:
c6:a5:d6:67:14:42:41:ba:c1:10:ad:83:ba:b2:1d:
a5:78:8e:52:7d:ab:2c:a0:02:c2:a4:41:0e:f4:bd:
ea:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F7:F1:87:7C:3C:9C:F4:39:35:72:7F:C7:68:5B:F3:AF:A4:2E:A6
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/1D956B9E858811ED9CDCC91BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.122.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:81:c3:71:51:57:ae:25:64:f8:c9:18:b4:68:71:7b:b6:79:
1e:2a:eb:b4:e1:0e:98:98:7b:5d:e6:f2:f0:0e:1c:10:75:55:
05:7f:fd:e9:7e:b8:63:dc:84:59:ee:e9:92:e3:20:fa:2a:89:
72:63:fe:b6:29:74:ff:de:5e:59:34:3d:85:e4:3d:89:fd:a6:
73:97:75:e3:84:8c:c3:c6:40:80:0f:9d:c7:71:9e:5d:96:6f:
b9:5d:70:62:7d:fb:2c:ab:dd:76:59:b4:51:77:e0:3e:bb:ce:
e7:22:62:13:71:ed:2f:17:f0:48:bc:39:f8:f0:8b:3a:97:ab:
fe:e7:a5:b8:4c:25:6b:d6:68:b6:25:34:bb:f3:dc:37:db:07:
1e:89:1a:9a:05:a8:2d:ff:81:a8:e4:ba:b5:45:23:ea:37:d5:
53:23:a3:8f:3a:d9:0a:e0:6e:09:88:9e:e3:8a:46:61:c9:be:
ec:20:b7:28:8e:ee:fb:82:bc:f5:f7:82:19:ee:58:ad:26:d3:
f6:fe:2b:f1:4d:ea:41:8d:cf:87:ef:7b:59:36:95:4e:f0:71:
d0:12:96:72:41:19:47:32:6a:e6:4f:51:79:20:6d:9c:9e:d9:
14:81:f0:74:b2:02:0b:02:2d:ba:5b:48:8e:5a:83:fb:0d:71:
19:2a:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:10 2026 by rpki-client