
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4337A376EC3211F080B8AAB9416F56BC.roa
File: 4337A376EC3211F080B8AAB9416F56BC.roa (raw, json)
Hash identifier: 0XIZnoNrC2grMc/00+Jp/CKQRxxNj6Nk+mSX6aVc2KE=
Subject key identifier: 12:D1:23:2F:48:64:60:D6:48:31:C6:E6:03:3D:75:1E:00:A7:F2:39
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02B3
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4337A376EC3211F080B8AAB9416F56BC.roa
Signing time: Wed 01 Apr 2026 02:34:14 +0000
ROA not before: Wed 01 Apr 2026 02:34:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 214143
IP address blocks: 103.86.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Apr 1 02:34:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc8426-4f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:a7:da:f9:cc:be:65:f5:b4:6a:b3:17:a1:
17:2d:50:6b:e2:67:bf:27:f5:8f:d9:4f:b6:fa:8c:
29:0b:be:4b:86:e8:85:ab:56:82:fc:39:d5:98:11:
b9:92:53:c3:f3:e6:83:c4:2b:fd:cf:e0:a2:7f:b1:
76:1d:5d:7d:00:a3:39:c9:49:ea:28:80:08:b3:16:
6c:3e:43:ca:4d:11:79:8e:ea:76:ea:1b:e4:9e:6e:
ea:1e:02:e9:bc:97:40:f2:08:86:03:c5:e1:81:48:
cb:7d:20:c7:63:79:9a:99:b3:3d:2b:74:05:2e:fc:
3a:fa:1e:a3:ff:08:fa:a7:74:99:08:23:3a:28:b4:
74:b0:7d:31:18:f5:c3:b8:d8:6b:65:07:48:13:15:
4f:3c:3f:f0:f7:3b:0d:66:ec:46:8e:d4:b6:4e:74:
09:44:fc:fc:9e:91:f9:71:e6:5d:ab:d6:be:0f:8b:
97:9e:4d:8e:39:c8:fe:5c:57:ac:d1:69:0b:6c:5e:
b5:f3:1b:03:86:ef:06:b9:1f:69:02:de:05:98:3d:
ea:31:7d:fd:53:d4:de:c6:b2:d7:fc:5b:7f:68:b0:
a3:8d:4d:be:7e:7d:42:e8:94:37:cf:45:5b:73:bc:
11:fd:7b:e7:d4:3b:1e:44:a4:16:84:38:a8:61:4e:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D1:23:2F:48:64:60:D6:48:31:C6:E6:03:3D:75:1E:00:A7:F2:39
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/4337A376EC3211F080B8AAB9416F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:84:4a:8f:96:06:c9:c4:be:a1:3b:fe:91:86:ea:56:df:b1:
2a:06:ab:e3:4e:81:bf:3b:a5:f7:4e:d9:c2:63:35:81:c7:60:
e7:fc:4b:ac:bb:7b:f7:2f:67:bc:fe:0d:20:84:8e:20:db:41:
cd:39:74:a6:72:4f:34:4b:b5:24:9a:aa:bd:4b:82:c3:ab:96:
91:80:e9:1c:71:2e:65:cc:d1:67:dd:59:dc:4a:5a:12:e1:78:
70:35:7a:b5:28:04:d5:78:09:f2:08:4d:7a:a3:57:8a:3d:1c:
4f:b1:b6:71:80:f1:72:b0:fe:05:d5:80:40:ef:b4:26:18:bc:
48:a5:3c:be:94:5c:4a:d6:ee:90:4c:08:e3:c6:ab:98:c5:f9:
b9:cd:d1:46:0d:21:ce:31:ff:40:20:04:4c:74:a6:75:7a:e7:
ec:eb:07:43:0a:2d:ee:75:0f:d2:b2:08:c3:07:2e:c2:43:a7:
ab:5e:40:74:5c:d3:84:09:46:43:ea:59:58:98:1d:8d:fb:6a:
ad:f8:7d:15:10:54:21:33:62:7a:6c:fb:18:82:07:25:b2:1b:
07:a4:e3:79:ac:db:be:c1:02:b4:ae:79:1b:6f:ff:4a:15:71:
ff:e7:46:60:11:49:c8:ed:15:59:d8:3b:31:55:92:1b:17:19:
ef:3c:37:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:03 2026 by rpki-client