
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/C3C2560ABFDA11F0A858A529C4F9AE02.roa
File: C3C2560ABFDA11F0A858A529C4F9AE02.roa (raw, json)
Hash identifier: BkxKV7IhdZCefMM8QPhYXEEYW9dJOyUUvjsBlVaijE8=
Subject key identifier: 96:1B:21:8D:11:75:C0:26:08:CD:C0:85:C9:03:F1:DB:4B:66:50:57
Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial: 02B1
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/C3C2560ABFDA11F0A858A529C4F9AE02.roa
Signing time: Wed 01 Apr 2026 02:34:11 +0000
ROA not before: Wed 01 Apr 2026 02:34:11 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 17941
IP address blocks: 103.86.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Validity
Not Before: Apr 1 02:34:11 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cc8423-ed8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ba:a2:37:a7:20:08:fd:de:ac:da:45:7c:59:
b2:fe:17:7a:4c:29:ec:9b:05:5d:71:40:c4:10:b1:
7b:40:8b:8e:b6:55:e6:c6:79:7d:f1:31:b9:76:9d:
43:b5:7d:c5:75:c7:f8:76:ff:9f:d5:71:dd:67:58:
e2:a5:90:ee:a9:52:8c:fb:5c:aa:3c:c7:2c:09:e8:
c1:2d:7b:18:de:23:b3:e1:cf:0c:23:86:7a:4f:11:
c3:af:e8:9b:f7:a8:f2:54:ec:d2:5a:80:99:dd:77:
9f:fa:18:af:17:d7:94:5f:94:56:95:5c:43:5e:c1:
8f:44:a9:50:70:3c:e3:95:be:51:b3:f2:b1:4c:b8:
c7:69:9c:c3:fd:a0:1a:79:07:a2:ee:22:a6:5e:36:
a8:53:a8:ee:f4:52:ad:5b:fc:c7:e9:fd:73:e8:35:
76:4c:d3:d6:e6:65:6a:72:8a:5d:54:84:cd:09:d7:
73:7d:56:c2:81:ba:fe:24:b1:70:72:9f:73:8d:a7:
55:e7:d7:78:78:4e:1e:a5:5c:b8:67:e7:af:fe:75:
46:6d:85:ac:49:f0:55:5e:fa:d6:d3:68:93:38:79:
67:d4:b2:20:4d:cb:67:dd:af:d1:c7:54:87:df:05:
fa:90:41:0c:18:6e:f6:c0:c5:d2:33:2a:2f:e8:71:
71:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1B:21:8D:11:75:C0:26:08:CD:C0:85:C9:03:F1:DB:4B:66:50:57
X509v3 Authority Key Identifier:
keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/C3C2560ABFDA11F0A858A529C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.86.123.0/24
Signature Algorithm: sha256WithRSAEncryption
29:60:04:f6:01:37:fe:83:a0:3a:7e:7d:cf:fc:ff:e7:9e:03:
f0:99:48:a8:d5:1e:67:a5:38:94:70:7f:0a:ed:b3:f5:2d:4a:
a9:2f:c6:a4:18:3f:9c:a6:16:d9:8b:1f:98:89:18:7d:ab:1b:
04:94:0b:ac:2c:88:e0:b7:ed:c2:6a:be:52:eb:99:41:16:52:
5d:a1:b4:02:11:5f:d5:d0:55:03:72:2b:6e:33:50:ef:24:fa:
17:11:4f:e2:b4:36:7c:4e:a2:27:9d:13:0f:5d:ca:ca:aa:3f:
28:07:84:15:78:34:8b:03:9b:e6:49:cd:0c:ae:3d:e8:b8:7d:
de:98:76:c3:59:6a:dd:df:52:b8:7f:ce:bd:3b:17:49:af:c2:
84:f4:23:69:a1:57:73:23:e3:6a:4e:4a:11:c2:e1:26:c5:19:
b1:dd:c3:f0:36:77:80:d7:60:38:bf:c8:f9:1f:c4:27:b8:5d:
bd:8a:90:dc:5d:a8:25:cd:c4:61:62:5b:89:36:39:09:b3:5f:
16:56:41:57:38:14:eb:f2:8a:2b:30:e6:de:be:ef:dd:0f:bc:
db:4a:4e:b2:f0:b6:6e:f7:b8:ce:88:20:11:69:30:ed:93:99:
fb:bb:ad:19:c5:92:7e:45:18:2f:d0:c9:96:f4:f6:da:a6:96:
86:1f:2f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:33:00 2026 by rpki-client