
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa
File: 2B21EC2EE4E111E981365C17C4F9AE02.roa (raw, json)
Hash identifier: iut8EEVryRG83jh5a/5UJcx3oIfMx7vlVFCC3Vozxn0=
Subject key identifier: 43:13:BF:8B:AE:26:C0:BA:8A:C0:9E:C9:1A:E5:ED:D9:A0:0C:00:D4
Certificate issuer: /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Certificate serial: 0EE1
Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:58:27 +0000
ROA not before: Wed 02 Jul 2025 18:26:17 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 134356
IP address blocks: 103.140.10.0/23 maxlen: 24
2405:4c40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl
rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3809 (0xee1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Validity
Not Before: Jul 2 18:26:17 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a48c53-20ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:a7:cb:0e:7e:6a:2f:ce:41:69:5f:89:e9:
a6:42:ef:d8:8c:26:9c:fd:a1:28:5a:49:4e:e5:75:
ce:18:5c:36:23:f2:d8:ed:f1:b9:e4:2d:19:11:19:
5d:6e:df:bb:fc:16:df:2f:50:c0:97:8b:08:aa:18:
c8:e0:f3:d8:66:ce:3e:84:d6:5b:8b:4d:11:11:65:
94:b5:77:89:a4:3d:43:f9:38:c2:d6:87:15:47:a8:
9b:f4:8f:91:19:62:af:00:de:41:2a:b5:5e:1c:1f:
07:57:e9:7a:68:6b:24:ff:ab:d8:7c:69:eb:be:3a:
19:37:e0:b2:8c:9c:53:7d:28:a9:33:50:66:06:04:
a7:8f:c1:19:76:0b:f6:fc:61:6b:9c:fe:d4:cc:a9:
f9:12:9b:1e:8a:68:ae:81:67:c7:6f:a5:2e:94:67:
96:3e:df:e1:7c:5f:d3:ef:d9:c8:b0:47:26:6c:ec:
75:81:29:cf:eb:82:6b:9e:86:3b:21:79:d0:bc:53:
ea:e6:6a:57:a8:04:5b:80:56:58:28:67:b5:ef:41:
eb:f2:c0:6c:d1:8c:ef:84:57:6a:f3:0a:45:34:1c:
3b:13:0b:87:d5:b4:dd:53:9f:f8:3d:4d:84:77:d8:
a1:df:19:8d:86:17:e1:f1:66:75:e7:6a:52:c5:95:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:BF:8B:AE:26:C0:BA:8A:C0:9E:C9:1A:E5:ED:D9:A0:0C:00:D4
X509v3 Authority Key Identifier:
keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/2B21EC2EE4E111E981365C17C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.140.10.0/23
IPv6:
2405:4c40::/32
Signature Algorithm: sha256WithRSAEncryption
0b:0a:02:1a:44:a0:94:fd:2d:18:9b:a3:fe:f1:85:6c:b0:de:
e9:39:f1:7b:87:13:7e:a6:68:39:b9:60:97:ee:ab:11:4f:78:
07:00:0b:f4:43:c8:ce:ea:53:a4:2e:3a:5f:82:27:be:7b:e8:
9b:88:cb:dd:c1:e2:ad:db:1f:31:8c:b8:4e:33:15:48:eb:7d:
39:9d:e2:e6:b1:81:fc:de:c1:65:5c:40:27:65:e1:3b:0d:32:
f3:c0:b1:b5:4e:20:8d:0e:6f:ec:1b:02:5f:b5:aa:3b:2b:a4:
e9:44:38:44:d6:13:76:2b:b5:2a:8d:5d:48:bd:92:99:14:59:
e8:2b:d5:5a:83:8f:7d:5d:b8:94:1a:ff:1e:42:51:bf:3d:06:
0f:1e:b5:d4:af:40:b5:89:8d:53:c4:b4:c1:43:83:f5:0a:db:
c6:99:c0:24:53:a7:08:6d:26:54:a3:bb:ba:c5:2c:da:54:18:
81:d9:a0:da:b4:94:e1:29:45:c7:51:e0:8c:31:fb:3b:3e:55:
71:cb:10:59:51:11:8c:ab:d7:ab:f5:61:0a:1f:04:aa:ae:f7:
a3:59:7c:0d:e8:6c:c6:eb:71:3b:1a:9c:86:86:86:0e:28:15:
fb:b8:ec:5f:e6:f2:1b:0c:19:ff:fe:d6:f2:02:52:0e:2d:c0:
a0:c2:06:12
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICDuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3NDMxMTAvBgNVBAUTKDg0RTRGRkI2OTI3Rjc3RjVDM0YwQTI1MjY4MkY3MURE
QjM3N0IxMUQwHhcNMjUwNzAyMTgyNjE3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGM1My0yMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApqqnyw5+ai/OQWlfiemmQu/YjCac/aEoWklO5XXOGFw2I/LY7fG55C0ZERld
bt+7/BbfL1DAl4sIqhjI4PPYZs4+hNZbi00REWWUtXeJpD1D+TjC1ocVR6ib9I+R
GWKvAN5BKrVeHB8HV+l6aGsk/6vYfGnrvjoZN+CyjJxTfSipM1BmBgSnj8EZdgv2
/GFrnP7UzKn5EpseimiugWfHb6UulGeWPt/hfF/T79nIsEcmbOx1gSnP64JrnoY7
IXnQvFPq5mpXqARbgFZYKGe170Hr8sBs0YzvhFdq8wpFNBw7EwuH1bTdU5/4PU2E
d9ih3xmNhhfh8WZ152pSxZV73QIDAQABo4ICbzCCAmswHQYDVR0OBBYEFEMTv4uu
JsC6isCeyRrl7dmgDADUMB8GA1UdIwQYMBaAFITk/7aSf3f1w/CiUmgvcd2zd7Ed
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc0My9GOEFFMjg4MEEy
MUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2RfWEQ4S0pTYUM5eDNiTjNz
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hPVF90cEpfZF9YRDhLSlNhQzl4M2JOM3NSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM3NDMvRjhBRTI4ODBBMjFEMTFFOTgyNDJBRDgxQzRGOUFFMDIvMkIyMUVDMkVF
NEUxMTFFOTgxMzY1QzE3QzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBZ4wKMA0EAgACMAcDBQAkBUxAMA0GCSqGSIb3DQEBCwUAA4IBAQAL
CgIaRKCU/S0Ym6P+8YVssN7pOfF7hxN+pmg5uWCX7qsRT3gHAAv0Q8jO6lOkLjpf
gie+e+ibiMvdweKt2x8xjLhOMxVI6305neLmsYH83sFlXEAnZeE7DTLzwLG1TiCN
Dm/sGwJftao7K6TpRDhE1hN2K7UqjV1IvZKZFFnoK9Vag499XbiUGv8eQlG/PQYP
HrXUr0C1iY1TxLTBQ4P1CtvGmcAkU6cIbSZUo7u6xSzaVBiB2aDatJThKUXHUeCM
Mfs7PlVxyxBZURGMq9er9WEKHwSqrvejWXwN6GzG63E7GpyGhoYOKBX7uOxf5vIb
DBn//tbyAlIOLcCgwgYS
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:58 2026 by rpki-client