
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/939790AAB9BD11EEA19BE74DC4F9AE02.roa
File: 939790AAB9BD11EEA19BE74DC4F9AE02.roa (raw, json)
Hash identifier: 4Xxfcn9vWAxmFmsir9WaEVwPirqEsxparkquZplonJM=
Subject key identifier: F0:28:2D:A9:DD:E0:A7:B6:46:C0:51:A6:2F:96:26:E0:26:92:23:11
Certificate issuer: /CN=A911DD04/serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Certificate serial: 0191
Authority key identifier: 47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/939790AAB9BD11EEA19BE74DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:42:37 +0000
ROA not before: Mon 29 Apr 2024 08:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142004
IP address blocks: 103.164.88.0/24 maxlen: 24
2001:df6:4380::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD04, serialNumber=473464847159BB152FBFE1DBB5A1B01546822F17
Validity
Not Before: Apr 29 08:21:27 2024 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69a3dfdd-9b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:28:38:9d:83:6f:f4:b9:f2:26:98:37:8a:
2b:1d:13:65:24:a6:b8:ad:9e:c1:b2:0f:e9:a8:98:
aa:c5:7f:e7:7c:52:98:44:50:16:5b:6a:06:18:6d:
9f:9b:dc:a7:40:16:5d:24:25:2c:07:17:4c:a2:83:
34:92:ff:94:1a:ac:30:d4:95:79:36:85:08:1c:4e:
3a:31:c6:69:3b:7d:ee:ae:5e:85:9e:d2:cc:ca:27:
19:bc:12:be:16:7b:b6:18:fb:54:84:46:ba:fb:29:
19:a6:96:33:c2:9d:cd:24:77:ca:a7:1b:19:53:a1:
9a:c4:72:07:82:1d:b6:4a:3b:43:83:37:9a:cb:a0:
a5:37:94:d4:9e:42:75:9e:fd:b9:49:90:83:70:41:
41:66:86:fb:c2:e2:0d:65:03:72:39:ab:35:5c:75:
35:cd:7b:0c:43:b5:9c:3f:0f:93:cc:d0:00:08:db:
cc:d2:9f:5e:4e:45:6d:1e:5e:35:f1:44:34:e4:4c:
82:22:ee:ff:b8:f4:fd:d6:9c:ff:84:fd:e7:09:6b:
71:83:ed:06:6d:e0:5a:8e:60:6d:9c:ee:1d:c1:f4:
cb:51:f2:34:c6:57:1e:e5:df:61:f8:98:ce:fb:29:
96:31:a9:23:e4:35:63:6b:3f:dc:fc:f7:90:d2:39:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:2D:A9:DD:E0:A7:B6:46:C0:51:A6:2F:96:26:E0:26:92:23:11
X509v3 Authority Key Identifier:
keyid:47:34:64:84:71:59:BB:15:2F:BF:E1:DB:B5:A1:B0:15:46:82:2F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/RzRkhHFZuxUvv-HbtaGwFUaCLxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RzRkhHFZuxUvv-HbtaGwFUaCLxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD04/C3D5FDC6B9BB11EEAA32295EC4F9AE02/939790AAB9BD11EEA19BE74DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.164.88.0/24
IPv6:
2001:df6:4380::/48
Signature Algorithm: sha256WithRSAEncryption
6b:4a:de:9e:24:1d:3c:e0:5d:bd:70:d6:a1:0c:d6:49:b4:05:
36:a4:b2:4a:4f:65:a8:da:12:17:83:da:cf:c7:11:b9:7a:97:
13:5e:72:0c:bf:0d:a0:37:03:f0:1a:70:1a:b9:c8:5f:2d:e2:
b1:3c:18:31:a0:78:49:82:29:6d:eb:e4:f9:08:f2:8c:30:72:
97:94:f1:b4:0d:45:3d:7c:71:b3:08:d0:28:3e:de:6f:2b:2e:
da:96:b7:28:d7:ce:50:b0:d0:e8:45:68:b3:10:05:e2:e0:16:
c3:14:f7:2f:8a:06:bb:e5:6c:b6:dc:a5:3f:a1:c3:ca:5e:50:
cc:b1:62:05:df:d2:54:2c:54:7b:40:b2:4c:60:55:b3:ec:65:
56:0e:7d:ed:47:93:fa:76:6d:c2:d9:13:27:a1:1a:9d:b5:ad:
30:70:ed:17:4c:a2:35:44:e2:d9:c2:9b:00:ee:d9:50:85:7d:
df:44:12:ea:6f:23:40:da:83:46:a5:6b:19:96:39:8f:69:69:
f8:f0:10:a0:bf:8a:17:d8:2c:ea:6b:13:02:57:bb:f4:71:2d:
6e:26:f9:7a:fa:b1:ce:10:1b:46:2a:40:01:bc:b4:92:39:28:
7d:19:55:ba:d3:05:9d:7d:bb:01:e9:06:60:c8:34:bc:08:de:
da:90:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:42 2026 by rpki-client