
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/A4955B14A91B11EA924D2D7BC4F9AE02.roa
File: A4955B14A91B11EA924D2D7BC4F9AE02.roa (raw, json)
Hash identifier: CDcLRqPOlIl7GGhyIqwucsiXiEcpvCH7QLIogd4pmBQ=
Subject key identifier: EC:68:C6:90:F9:D8:E3:09:E2:FE:36:2E:A7:16:CE:70:9B:E7:06:DA
Certificate issuer: /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Certificate serial: 0998
Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/A4955B14A91B11EA924D2D7BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:49:15 +0000
ROA not before: Wed 31 Dec 2025 20:16:39 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140598
IP address blocks: 103.150.213.0/24 maxlen: 24
103.159.82.0/24 maxlen: 24
2001:df3:9080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl
rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:35:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Validity
Not Before: Dec 31 20:16:39 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a451eb-1250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:e3:91:f1:7b:de:f4:12:65:df:5b:66:a3:
3b:69:97:d6:7e:fc:ec:96:a8:38:28:3e:e6:62:c9:
65:ca:16:af:5b:ef:44:76:1c:60:15:c0:f6:08:96:
b7:9d:74:c5:14:d6:f2:4b:76:ea:7d:6b:ce:fa:38:
4d:12:09:c1:7d:df:be:cc:36:6b:60:98:cf:14:5c:
4f:59:7d:da:80:c1:3d:a2:05:31:f9:f9:d8:7a:10:
3c:1c:fa:1c:0f:c2:64:82:cd:8e:27:a9:92:e3:31:
ed:0e:62:62:fb:f9:a0:6d:05:28:f9:c9:64:53:44:
8e:4f:3c:78:4c:28:d8:c3:d4:eb:e5:5c:42:02:38:
cb:61:92:62:02:a0:67:cc:67:af:5d:d3:03:80:44:
32:13:61:ca:d5:3c:aa:02:71:a4:70:bd:f9:1f:c7:
94:f2:79:40:74:28:51:e7:15:4c:63:e8:22:11:dc:
77:ee:23:1a:b8:4f:3f:fc:d5:5e:9f:45:a9:b0:20:
fb:70:25:4b:c1:d1:13:d2:cc:e3:12:17:c7:75:c4:
ff:0a:1f:24:a6:a6:24:4f:8d:04:b2:af:7f:20:dd:
e6:18:56:38:4c:15:3a:02:b0:cd:7b:eb:cb:c2:e7:
88:74:e0:b3:ee:ad:cb:b4:f8:13:1f:9f:99:05:a3:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:68:C6:90:F9:D8:E3:09:E2:FE:36:2E:A7:16:CE:70:9B:E7:06:DA
X509v3 Authority Key Identifier:
keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/A4955B14A91B11EA924D2D7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.150.213.0/24
103.159.82.0/24
IPv6:
2001:df3:9080::/48
Signature Algorithm: sha256WithRSAEncryption
31:9e:bc:eb:d1:f8:74:2b:a2:6b:36:4c:0f:87:c7:94:c9:a8:
3e:44:2b:4d:2e:8b:82:f4:de:a5:96:be:c6:97:d7:d6:c5:43:
b8:8f:3c:eb:cd:28:58:95:fd:19:bb:f2:70:4f:64:22:c6:f1:
3c:89:c5:75:65:6e:81:64:06:11:9d:4e:cf:73:e3:9f:17:c9:
79:ea:d4:fc:e6:95:10:fc:74:99:f9:5d:92:ad:64:ed:9c:6d:
d4:00:d5:2d:3b:e0:a7:56:4f:3d:a7:45:60:97:a0:c9:82:08:
4d:56:4b:cf:2d:08:79:59:72:0f:eb:a4:d2:da:d0:e3:31:48:
cd:35:69:b5:66:78:cd:aa:72:a7:18:73:fb:6d:72:00:02:d3:
91:d0:f6:58:84:d9:b5:1f:35:60:aa:c4:5a:d6:b5:af:c8:43:
d0:17:64:47:72:85:29:ba:5c:86:b4:a0:7c:18:87:41:26:aa:
9d:83:6c:ca:4f:71:84:6e:cd:02:ca:7f:ee:86:49:b2:d9:f6:
59:27:bf:a1:23:4c:69:e7:b0:ca:af:5d:46:76:92:da:35:a0:
92:d3:fe:31:c6:49:f6:66:9c:82:c1:cd:49:21:87:d9:7b:8e:
8b:2a:19:71:e3:6d:72:78:00:a5:ec:c1:1d:fb:49:85:cc:19:
5e:15:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:28 2026 by rpki-client