
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/FD1CE81824DC11F1AC9E21B6AD833773.roa
File: FD1CE81824DC11F1AC9E21B6AD833773.roa (raw, json)
Hash identifier: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=
Subject key identifier: A0:65:71:5B:60:09:5B:35:9A:13:D8:A9:9C:9F:52:11:93:C1:C4:99
Certificate issuer: /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial: 14
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/FD1CE81824DC11F1AC9E21B6AD833773.roa
Signing time: Wed 15 Apr 2026 08:44:12 +0000
ROA not before: Wed 15 Apr 2026 08:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133139
IP address blocks: 42.96.104.0/22 maxlen: 24
103.225.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Validity
Not Before: Apr 15 08:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69df4fdb-5e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:5b:39:5a:b8:a1:52:c7:ad:8a:37:83:94:
ba:3d:70:8d:3b:b1:7e:f8:ac:06:c2:84:d9:3f:d3:
0b:a8:ef:d0:37:9a:ed:c0:0e:20:65:30:de:4b:e4:
fa:93:08:ee:05:6d:89:ff:80:2c:ba:f3:82:a8:3d:
b5:bb:64:88:22:ba:cc:29:4c:cc:eb:84:68:15:13:
98:e3:70:e4:b7:35:44:a9:e2:0b:c2:f9:5d:c1:2e:
35:31:b3:2c:7c:c3:53:42:06:b5:d4:05:74:bb:cb:
7a:34:f7:3a:89:ef:85:0b:80:d1:b8:7c:9b:74:e9:
a5:a6:a3:78:7f:d8:3e:f7:35:dd:94:bc:aa:d8:61:
9d:1d:1a:29:37:b5:fc:51:83:8d:9e:0b:ac:85:4c:
09:44:63:42:52:6d:e7:4d:fc:e5:8b:71:78:3b:ad:
5e:1c:71:e5:f7:f5:7a:bc:af:bc:aa:50:20:7e:dc:
a4:e8:d7:1a:1f:da:c7:80:08:a0:af:58:0e:b5:c0:
fd:37:ff:1a:bb:43:51:9d:e4:5f:1c:89:c7:31:69:
d4:f0:8a:bf:38:1b:a9:2b:b5:d0:64:0c:06:08:4e:
c4:a8:0c:67:25:1a:eb:94:f1:98:c4:2b:2b:a9:80:
c4:2e:ea:ea:13:a8:dd:bf:a2:c3:60:d1:5f:11:83:
06:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:71:5B:60:09:5B:35:9A:13:D8:A9:9C:9F:52:11:93:C1:C4:99
X509v3 Authority Key Identifier:
keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/FD1CE81824DC11F1AC9E21B6AD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
42.96.104.0/22
103.225.32.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ac:79:b9:a0:33:03:73:cf:0e:84:13:36:5f:4e:c6:55:ea:
55:b8:10:b8:e3:13:ed:72:bb:39:9e:cc:4d:47:65:46:fb:8b:
32:51:9d:53:e2:12:b7:2d:43:67:54:9f:92:47:e3:f0:3b:e1:
6f:26:ec:2e:e5:18:b1:aa:db:40:10:b7:25:2b:56:5a:eb:60:
0e:1e:99:92:16:f4:88:4f:3b:5b:f6:00:50:f9:a0:16:70:73:
49:06:4f:18:00:1f:c3:fd:db:23:cf:d0:ef:7a:26:ca:5b:d7:
03:cb:d7:04:86:e3:4f:5b:99:9c:39:62:aa:9f:06:42:5d:9f:
30:94:e0:7a:d3:a1:64:9f:31:f4:41:75:81:f3:65:83:16:3a:
0d:c3:2f:73:e9:fb:a2:96:d7:3e:22:7e:9f:f7:f3:6b:2c:c7:
fe:da:e7:a1:62:9a:ef:fc:c0:89:da:86:b5:b2:5f:20:f2:4d:
9a:44:9d:9e:c6:ef:d0:3c:b6:ce:90:08:9c:6a:e7:f8:f3:d2:
0d:6d:dd:58:da:b6:35:1c:0b:f5:e0:73:75:65:04:02:06:b7:
2d:59:45:ff:ab:12:3a:f5:fd:88:8c:14:ab:2e:f4:d3:8f:96:
c7:14:57:fe:c1:c9:b1:74:a6:63:16:c4:4a:47:7a:00:0c:a1:
c1:a1:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:57 2026 by rpki-client