
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa
File: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (raw, json)
Hash identifier: j5ZJEpzdtOEiGnvXhEWjzNgokm2dtSBgk89RWseZw8s=
Subject key identifier: 50:14:EB:81:A8:EC:96:D7:86:98:5E:C6:4A:75:FE:4E:3A:C3:94:CB
Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Certificate serial: 0635
Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:37:53 +0000
ROA not before: Fri 11 Jul 2025 00:05:47 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 142542
IP address blocks: 103.168.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9
Validity
Not Before: Jul 11 00:05:47 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a43320-b2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:79:0e:b3:ec:7f:e3:2e:f2:96:dc:b9:db:
80:89:f7:24:2c:c6:b6:2b:20:e4:cb:33:ec:ca:a1:
6b:0f:a4:0e:31:b3:24:5f:f9:ff:ed:dc:a3:15:76:
72:41:d0:11:9e:4d:36:4c:0e:2a:9d:48:73:54:92:
a6:87:4d:b0:e9:f6:8b:1f:c5:28:9b:31:20:e5:e9:
52:da:68:ff:bc:b1:15:52:d4:31:85:4e:5a:38:aa:
eb:37:aa:7b:33:5b:79:fe:69:2c:1e:07:b7:4a:0a:
72:9a:c4:62:92:a7:c8:e9:04:22:f3:06:40:05:b1:
e2:4b:ad:4d:b3:56:66:fa:2f:ad:63:01:13:a0:57:
1e:08:65:59:c4:fd:6f:50:c2:3f:10:ef:6d:52:55:
8d:b3:15:de:fe:77:7a:9a:20:d0:6b:c6:52:d8:41:
a6:61:dd:3b:07:86:70:67:d6:89:ad:da:6b:37:17:
16:38:5c:94:40:40:d3:30:52:34:90:ff:d2:f8:58:
24:0e:3d:59:fd:da:7b:59:44:34:a2:9b:70:f9:a9:
1f:fb:52:40:bb:55:3c:fd:c3:ba:6c:c4:bb:62:d5:
18:06:39:3a:83:85:c0:80:6f:a1:f0:3e:fb:85:b2:
34:8f:d0:c5:4d:7a:df:ba:3f:c1:a3:b5:b3:6d:ad:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:14:EB:81:A8:EC:96:D7:86:98:5E:C6:4A:75:FE:4E:3A:C3:94:CB
X509v3 Authority Key Identifier:
keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/5284A644D3DC11EB9FCD6135C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.168.206.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ce:1d:0b:ba:88:bb:4a:a5:3a:d5:21:51:2c:27:4f:fe:89:
ff:aa:15:21:65:e8:ba:ad:69:5b:54:92:9e:33:59:69:8a:c6:
8a:69:7c:6f:db:0b:b0:07:97:2a:d8:ae:ae:37:e2:c4:eb:40:
74:d3:3f:0c:df:1f:67:e7:bb:26:05:df:b9:cc:d1:e7:e2:14:
e0:45:7b:cf:84:fd:0c:67:ef:39:b2:51:90:6d:55:87:0f:4a:
ab:74:67:2c:7f:b7:f7:91:a1:43:8e:03:86:53:22:f8:bd:0e:
67:33:24:f2:aa:7b:bb:30:4a:a7:d1:25:23:05:d2:45:21:14:
88:f7:4d:ce:0b:a0:9e:b9:61:3c:c2:c7:2d:b2:01:c6:61:70:
ee:50:c7:49:60:c7:17:b1:13:f9:71:e4:8e:00:38:a7:d0:aa:
e2:23:ee:91:70:33:ba:54:2e:b1:af:b0:bd:b3:c6:76:f4:5d:
3f:60:d3:1e:4f:6c:a8:c1:91:17:ec:68:4a:36:b3:a8:0b:bc:
db:28:30:6f:75:eb:27:14:fe:9d:d7:2e:eb:5e:00:85:68:10:
79:25:8c:5e:45:73:19:b5:16:e6:7e:83:89:57:19:17:5e:5f:
bb:2c:bd:66:62:36:57:c1:a3:25:5e:c0:19:5c:89:32:bb:fd:
fd:7e:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:46 2026 by rpki-client