
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/3E51F73E0C5111EAAF46A23FC4F9AE02.roa
File: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (raw, json)
Hash identifier: uaZx4UT5TdPMfrcPW0R83sm6zgQCWLRIUviUfv851Ho=
Subject key identifier: 15:AC:7E:F6:E5:32:0E:E3:92:F0:90:60:BE:F8:63:80:EB:00:B7:FB
Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Certificate serial: 0CB9
Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/3E51F73E0C5111EAAF46A23FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:24:09 +0000
ROA not before: Thu 22 May 2025 19:13:14 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 137815
IP address blocks: 103.114.168.0/22 maxlen: 22
103.114.168.0/23 maxlen: 23
103.114.168.0/24 maxlen: 24
103.114.169.0/24 maxlen: 24
103.114.170.0/23 maxlen: 23
103.114.170.0/24 maxlen: 24
103.114.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3257 (0xcb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570
Validity
Not Before: May 22 19:13:14 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a405b9-8a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:b8:42:01:a8:5f:ff:50:76:8f:1e:0f:42:
26:f5:ee:c6:01:5e:05:2e:d8:54:6e:42:c4:84:3f:
4b:5c:58:e5:f1:37:34:02:be:73:70:4b:b3:62:9c:
f0:6f:41:18:88:99:02:b4:91:5f:d5:84:9f:79:95:
0d:39:8a:18:bd:d3:b8:39:a8:7a:9a:e4:ed:cf:5c:
84:1c:11:96:7e:3b:9f:d6:b5:19:89:62:98:dc:6a:
d0:83:fa:48:cd:0f:2d:f1:3f:b9:90:ee:92:84:0e:
a1:36:a2:ec:0c:88:11:d9:a0:46:26:08:ff:07:62:
25:0f:ec:02:87:be:e7:2a:b0:c9:08:73:84:70:38:
37:0c:3d:75:8e:a6:67:e1:8d:d7:b4:d6:65:71:e4:
45:0f:c1:ec:37:8b:9a:8a:9a:43:a1:5a:ff:3f:f5:
1a:7a:65:bb:9d:c4:22:30:66:a4:db:49:8a:1f:0a:
21:b7:46:3f:82:1f:46:2f:68:7f:8f:d1:4b:f3:31:
18:a6:08:ea:41:48:fc:03:27:d8:b0:65:be:3f:1e:
97:b7:ce:0e:33:4b:6c:5b:9e:11:57:48:3e:72:29:
53:38:12:dd:4b:8e:b8:70:5c:ec:38:dd:90:46:f8:
74:eb:f9:42:9a:d8:b8:db:30:4d:c7:a4:5e:ef:c5:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:7E:F6:E5:32:0E:E3:92:F0:90:60:BE:F8:63:80:EB:00:B7:FB
X509v3 Authority Key Identifier:
keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/3E51F73E0C5111EAAF46A23FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.114.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:7f:50:97:27:ad:24:74:9f:47:9f:10:f4:f4:40:ee:2c:ec:
83:7d:3e:0b:06:d5:1f:96:87:5a:ed:7d:37:97:c0:f2:96:60:
7c:ca:49:d9:73:90:bf:02:e2:f6:32:37:43:93:8f:0c:00:9a:
25:1d:8f:f3:16:b1:2e:81:4b:29:a4:e8:20:f1:19:b5:a0:06:
9d:13:cf:c8:61:78:87:93:14:0e:45:21:2b:f8:2d:ff:56:a3:
fa:ba:b4:2e:32:f4:f5:73:10:bf:d5:6c:ca:8d:f8:02:db:3c:
b9:d4:13:2b:dd:eb:3b:0f:2b:6b:66:6a:dd:bc:d7:12:64:55:
04:09:0f:60:77:70:8c:51:85:1e:83:cd:a8:06:9c:18:76:3f:
ec:c6:43:c6:80:cc:64:11:49:de:61:f7:4f:87:79:15:c8:b5:
fa:bc:64:f3:20:81:c0:94:12:ed:13:00:b8:e5:e1:0c:43:6c:
ee:99:29:49:72:e3:87:f3:13:a0:33:3d:13:80:ad:92:24:ed:
2c:35:dd:e0:53:9e:68:1b:9c:7e:83:0d:ce:3c:3c:bd:1d:07:
30:5a:40:7f:3e:b0:be:1b:6d:29:51:16:6d:7e:3b:ef:51:ef:
40:0b:f1:35:f2:f8:af:95:f4:77:a6:3f:c7:80:3c:69:76:4f:
47:b7:88:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:33 2026 by rpki-client