
$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
File: F11B4C14E40111ECBD78E571C4F9AE02.roa (raw, json)
Hash identifier: wBK+QyPAeSvy6asg1uEsJFk8VOo4AvH0ZR714TB55hA=
Subject key identifier: 24:EB:E5:5A:CF:4B:56:CD:4D:17:4F:1E:CA:01:9B:00:7C:BF:00:68
Certificate issuer: /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial: 050A
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:52:15 +0000
ROA not before: Sat 17 May 2025 00:55:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58909
IP address blocks: 103.24.200.0/22 maxlen: 22
2400:c6c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1290 (0x50a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Validity
Not Before: May 17 00:55:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a41a5f-0885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:dd:66:8c:b3:9e:d9:9b:a5:89:40:64:c5:
87:a7:3c:7a:2d:92:f4:e4:e0:98:ba:2f:cd:e9:6a:
57:a8:89:91:a1:04:98:6d:24:30:fd:8e:17:10:1f:
28:ec:ea:5f:e8:f5:be:d7:06:12:c7:54:94:97:93:
e9:ef:b9:4a:44:93:f1:d7:35:0c:d6:74:fc:36:d7:
78:84:18:3d:c4:ea:03:b4:98:45:6c:36:a1:49:ec:
19:47:14:04:2e:e7:aa:b0:88:ad:c7:14:bf:91:04:
aa:c6:3f:07:53:00:02:ec:2b:84:b3:e6:d7:a0:01:
38:3f:51:fb:11:84:8b:db:8d:bb:10:dd:54:d2:14:
dc:fb:0d:35:3f:8b:91:03:d1:2c:4e:ca:b5:9b:18:
e4:cd:76:1a:5e:29:44:44:b9:a9:91:db:a4:f9:4e:
77:82:a1:af:15:6d:64:c3:2a:4a:51:8c:0c:25:8f:
92:dd:ad:11:1f:68:3d:20:0e:59:81:2b:0d:14:63:
3b:d3:bb:da:b3:d4:54:db:17:aa:8e:20:01:eb:c0:
d1:d7:2b:6a:89:8e:ce:78:9d:95:99:26:08:2a:b0:
b0:38:3d:00:4c:33:61:8b:ff:1d:7a:7e:5e:6b:b2:
42:f9:5f:5e:10:45:57:73:33:98:7d:5e:08:1f:4b:
bd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EB:E5:5A:CF:4B:56:CD:4D:17:4F:1E:CA:01:9B:00:7C:BF:00:68
X509v3 Authority Key Identifier:
keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.200.0/22
IPv6:
2400:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
96:cf:ce:76:1d:42:a6:9c:6f:84:bc:1e:c4:7d:58:48:e3:19:
6f:93:35:56:ac:c0:79:a8:65:50:53:ec:a7:b5:0b:2a:42:21:
72:da:b9:45:1d:12:8b:ba:26:b8:8a:02:20:87:84:9b:28:ca:
77:57:57:2a:51:d3:1f:79:72:62:30:66:04:51:04:99:15:42:
8b:e4:69:ab:6e:25:77:eb:5d:fb:5c:1b:67:a4:17:3a:62:32:
99:64:ca:84:94:0e:bc:55:60:be:01:10:ab:33:29:30:ac:00:
e1:c0:68:22:5f:56:c5:d9:9b:33:6e:4b:3b:d2:fd:9d:e0:d0:
e5:69:49:dc:29:5f:0d:ea:f9:78:d3:b1:11:f9:69:92:85:c0:
64:8a:af:9b:2c:5c:62:72:11:ac:2a:68:ac:1c:97:21:76:54:
1d:42:8d:cb:51:37:85:66:1d:22:b9:28:7a:6e:9d:8a:02:e0:
3d:41:eb:ab:9f:e1:62:21:ed:de:c4:9c:29:d5:0c:89:be:c3:
0e:75:ec:2b:36:a4:57:36:75:f1:5d:0d:a9:2b:5a:32:26:7c:
c8:3c:b9:40:3c:31:89:da:36:69:ea:61:92:24:3d:f6:2f:b8:
5a:03:16:c5:a3:69:46:d2:75:33:e5:83:3f:3d:4a:33:8f:d8:
49:68:9f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:45 2026 by rpki-client