
$ rpki-client -vvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa
File: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (raw, json)
Hash identifier: J631rW1s9s479tpPEDLDdkGhFI9eGzX2Mvs2mFT1Drw=
Subject key identifier: F2:34:2D:CC:4D:F5:6B:DB:C9:26:69:76:D1:14:78:71:FF:44:5B:23
Certificate issuer: /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Certificate serial: 024C
Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:31:44 +0000
ROA not before: Sun 13 Jul 2025 05:53:13 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 141421
IP address blocks: 103.84.56.0/24 maxlen: 24
103.84.57.0/24 maxlen: 24
2400:dce0::/48 maxlen: 48
2400:dce0:1::/48 maxlen: 48
2400:dce0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Validity
Not Before: Jul 13 05:53:13 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a3dd50-4b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:14:3e:21:13:99:e7:21:6b:cc:98:de:7b:
89:f9:7e:ee:06:a1:0e:f7:2f:fc:44:8a:0a:0f:18:
bd:7d:79:ca:02:2e:9e:83:62:f2:e2:dc:ad:7c:a1:
8e:37:83:92:7b:7f:6a:64:24:ea:a7:b5:97:fd:fd:
c8:90:56:e0:87:23:2a:11:27:94:e4:c8:94:5b:29:
65:f7:91:ab:7a:86:a9:ae:50:b2:e5:6a:81:4d:be:
88:d7:8b:47:1e:dc:cd:b3:1d:f8:82:b0:b8:55:93:
33:a0:f4:9c:9e:0a:01:1d:be:1f:a6:e4:e4:3d:61:
d9:42:4e:2f:f4:a2:8d:d4:c2:1d:58:7e:92:13:23:
74:ab:fa:ec:40:51:a8:94:1a:c6:d3:cf:af:6e:5a:
53:b0:56:0b:64:2c:1a:fa:50:ae:72:72:77:b7:61:
73:2a:a2:7a:b1:0c:72:28:66:0b:ec:9a:1c:45:e8:
48:f6:ad:50:c2:05:02:04:a8:bf:05:10:76:a9:94:
97:bc:ef:82:c1:87:0f:0f:92:d4:f0:01:25:16:2d:
79:5f:32:6b:63:ff:2d:a6:b3:e1:2d:37:74:9b:66:
8d:17:f4:e1:f1:19:4e:e5:20:91:f5:88:ff:56:14:
53:19:b7:bc:7f:7e:e7:38:e7:f0:9e:75:a5:98:4e:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:34:2D:CC:4D:F5:6B:DB:C9:26:69:76:D1:14:78:71:FF:44:5B:23
X509v3 Authority Key Identifier:
keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.56.0/23
IPv6:
2400:dce0::-2400:dce0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
97:01:e8:25:40:a8:65:e4:01:c7:a8:15:f5:cf:b3:de:30:9e:
8b:98:7d:12:86:b0:8e:d3:04:a2:b7:40:ce:37:51:06:0f:d9:
20:50:ef:a9:fd:bf:f0:65:b7:3e:f7:dd:73:d0:f8:13:4c:01:
b3:42:0b:92:0b:57:d2:b1:1a:52:77:69:be:69:24:dd:68:10:
8a:b9:43:ec:78:3f:cd:75:a2:ae:f7:d4:f8:ce:9c:a4:02:6a:
57:be:f3:1b:5a:d6:9f:51:05:5e:2d:0b:f7:c8:8f:b7:55:71:
62:03:d6:0e:a0:da:0b:d9:d9:d8:fe:4c:c7:5a:8e:83:61:0e:
63:73:40:ce:77:e5:95:61:04:03:1c:35:f2:24:9b:82:b9:e1:
f6:4a:a9:a9:af:f2:b0:2f:8e:25:3b:a6:63:4f:63:8c:f5:4a:
8a:ad:c3:02:a0:72:8e:73:fb:27:44:e1:0d:ac:74:9d:2d:78:
eb:b1:f3:8c:b9:69:e2:c3:00:9b:8d:ad:f7:36:50:b8:ed:3d:
66:c0:43:eb:64:0d:60:d4:52:33:4b:13:90:43:28:ee:34:f9:
e5:88:7f:43:54:7c:11:25:f9:bf:5a:ef:e1:bd:71:83:e4:8d:
0e:9c:f4:cc:82:57:f4:74:aa:63:0f:c2:42:fd:62:d1:67:f6:
c1:6e:04:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:38 2026 by rpki-client