
$ rpki-client -vvf rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa
File: E521C8BE8DB011EBBA0A3723C4F9AE02.roa (raw, json)
Hash identifier: ZLw8huOg2nveXXA6ySB0lncxnJt9V0PAEh/Tv0xMDkY=
Subject key identifier: EB:97:2D:17:E5:09:B6:7C:AA:C1:83:93:55:0A:89:1E:E0:F5:A2:A2
Certificate issuer: /CN=A914669D/serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Certificate serial: 06DC
Authority key identifier: 91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:33:35 +0000
ROA not before: Wed 08 Oct 2025 22:24:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55561
IP address blocks: 103.242.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914669D, serialNumber=91126E86F18C609404D190F298C32CD609FCFA79
Validity
Not Before: Oct 8 22:24:57 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4321f-c0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:bf:be:67:83:ff:2c:b7:af:8f:89:6b:22:
df:b8:d6:48:09:43:cf:10:84:f6:34:90:de:1c:4c:
ce:5f:84:5c:26:87:f6:1e:06:0b:45:6f:bf:11:99:
af:6a:ee:13:fe:b9:8f:02:c1:36:a0:bc:80:a4:42:
fc:d3:83:f3:2a:42:e5:43:ca:2a:d6:3d:23:17:c8:
3a:50:99:ce:ee:8c:b6:47:42:99:2e:a3:9c:47:dd:
b2:ef:53:9b:94:ca:cd:88:a4:e1:04:1d:17:24:35:
c9:3e:08:bc:03:e9:dc:8b:52:1f:e7:f5:7f:ef:22:
bf:a4:0b:54:c4:38:00:d1:eb:a6:5c:48:54:6e:8d:
4a:ed:b9:d9:a8:e9:10:1c:26:85:a0:be:b4:be:aa:
a4:04:8a:60:f1:04:39:e5:09:cf:0e:4f:8a:43:73:
98:33:a7:2a:fc:68:dd:b6:5e:28:a3:92:16:47:6c:
5c:11:0d:8e:a9:1e:2a:7d:47:90:17:db:48:02:8f:
2c:54:d8:38:5e:c1:9c:e1:a1:4e:ee:16:85:8f:19:
f9:88:8e:0b:ca:21:33:22:3c:cd:13:14:d8:f2:aa:
54:4a:cb:44:54:47:db:8a:8c:8f:1a:e3:b6:54:c0:
e2:1b:eb:16:ca:89:4e:e1:79:cd:24:ff:b6:fd:32:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:2D:17:E5:09:B6:7C:AA:C1:83:93:55:0A:89:1E:E0:F5:A2:A2
X509v3 Authority Key Identifier:
keyid:91:12:6E:86:F1:8C:60:94:04:D1:90:F2:98:C3:2C:D6:09:FC:FA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/kRJuhvGMYJQE0ZDymMMs1gn8-nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRJuhvGMYJQE0ZDymMMs1gn8-nk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914669D/BF6E20A68DAE11EBB298B51FC4F9AE02/E521C8BE8DB011EBBA0A3723C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.242.24.0/22
Signature Algorithm: sha256WithRSAEncryption
94:64:a1:88:10:5d:92:09:13:23:f3:eb:57:ff:57:9a:fa:89:
7c:fb:f6:cc:19:16:7a:01:b7:a6:73:b0:c4:a4:8f:5a:8f:dd:
54:0a:10:e6:53:71:8b:a8:6a:25:7b:a2:a5:c6:94:36:27:8d:
16:d2:7a:e4:6e:25:0b:ab:89:09:a8:6f:37:f6:96:4d:5f:ce:
a0:b2:d0:35:fb:6e:fd:13:d5:1c:09:5c:8e:8a:ed:f4:8d:58:
27:93:99:dd:fd:ce:bd:40:83:aa:46:c5:3f:86:d7:96:bd:dc:
d5:6f:63:96:58:e2:ca:96:f2:d6:8f:f8:0b:87:10:f6:06:98:
52:0e:71:e2:b3:7b:dc:16:b4:9d:2b:35:1e:83:23:74:6e:eb:
4c:37:2b:cd:6d:d7:b3:97:99:b4:2d:4d:fa:9d:9d:f8:69:fb:
6e:44:78:48:b6:44:0b:b4:cd:23:b9:77:d7:bb:d8:57:90:d2:
ad:48:99:fb:d5:50:cf:12:98:a0:3d:49:f8:44:73:0f:42:8d:
58:38:f8:f7:18:60:ae:c3:bb:df:2b:4e:36:28:60:f6:df:08:
96:28:74:5b:4c:89:3f:20:a2:bc:f1:27:9a:a2:9d:bb:e1:05:
ae:bc:51:68:f4:9e:06:fa:82:a2:b3:7a:fd:b5:9f:2f:02:1b:
69:0c:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:10 2026 by rpki-client