
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
File: 744CCD5834F911E98AB73628C4F9AE02.roa (raw, json)
Hash identifier: 9W05C1LlPKcEFv9pU3PetAYWB/PzpYrnvZBHnrLu8UQ=
Subject key identifier: BF:7D:2C:14:F5:E7:D5:DC:6C:68:71:D3:4D:D5:76:C2:57:E6:48:EE
Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial: 111D
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
Signing time: Mon 30 Mar 2026 17:21:51 +0000
ROA not before: Mon 30 Mar 2026 17:21:51 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 137519
IP address blocks: 103.111.126.0/24 maxlen: 24
103.118.18.0/24 maxlen: 24
2001:df4:8300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:11:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4381 (0x111d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Validity
Not Before: Mar 30 17:21:51 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69cab12f-e4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:20:a6:49:32:b6:a2:9a:00:fb:df:f5:fe:98:
26:dc:82:b2:51:40:e5:68:f4:6d:70:88:e0:2a:ab:
78:16:59:26:fa:47:c8:e4:f9:45:ea:97:58:9b:05:
18:2a:0c:5c:3f:c9:3e:27:d4:ba:e0:70:d8:4e:4a:
4b:fe:ef:a7:f6:61:36:fb:90:82:d2:9c:5b:ed:e0:
77:b1:0a:a5:3d:db:fc:89:04:28:8d:b9:7b:f8:b4:
1b:aa:7b:01:6f:14:ec:3a:99:7f:86:af:ac:b7:24:
a2:3c:7b:75:70:c3:9f:b1:f8:e0:b1:2b:53:f0:55:
b7:0d:37:fb:c7:cb:bb:0a:e3:c6:13:85:7c:64:66:
ba:b2:2f:79:da:4c:9f:c4:0c:d9:0d:01:d1:b9:27:
24:97:c7:3a:6e:7c:43:69:dd:0f:9e:0f:af:3c:9a:
d5:8a:12:9a:00:85:e7:3d:99:b4:30:ff:28:55:bf:
f0:2a:ae:3c:f9:ec:e3:6e:9e:3f:67:8b:d9:a1:38:
43:06:c2:c9:cb:6d:6f:52:c8:d3:9f:f9:8c:10:53:
77:48:62:2f:c8:f4:d9:a9:9b:f8:6a:3e:d2:95:f6:
f1:a6:06:68:ff:8e:41:77:70:b4:42:3a:45:d0:8a:
d6:56:92:2a:5d:ec:fc:ce:af:a0:e7:05:cd:da:3d:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7D:2C:14:F5:E7:D5:DC:6C:68:71:D3:4D:D5:76:C2:57:E6:48:EE
X509v3 Authority Key Identifier:
keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.126.0/24
103.118.18.0/24
IPv6:
2001:df4:8300::/48
Signature Algorithm: sha256WithRSAEncryption
03:02:19:9e:39:34:f0:e0:4f:4a:dd:14:b9:32:95:df:ce:94:
45:ed:40:a3:dc:56:42:de:e6:a6:63:25:3c:c5:4d:4c:e1:01:
12:d7:a6:69:4a:85:a9:23:40:2b:58:aa:7c:00:09:d4:09:1c:
e8:d9:1f:6f:fd:70:17:0a:3a:33:bb:09:71:b7:0f:c8:76:5d:
95:76:1f:95:45:50:a3:56:a4:d9:63:c4:91:3d:61:8f:56:88:
26:45:c8:d6:00:05:68:82:fd:75:53:97:4e:56:67:6c:dc:7a:
ec:35:96:2f:85:ff:03:a7:a8:1b:1c:9e:a7:d6:f0:13:e4:ab:
1d:99:a0:12:af:f3:af:98:b0:56:c0:0d:25:37:34:d4:81:f7:
ec:26:97:15:89:8d:1f:e9:f8:ba:6a:94:c9:dd:71:ec:48:8a:
7f:4a:e1:12:e8:60:1b:14:d4:86:93:05:4c:24:75:26:00:f2:
ff:9a:f3:e0:f7:52:1d:b2:6d:d0:71:59:21:09:8d:3d:39:bd:
61:78:d0:33:53:1c:ac:91:0b:1f:16:f4:00:a0:2e:be:b9:bf:
00:fb:0a:02:82:bd:0b:57:23:0b:7d:69:56:6a:79:bc:db:65:
15:33:af:11:9a:72:d9:b7:59:7e:37:82:e9:37:79:3d:c6:63:
c9:a6:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:57:20 2026 by rpki-client