
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
File: 744CCD5834F911E98AB73628C4F9AE02.roa (raw, json)
Hash identifier: HYEKunXFXGODG028S70WdJ2ItWUZF2FtLd9w5pl0ghE=
Subject key identifier: 40:B9:4F:51:3C:50:C1:1B:19:CE:A4:4A:1E:2C:73:75:7C:C5:F7:96
Certificate issuer: /CN=A914A4E2/serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Certificate serial: 110A
Authority key identifier: 88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
Signing time: Sun 01 Mar 2026 09:18:55 +0000
ROA not before: Fri 28 Mar 2025 17:57:52 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 137519
IP address blocks: 103.111.126.0/24 maxlen: 24
103.118.18.0/24 maxlen: 24
2001:df4:8300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 16:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4362 (0x110a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A4E2, serialNumber=88077786D66523AD5998D63F697AF42F039C2AA9
Validity
Not Before: Mar 28 17:57:52 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=69a4047f-5f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:ad:74:58:48:6c:06:de:0f:16:ec:98:c1:
d9:c9:dc:c3:40:e9:b9:f2:bf:a3:dc:68:2f:49:13:
42:7c:18:8e:18:7f:f5:31:cc:71:84:73:33:2d:87:
b6:bc:d5:0e:19:fe:37:e7:ca:14:b0:0a:1a:73:cc:
bd:80:c3:21:fc:06:26:18:1e:76:03:57:b1:b8:1b:
55:02:99:dd:2d:63:b1:05:94:c1:0b:db:77:c2:64:
48:25:50:56:6e:02:a8:65:89:a5:2d:ce:66:ab:7a:
ea:40:d3:f2:ea:1a:2d:9d:32:f4:b9:79:76:c8:96:
96:fd:cc:94:d3:2b:e1:4b:16:2d:5d:18:9e:63:d1:
6b:b6:97:bd:d0:6f:67:7e:23:95:84:b0:ce:41:c5:
48:b5:f2:18:11:eb:a8:f2:67:8e:f1:28:d9:13:4a:
bd:dd:bf:23:ab:c7:6d:ae:92:56:b7:4d:89:30:f9:
16:aa:8e:13:e0:05:48:28:45:f4:02:b9:49:64:fe:
03:d6:28:15:fc:b7:28:0c:88:80:ca:c2:5f:30:49:
96:23:7f:4e:32:8f:3c:af:52:e6:6d:4c:3c:2f:8c:
b1:85:56:24:39:24:fd:0e:b4:71:74:55:f0:fc:e6:
4e:39:17:91:b8:90:f7:41:c5:bd:f7:83:73:23:d1:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:4F:51:3C:50:C1:1B:19:CE:A4:4A:1E:2C:73:75:7C:C5:F7:96
X509v3 Authority Key Identifier:
keyid:88:07:77:86:D6:65:23:AD:59:98:D6:3F:69:7A:F4:2F:03:9C:2A:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/iAd3htZlI61ZmNY_aXr0LwOcKqk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iAd3htZlI61ZmNY_aXr0LwOcKqk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A4E2/B256B03034D811E992987656C4F9AE02/744CCD5834F911E98AB73628C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.126.0/24
103.118.18.0/24
IPv6:
2001:df4:8300::/48
Signature Algorithm: sha256WithRSAEncryption
4c:f1:75:c7:6d:50:e4:58:ff:ac:74:2f:d4:79:71:bd:9a:13:
c5:7c:04:18:15:65:22:02:79:a9:53:fe:33:08:c8:89:43:be:
2d:8c:0c:ee:2f:3f:f1:31:c9:6b:31:f6:b0:87:f4:c2:19:c7:
d2:f3:bb:a0:3c:d8:b6:82:8c:f7:71:0b:1e:a2:18:9f:c7:2f:
4e:bb:81:b9:d8:00:3c:7e:a4:e3:01:8e:a7:43:a7:c9:cc:48:
55:e2:d9:ee:5b:7c:b6:41:80:48:6f:c0:19:e7:33:d5:5d:21:
8d:f3:75:0f:0f:ee:5f:cc:57:56:09:0f:5b:82:2d:9f:62:d9:
14:c2:f9:d4:9d:73:25:45:c0:83:09:9d:80:19:cd:51:39:74:
2d:1c:6c:03:4d:d2:bd:9d:ed:cb:01:7a:02:23:45:c7:73:46:
ae:9b:ca:bf:d4:a9:d6:87:c2:53:38:f1:e5:4f:10:e4:86:c4:
7e:93:f8:af:38:f8:d2:12:dc:a7:4b:25:fc:ec:c7:1f:bc:d5:
37:80:8b:03:ce:0a:12:af:f4:38:f4:f2:e2:1b:6c:26:03:58:
5c:b2:a8:16:2d:b7:ae:95:1b:ba:30:62:f4:5c:5f:a5:58:7e:
55:88:2f:3f:c6:c0:b3:f1:1c:76:3d:a7:31:35:0b:cd:cf:2f:
a3:62:c0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:15:15 2026 by rpki-client