
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa
File: C847114C07D411ECBF875117C4F9AE02.roa (raw, json)
Hash identifier: 3efS8Q9JjQlkVgg6pGkDOEml4mfxa8hUfuGZHCKjSOw=
Subject key identifier: 66:7F:11:D4:3A:62:4C:10:14:6F:00:97:F3:A6:18:C3:79:49:B2:BE
Certificate issuer: /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial: 05A6
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa
Signing time: Sun 01 Mar 2026 08:51:04 +0000
ROA not before: Tue 08 Apr 2025 23:34:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133415
IP address blocks: 103.116.170.0/23 maxlen: 23
103.116.170.0/24 maxlen: 24
103.116.171.0/24 maxlen: 24
103.227.234.0/24 maxlen: 24
103.227.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1446 (0x5a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Validity
Not Before: Apr 8 23:34:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a3fdf8-8881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:94:19:74:e9:cf:a0:0e:84:89:be:37:b8:
23:59:3b:e1:bd:5b:a0:7b:40:de:a2:88:6e:88:78:
02:eb:5c:6a:e8:e1:4c:1e:4a:5b:e7:b1:25:41:4b:
d1:19:74:56:34:0e:08:fc:01:2b:ca:67:c4:3c:77:
c9:93:ac:fe:ee:7b:55:2d:71:3c:9e:a0:dd:6e:01:
f9:42:93:5c:7a:63:1d:54:2d:6e:5a:8c:b9:89:87:
42:64:e8:60:53:0f:a5:9e:89:5f:c8:f4:90:ab:d6:
27:fe:ab:68:84:0e:80:d2:68:47:aa:1d:79:97:59:
86:60:80:d4:0c:0f:3e:ce:1f:09:2d:01:56:26:45:
80:ce:cc:9d:a9:8e:46:5b:72:5d:69:3a:ff:09:d4:
15:71:de:e5:95:ad:ad:c1:c5:8c:12:59:fb:1a:9d:
27:3e:87:e6:d7:3f:f3:d5:88:e0:33:22:01:d7:dc:
06:73:26:00:a9:ed:de:8c:80:37:71:0e:3d:09:eb:
b2:df:34:88:62:45:57:90:57:af:59:e7:ca:54:51:
21:f1:11:f8:2f:ba:d9:8d:00:d0:d9:4b:92:b9:18:
83:dc:45:08:f3:f9:a8:29:18:ee:9a:46:3f:3c:8a:
bb:f1:b6:3c:71:c0:7f:f0:4f:cd:f5:6b:7e:91:de:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7F:11:D4:3A:62:4C:10:14:6F:00:97:F3:A6:18:C3:79:49:B2:BE
X509v3 Authority Key Identifier:
keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/C847114C07D411ECBF875117C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.116.170.0/23
103.227.234.0/23
Signature Algorithm: sha256WithRSAEncryption
01:ae:ad:bd:b3:67:b8:70:dc:49:6d:92:95:db:ef:5b:7a:99:
fa:c2:c0:02:bc:48:47:50:b3:44:18:1e:0b:80:b6:15:1e:08:
45:75:1a:62:f0:15:45:ec:4c:48:e0:5d:9e:ae:12:d0:07:c0:
33:1c:a5:07:a2:2e:c3:08:62:29:51:3d:17:e8:b1:09:fc:ce:
7d:3f:b4:d2:3e:95:86:2c:2a:4b:e5:f4:3d:c3:c5:31:12:7b:
a7:c0:95:9a:bd:08:36:02:c5:69:03:49:b0:e4:3d:42:3c:68:
a9:cd:04:e8:a0:36:fa:1a:6e:0b:00:60:af:a7:92:09:9a:b7:
46:27:b5:f5:99:20:e7:13:c1:0c:20:29:54:7c:73:c7:89:db:
90:00:53:30:5e:70:e4:ed:92:af:26:0b:47:03:7c:ca:6c:47:
08:2a:88:bd:9f:f6:e2:cb:68:a5:dd:4a:95:a3:34:cb:41:07:
31:88:cd:9b:76:01:6a:8e:8e:1c:9f:07:12:47:a4:c9:ed:68:
41:6b:3c:ec:b0:65:49:1d:b1:f2:8b:1d:df:64:38:02:e0:39:
55:d7:b5:0a:e3:7c:4b:ae:ee:51:00:44:1d:ff:b2:6e:28:bf:
86:f3:50:84:33:a8:3b:0d:93:dc:b6:90:df:61:d7:74:cd:06:
94:21:51:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:45 2026 by rpki-client