
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A4E3DD6A366311EEB376DC3AC4F9AE02.roa
File: A4E3DD6A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier: kMUAdFDeIIvPnSOqr//LAZ4Yh+MAAPv1mKC+/SOAk5o=
Subject key identifier: 5A:FA:D2:8C:7F:F2:9B:71:19:AA:28:12:3A:7B:41:CD:01:5E:1A:05
Certificate issuer: /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial: 024C
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A4E3DD6A366311EEB376DC3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:29:51 +0000
ROA not before: Thu 26 Feb 2026 05:11:43 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132876
IP address blocks: 103.14.11.0/24 maxlen: 24
2400:6280::/48 maxlen: 48
2400:6280:1::/48 maxlen: 48
2400:6280:5::/48 maxlen: 48
2400:6280:6::/48 maxlen: 48
2400:6280:7::/48 maxlen: 48
2400:6280:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Validity
Not Before: Feb 26 05:11:43 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4859f-3e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e1:36:0c:80:ee:73:38:5a:d1:f9:b6:4d:61:
a5:a6:b9:62:d8:ed:27:7c:27:40:a7:e7:d7:b6:fc:
d6:9f:9b:49:ef:5c:2b:6f:6b:07:a3:b5:57:c8:ad:
fd:27:3e:04:83:d4:01:44:67:5a:5f:2b:5f:3e:db:
e9:fd:73:90:fc:17:08:0e:ab:a7:19:d1:ce:d4:80:
41:06:c3:2f:da:77:36:03:f0:4a:a8:26:37:43:e7:
57:de:f4:ce:70:be:ca:79:86:af:b0:03:98:a6:41:
13:4f:37:66:78:0c:51:06:35:8d:a1:1b:ad:0e:f5:
5a:e6:0d:d6:95:f3:69:01:64:11:bb:c4:3e:cd:4f:
90:e4:40:52:e1:4f:97:f6:dd:47:5b:92:69:3f:b6:
ba:4f:f6:b9:cd:11:c4:22:c8:48:40:9c:67:44:db:
49:fb:93:b0:43:d2:7d:65:f5:6f:2a:7d:b9:44:81:
da:d4:a2:70:4c:bd:48:2e:b6:83:45:12:bc:09:3c:
f7:a1:9d:ab:b5:1d:66:98:04:68:f9:63:8e:a2:7e:
40:e8:63:96:97:16:47:4d:80:23:a0:6c:08:14:15:
df:bf:b3:e0:31:d0:c7:48:e9:4a:99:15:99:1d:66:
eb:86:5e:e0:6c:8e:20:5f:3a:2c:67:c6:30:4a:42:
6a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FA:D2:8C:7F:F2:9B:71:19:AA:28:12:3A:7B:41:CD:01:5E:1A:05
X509v3 Authority Key Identifier:
keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A4E3DD6A366311EEB376DC3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.14.11.0/24
IPv6:
2400:6280::/47
2400:6280:5::-2400:6280:7:ffff:ffff:ffff:ffff:ffff
2400:6280:20::/48
Signature Algorithm: sha256WithRSAEncryption
93:6e:c3:82:71:07:24:a5:af:24:97:6d:48:14:06:05:cf:17:
8a:86:3b:fa:f3:00:fd:5b:e7:88:57:55:77:05:55:a1:b6:f4:
d8:d4:da:d2:a5:07:d2:5a:19:b2:df:7e:84:75:90:c3:5d:ac:
b8:84:ef:66:ab:d2:28:c4:36:9e:e5:e0:2e:15:27:96:9d:b4:
d4:44:46:8c:d1:92:19:7b:11:af:49:ab:2d:e4:aa:d0:3d:8f:
a9:cf:0b:67:8f:6a:bb:fe:2e:8e:5d:a3:70:ac:fa:9b:89:69:
09:84:63:c5:01:85:66:81:5f:9f:84:e6:8f:b6:5b:9c:6d:07:
59:f2:07:9b:a0:f1:37:45:47:09:f8:6a:3b:f9:a5:7d:9b:d9:
b3:3e:9e:d4:46:54:d2:1b:b1:a7:f7:dd:db:bb:ce:d8:70:dc:
77:a2:ca:52:3b:5b:10:e9:a7:55:00:33:27:1e:3b:37:e7:fc:
07:ae:82:65:ac:f1:85:d3:e9:f7:14:9e:13:20:48:77:33:fd:
51:53:9d:9f:e0:bd:db:15:fb:51:c6:96:2d:22:64:65:f4:f9:
bf:ab:df:ce:4e:8e:83:d2:1c:58:62:33:9d:85:90:e7:b3:fc:
be:46:fd:03:4e:29:5b:6d:a6:b4:1f:3d:b6:d1:2a:8b:8f:0b:
a2:b2:22:20
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKDQ4ODk3MDUwNjI2NEVGOTZEODFFQzEyRTZBQkQyNTZE
QjMwRkRDRkEwHhcNMjYwMjI2MDUxMTQzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODU5Zi0zZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8+E2DIDuczha0fm2TWGlprli2O0nfCdAp+fXtvzWn5tJ71wrb2sHo7VXyK39
Jz4Eg9QBRGdaXytfPtvp/XOQ/BcIDqunGdHO1IBBBsMv2nc2A/BKqCY3Q+dX3vTO
cL7KeYavsAOYpkETTzdmeAxRBjWNoRutDvVa5g3WlfNpAWQRu8Q+zU+Q5EBS4U+X
9t1HW5JpP7a6T/a5zRHEIshIQJxnRNtJ+5OwQ9J9ZfVvKn25RIHa1KJwTL1ILraD
RRK8CTz3oZ2rtR1mmARo+WOOon5A6GOWlxZHTYAjoGwIFBXfv7PgMdDHSOlKmRWZ
HWbrhl7gbI4gXzosZ8YwSkJqrQIDAQABo4ICjjCCAoowHQYDVR0OBBYEFFr60ox/
8ptxGaooEjp7Qc0BXhoFMB8GA1UdIwQYMBaAFEiJcFBiZO+W2B7BLmq9JW2zD9z6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83RTREODQ2MDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9TSWx3VUdKazc1YllIc0V1YXIwbGJiTVAz
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NJbHdVR0prNzViWUhzRXVhcjBsYmJNUDNQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTUzNkMvN0U0RDg0NjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvQTRFM0RENkEz
NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hME0GCCsGAQUFBwEHAQH/BD4wPDAM
BAIAATAGAwQAZw4LMCwEAgACMCYDBwEkAGKAAAAwEgMHACQAYoAABQMHAyQAYoAA
AAMHACQAYoAAIDANBgkqhkiG9w0BAQsFAAOCAQEAk27DgnEHJKWvJJdtSBQGBc8X
ioY7+vMA/VvniFdVdwVVobb02NTa0qUH0loZst9+hHWQw12suITvZqvSKMQ2nuXg
LhUnlp201ERGjNGSGXsRr0mrLeSq0D2Pqc8LZ49qu/4ujl2jcKz6m4lpCYRjxQGF
ZoFfn4Tmj7ZbnG0HWfIHm6DxN0VHCfhqO/mlfZvZsz6e1EZU0huxp/fd27vO2HDc
d6LKUjtbEOmnVQAzJx47N+f8B66CZazxhdPp9xSeEyBIdzP9UVOdn+C92xX7UcaW
LSJkZfT5v6vfzk6Og9IcWGIznYWQ57P8vkb9A04pW22mtB89ttEqi48LorIiIA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:10 2026 by rpki-client