
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa
File: 511F1EDCFC0511F081195104746F56BC.roa (raw, json)
Hash identifier: nuEm/nImsWX8e2aMNTAfOV22vEEsr1OrR90OJJJ/kIE=
Subject key identifier: CD:66:07:EE:16:D5:6F:2F:22:34:B6:5D:E9:F0:C4:C1:DB:F5:AA:B3
Certificate issuer: /CN=A91CC473/serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Certificate serial: 21
Authority key identifier: 33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa
Signing time: Sun 01 Mar 2026 05:47:29 +0000
ROA not before: Wed 28 Jan 2026 06:11:04 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 132874
IP address blocks: 103.26.196.0/22 maxlen: 22
103.26.196.0/24 maxlen: 24
103.26.197.0/24 maxlen: 24
103.26.198.0/24 maxlen: 24
103.26.199.0/24 maxlen: 24
2001:df4:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CC473, serialNumber=33377A115FE52E91CD6121971985A003BB3BA449
Validity
Not Before: Jan 28 06:11:04 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a3d2f0-a027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:7a:e7:ab:ad:f5:0b:b6:67:3c:da:fa:f6:
54:44:38:ea:55:4a:39:5f:3e:4e:54:ee:ea:0f:c3:
fd:29:f4:11:8e:dd:88:01:14:ed:ea:7b:b6:98:6c:
9e:20:45:63:aa:68:ae:2a:83:c1:54:3c:35:16:0c:
95:9f:77:f7:6d:82:1e:5e:36:35:5b:a6:65:ff:92:
21:31:0f:5c:5a:6a:e1:f2:4d:79:74:7d:f5:9a:ac:
88:85:90:20:ed:d3:13:bb:80:e5:5e:0b:c8:3e:df:
86:e0:fe:a9:29:6d:51:42:76:85:76:ba:86:43:43:
d1:1a:72:b4:51:60:4b:ba:a5:7a:1c:40:60:38:65:
d9:da:84:8a:09:fc:e4:f8:39:c7:32:4d:2b:2a:d9:
12:67:08:60:50:5f:7f:af:06:7e:67:6d:6f:1a:1c:
d2:31:03:2e:53:42:b8:29:bc:a7:7a:9c:12:95:e9:
04:d4:cb:12:21:cf:d8:89:40:03:d2:5c:89:17:20:
35:d2:36:f1:5a:d1:f0:c9:47:4b:1f:84:d4:35:6e:
0e:fd:2c:50:ad:ac:dd:c4:5f:1d:5f:79:ac:fa:eb:
ab:ed:17:4c:1d:a8:fd:b6:32:84:48:7a:4f:7d:e2:
6e:67:6c:34:a0:6e:34:fb:9b:e1:03:47:7e:d2:ac:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:07:EE:16:D5:6F:2F:22:34:B6:5D:E9:F0:C4:C1:DB:F5:AA:B3
X509v3 Authority Key Identifier:
keyid:33:37:7A:11:5F:E5:2E:91:CD:61:21:97:19:85:A0:03:BB:3B:A4:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mzd6EV_lLpHNYSGXGYWgA7s7pEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC473/6C17EECCFC0411F08E3CFA00746F56BC/511F1EDCFC0511F081195104746F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.196.0/22
IPv6:
2001:df4:6000::/48
Signature Algorithm: sha256WithRSAEncryption
15:ad:db:22:ae:5b:97:11:dc:3e:8a:5a:00:39:02:ba:3d:3c:
07:ae:f8:67:88:85:0d:62:a8:a3:25:e6:92:82:59:78:73:cb:
93:ba:69:a2:ee:ad:d0:c8:78:e8:5e:72:bf:35:80:ec:65:f8:
a4:bb:04:7a:17:e9:03:27:70:af:fd:96:39:03:0e:8c:ea:8f:
36:d0:42:fb:bc:44:c3:ec:60:cb:13:9f:dd:7a:82:00:c0:a1:
41:1f:02:f3:37:65:57:27:6b:3d:dd:4e:e0:4f:97:5c:46:83:
e1:5b:f9:6c:d9:3b:a8:27:5b:30:49:84:11:55:d8:46:d8:3c:
5d:e9:e2:a3:15:82:56:c9:86:8d:6c:c2:7e:31:18:af:c1:ef:
b7:9e:93:98:09:3b:a9:84:9b:b7:54:11:b0:05:0e:e4:e3:78:
2c:0d:fe:62:ed:99:cf:80:5e:cf:83:a7:d9:c6:75:66:5b:3d:
9d:33:58:d8:1d:47:8e:8f:dc:bb:6a:da:ea:7d:68:0f:6f:d0:
47:73:17:37:b6:da:61:03:fb:7b:9a:68:32:23:df:e1:c5:b0:
bc:85:b2:39:63:44:2e:55:9c:98:ac:f8:9d:e0:f2:0a:a7:b6:
68:c7:4e:ff:78:f4:1c:bb:25:29:d8:dd:a9:e9:f6:fa:c1:34:
bc:75:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:03:15 2026 by rpki-client