
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/A1861B9A998E11EEBD3C815CC4F9AE02.roa
File: A1861B9A998E11EEBD3C815CC4F9AE02.roa (raw, json)
Hash identifier: +kQXw/qRrPGNahprc8/BS5Xb+p2pvbJfLqZYDeoy+yo=
Subject key identifier: EF:94:CD:50:77:A4:AB:9C:8E:07:90:56:9C:B2:04:B1:78:F5:6A:1C
Certificate issuer: /CN=A9110724/serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
Certificate serial: 01F5
Authority key identifier: 81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/A1861B9A998E11EEBD3C815CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 11:29:44 +0000
ROA not before: Tue 23 Dec 2025 02:22:35 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 136479
IP address blocks: 103.255.204.0/24 maxlen: 24
103.255.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl
rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:41:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110724, serialNumber=81FF85ECAECC53DB74530860714559B7E5184541
Validity
Not Before: Dec 23 02:22:35 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a574a8-40f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e5:a0:d0:01:ea:3f:e8:ad:92:40:65:e8:3a:
ce:8d:d9:e3:2e:06:a4:e2:98:69:0f:9f:c6:44:bb:
33:7b:20:e5:f7:dc:d8:a7:af:73:a6:fb:35:22:22:
d6:c7:9e:06:65:01:1f:43:ce:94:f9:ef:42:b4:4e:
2f:2d:d1:6f:d8:ab:73:55:bf:96:53:dc:97:41:4d:
87:02:fd:91:6d:f0:33:e3:bc:71:ca:f1:d6:ff:b8:
84:9b:34:9c:8c:8d:1b:d8:47:c3:58:7c:90:62:db:
95:3e:8e:18:86:9f:e6:fa:e1:56:5f:f8:4a:fe:1b:
05:b9:ae:67:20:17:c1:a0:e6:be:49:d9:7f:7d:a6:
d6:fb:68:db:1d:dd:c8:0e:ab:c4:a9:41:de:b6:83:
5c:70:27:1b:3c:57:51:c0:40:b4:19:e6:53:82:cf:
de:31:45:8c:98:53:05:92:c6:a8:2f:77:7e:b6:1d:
6b:c1:7f:8f:b9:87:3f:e1:15:68:a1:2b:cd:6a:d4:
41:2d:a0:53:f3:37:05:8e:ff:e7:6f:12:55:c0:ac:
a7:52:05:62:da:3d:ed:62:38:fc:93:4f:e0:58:34:
6d:3d:55:56:ed:31:4d:7b:b4:8a:0c:a6:e6:3d:f4:
f6:4f:4a:dc:2d:62:8d:42:09:54:aa:e2:17:1e:ed:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:94:CD:50:77:A4:AB:9C:8E:07:90:56:9C:B2:04:B1:78:F5:6A:1C
X509v3 Authority Key Identifier:
keyid:81:FF:85:EC:AE:CC:53:DB:74:53:08:60:71:45:59:B7:E5:18:45:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/gf-F7K7MU9t0UwhgcUVZt-UYRUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gf-F7K7MU9t0UwhgcUVZt-UYRUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110724/8AD1DB58409911EE9BD7E442C4F9AE02/A1861B9A998E11EEBD3C815CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.255.204.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:81:a7:13:ac:70:7d:d4:1f:07:d4:59:d2:f3:f1:79:e1:a5:
78:a9:d8:5c:b7:71:14:27:fa:29:5c:56:8e:6e:11:28:05:a8:
ef:78:c2:8b:64:43:74:ff:4a:75:a3:65:f7:ae:af:a1:87:21:
e2:a5:fc:d2:d8:0e:52:18:4e:d2:19:00:54:3b:32:a2:78:c7:
80:f5:15:12:37:a5:1c:20:62:5b:96:b0:d8:03:7d:8a:78:ee:
ec:8e:0e:f3:1c:db:b3:8f:f5:0b:87:87:2d:94:98:3a:d4:b7:
ea:7a:5e:17:ef:00:95:6e:33:6f:7f:59:da:50:b4:9d:1b:d8:
91:e5:d7:82:8b:d9:50:81:ec:29:17:57:9c:0a:9d:22:59:10:
3d:55:16:d2:54:7b:0c:9a:ad:05:8e:a4:f6:65:b0:4f:0c:b1:
fd:15:34:37:a4:2a:bb:cf:f8:3f:99:5b:62:f7:f6:8a:cf:d7:
08:a2:04:1d:9d:1d:62:d2:cd:d2:6b:7d:c5:46:93:0e:b6:de:
cc:19:e4:9f:09:c4:ed:3a:a2:b8:a3:46:53:43:e0:30:17:71:
c9:66:09:57:a7:7a:f2:34:51:4e:9a:fa:b4:18:ce:73:17:ea:
a9:32:39:4e:7c:68:8d:96:1b:36:57:86:72:be:59:49:a8:99:
98:6b:60:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:17 2026 by rpki-client