
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa
File: 3ABFAC2231E211EFA341983CC4F9AE02.roa (raw, json)
Hash identifier: ujHcZXNwuVg9oYIrnnoAIw1UkI7YOZ3N1z9618MB7Nk=
Subject key identifier: 6F:22:54:9E:00:39:9A:2D:27:2A:11:08:2B:52:31:1D:8A:D9:93:BA
Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Certificate serial: 08E9
Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa
Signing time: Thu 30 Apr 2026 21:25:47 +0000
ROA not before: Thu 30 Apr 2026 21:25:47 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 400619
IP address blocks: 103.151.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:25:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2281 (0x8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E
Validity
Not Before: Apr 30 21:25:47 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=69f3c8db-ba3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:32:01:76:65:cc:1e:d4:d3:bf:62:fc:c1:20:
46:1c:dc:88:68:58:3e:2a:33:38:31:1c:ac:5b:33:
27:ed:ef:8d:eb:e8:72:76:8b:ad:6c:e1:c3:7c:a7:
4c:6c:d8:4b:86:ea:39:6b:29:af:50:c7:35:d6:e1:
75:8d:98:ca:95:59:63:9d:51:b3:54:c8:ca:18:9a:
35:12:5c:e6:f2:e3:ab:6c:00:0f:c5:a2:3d:84:96:
87:c9:d9:ba:04:83:1b:e3:fc:3a:88:f8:a7:a0:27:
86:ad:f4:f0:46:a7:31:47:7e:6d:f2:07:65:05:0a:
0e:19:03:66:5d:44:7b:3b:72:5c:e4:d1:8f:8b:9e:
31:ce:bc:e6:7e:cd:9a:73:e8:30:e7:ba:1f:1c:23:
b1:07:ab:b5:86:4e:21:7f:ac:ba:58:b6:e4:07:63:
11:76:0b:d5:e8:04:02:cc:60:3a:6c:fb:e0:db:ed:
13:ce:eb:9e:e7:4f:0c:6f:36:dc:cf:c3:a5:a6:fd:
91:a1:26:9c:17:42:47:f0:fb:5e:81:48:62:85:21:
5e:e7:1f:2f:2d:58:5b:f7:de:3d:28:82:fc:1d:4e:
12:9f:a0:25:87:87:e1:cb:9f:18:31:37:4f:8e:57:
50:c8:97:a2:26:d8:a3:78:7c:2c:fe:f6:33:85:10:
2b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:54:9E:00:39:9A:2D:27:2A:11:08:2B:52:31:1D:8A:D9:93:BA
X509v3 Authority Key Identifier:
keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/3ABFAC2231E211EFA341983CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.151.117.0/24
Signature Algorithm: sha256WithRSAEncryption
81:11:02:ef:f2:c0:0e:25:0b:2f:9f:94:d5:96:b7:23:4e:dd:
4e:db:aa:b0:9e:ac:db:05:5b:1a:b6:a8:5a:ce:9d:40:8b:ee:
b8:ac:1f:f9:0b:cb:53:30:6c:39:8f:fa:fe:e2:31:0f:46:3e:
ae:cd:1b:42:62:82:49:a3:56:cd:b9:95:7d:18:f2:d0:dd:ef:
22:ab:1f:09:ae:96:fd:98:a2:da:35:de:4e:f8:ce:1a:50:16:
12:b4:ab:a2:c5:db:d8:11:bd:b5:66:55:8d:d4:47:5a:f0:47:
e9:53:c7:05:89:9e:b4:44:41:d8:3e:c5:16:66:88:e4:e7:ad:
73:e6:20:21:73:f9:99:18:be:32:2b:8a:01:59:a6:2a:0d:23:
94:8a:98:bb:1f:27:36:47:ad:4c:f1:2f:9b:63:6b:36:64:06:
e4:7f:ef:9d:f8:55:ee:f3:40:1b:16:05:d1:17:3a:32:da:e2:
9c:70:de:6d:2c:3b:df:4c:fc:78:ea:9a:b7:fd:d9:6a:6f:7f:
47:eb:fd:bf:4d:b5:28:16:9b:1b:ac:d1:f1:dd:5a:72:13:48:
f0:3b:04:4d:69:fe:d2:3b:a1:60:11:14:8d:6d:a3:4b:de:61:
ba:96:03:fa:e3:d1:a9:e6:bc:34:97:4a:ce:9f:3f:fd:0c:64:
11:3f:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:02:01 2026 by rpki-client