
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa
File: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (raw, json)
Hash identifier: vtHqwtSvpKd0UZw+IVp/WFTlhLrYLk265RmDqE6z7KQ=
Subject key identifier: FD:2C:BF:8A:5E:44:CA:41:88:20:EF:A2:17:39:F6:FB:09:07:53:26
Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial: 0250
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:58:23 +0000
ROA not before: Fri 27 Feb 2026 02:21:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 138509
IP address blocks: 103.84.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Validity
Not Before: Feb 27 02:21:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a437ef-d4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f0:8c:8f:26:3b:57:83:61:b3:f0:e0:d3:fe:
90:b9:f1:10:e7:b0:d6:07:63:08:b6:da:10:40:2b:
df:54:4e:ee:62:15:a6:18:96:83:6d:0a:90:2d:d2:
3e:ba:45:22:44:91:30:61:29:32:06:cf:de:26:e7:
c8:a2:6c:e9:5e:f2:8f:fc:c0:8e:a6:18:7a:e8:3d:
ae:71:ac:e6:db:9a:52:86:f4:c1:0c:48:49:5c:b9:
aa:e8:30:97:1c:d8:19:1c:72:ad:43:43:ff:d2:2b:
84:2d:d1:92:7e:e5:a3:3b:3b:c4:db:42:d6:c6:15:
20:79:ed:fa:92:c8:ba:99:58:7b:63:b2:c6:d2:19:
f0:33:57:54:23:d4:0f:17:67:4d:6a:10:50:d6:56:
ec:59:15:4e:ff:0d:6d:dc:6c:c6:39:a0:98:99:5d:
1e:28:d8:ea:53:e9:f5:0a:ec:63:2c:59:d9:0c:ea:
78:1a:d1:02:0b:79:e6:7f:05:88:66:33:e8:9b:f8:
35:f0:09:49:1a:6b:43:b5:b4:7d:e5:35:e5:fc:b9:
72:42:b1:3e:f3:94:0d:b2:a9:b5:c0:b3:48:91:59:
a5:d5:86:2c:e9:c5:49:e0:98:b5:9a:54:73:8e:33:
b2:36:49:69:f3:55:f8:c0:97:69:a6:c6:03:60:9a:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2C:BF:8A:5E:44:CA:41:88:20:EF:A2:17:39:F6:FB:09:07:53:26
X509v3 Authority Key Identifier:
keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/0ADA583C5DB911F0A54D4C6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.84.59.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:2f:ba:80:cd:2b:53:56:c6:d9:6b:4c:fa:11:d2:37:62:b6:
85:ac:16:0f:18:e0:1c:7d:1a:e7:eb:09:bd:5c:d8:22:e4:0b:
47:a9:61:a0:2d:fa:20:42:98:25:d1:6b:c1:d4:a0:7b:e0:70:
82:f7:69:01:9a:53:59:e6:99:44:f1:50:e4:db:57:b8:d4:e1:
a3:f7:a1:0b:44:1f:e5:6e:e9:24:25:9e:c8:c6:88:6d:25:9c:
0d:85:b3:4b:02:fb:36:02:91:67:8a:73:54:0c:13:99:a6:00:
f2:09:a8:58:0d:30:06:e7:a7:57:3f:29:c5:ca:1a:d9:2b:5e:
f2:cb:7f:a4:56:7d:d1:6c:30:75:f1:c3:ca:61:9f:31:02:65:
a9:2c:96:33:4b:b2:48:50:d9:0e:ff:54:49:6b:a1:04:65:92:
1c:46:eb:46:c7:47:1d:ba:aa:11:88:fd:7b:ac:92:8c:07:15:
9a:f7:c2:d2:24:27:cd:c6:c7:a3:9f:75:84:98:a4:a2:7a:69:
b1:5f:7b:53:be:c1:d7:7c:56:fa:38:b8:d0:69:c2:21:cc:e5:
d5:ae:69:bb:6a:24:41:b5:a4:6b:03:a3:06:b4:c2:af:a2:6b:
fc:96:14:5d:41:2b:c4:6b:32:e0:1f:77:99:b5:a3:03:cf:70:
36:81:1d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:24 2026 by rpki-client