
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/E8F2B1C224E911F0B5C26715C4F9AE02.roa
File: E8F2B1C224E911F0B5C26715C4F9AE02.roa (raw, json)
Hash identifier: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=
Subject key identifier: CB:F3:98:42:A7:09:D9:E6:A8:7A:CE:A5:75:DA:CD:B4:54:2E:34:B3
Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial: 027C
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/E8F2B1C224E911F0B5C26715C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:19:51 +0000
ROA not before: Sat 13 Dec 2025 01:21:23 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 137997
IP address blocks: 103.48.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 01:36:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Validity
Not Before: Dec 13 01:21:23 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43cf6-f961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:73:39:56:15:b4:59:53:19:31:8e:4a:8e:
a7:3e:24:e8:2c:ee:6d:99:ac:02:10:be:f4:64:19:
e3:6d:d2:80:ab:af:36:be:82:aa:85:0c:bc:6a:54:
e5:2d:24:d2:ac:f5:ac:2c:7a:f6:ed:43:ba:88:8e:
cc:99:ba:7a:4e:35:64:d6:3f:5d:37:d5:7d:b8:38:
c7:e0:b1:35:a1:e6:5a:ab:83:9f:fd:13:f7:93:4e:
5b:04:77:db:54:0f:c8:17:7b:82:77:91:cc:52:21:
53:5b:8f:7b:89:0a:48:56:92:b8:ec:a8:d8:02:2c:
fb:a6:d1:56:08:6e:9d:7d:a0:74:d4:78:a7:b8:91:
f9:1e:14:d8:7c:ed:22:f8:3f:87:d8:19:b8:b2:8b:
bb:a9:bf:49:87:09:0a:5c:30:80:58:d2:11:3e:47:
80:c0:43:14:02:13:33:7c:b8:6a:17:23:09:62:27:
9c:b3:0f:76:59:7b:fd:23:04:ed:dd:16:12:1f:c0:
d6:78:b3:47:94:0f:7b:a2:1b:0b:fc:0b:a3:52:90:
b9:9e:b1:00:4c:8c:d9:24:85:cd:89:60:45:3d:6d:
0c:db:f2:29:bb:1e:a4:ad:c6:ed:2a:be:af:b0:cf:
d9:ae:84:02:4a:26:3b:62:d3:97:9c:92:51:85:b4:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:98:42:A7:09:D9:E6:A8:7A:CE:A5:75:DA:CD:B4:54:2E:34:B3
X509v3 Authority Key Identifier:
keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/E8F2B1C224E911F0B5C26715C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.48.163.0/24
Signature Algorithm: sha256WithRSAEncryption
40:54:65:98:a6:6c:3f:2f:fa:30:d1:1a:3a:0d:5e:2e:2a:4a:
0d:af:0e:18:73:e6:15:20:26:8e:7a:41:25:10:bc:1f:11:1c:
31:73:6f:06:b5:a6:55:7c:e0:a6:1b:4f:d2:c7:1b:2b:45:08:
6d:54:77:3e:38:e8:9a:54:20:22:c9:e6:aa:87:60:50:d2:18:
25:f8:78:cf:39:0c:10:7d:2b:c6:0b:bc:40:d6:d1:cf:dd:af:
85:31:9c:13:eb:6b:a8:e0:16:44:cb:ab:50:05:2d:92:67:e0:
dd:d5:ca:a3:d6:ce:48:5e:e9:d1:97:4e:fa:b9:6d:51:bb:4a:
90:59:6f:91:1e:dc:5f:b5:f5:86:ee:ba:3e:3a:8e:82:bc:5d:
6f:23:c0:47:b4:59:dc:ce:34:e6:3d:c3:53:ca:bf:b7:58:81:
51:de:32:44:29:66:7a:cc:1b:ac:7b:3d:c3:50:27:31:5d:2c:
f9:74:a1:1e:ad:62:bd:15:d2:dd:6b:45:6f:b9:57:95:22:8c:
ce:29:eb:42:3f:ca:ee:a7:1f:00:f0:ab:6a:6e:0f:f2:a6:df:
12:f9:33:7c:ac:28:a0:a6:51:e9:2b:b8:9f:aa:8e:4f:ba:1f:
98:ba:f7:4e:b7:07:0d:c4:8a:99:c2:61:10:79:68:65:2a:fd:
6c:bc:97:a6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3
RjMzOTNFN0YwHhcNMjUxMjEzMDEyMTIzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2NmNi1mOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA16BzOVYVtFlTGTGOSo6nPiToLO5tmawCEL70ZBnjbdKAq682voKqhQy8alTl
LSTSrPWsLHr27UO6iI7Mmbp6TjVk1j9dN9V9uDjH4LE1oeZaq4Of/RP3k05bBHfb
VA/IF3uCd5HMUiFTW497iQpIVpK47KjYAiz7ptFWCG6dfaB01HinuJH5HhTYfO0i
+D+H2Bm4sou7qb9JhwkKXDCAWNIRPkeAwEMUAhMzfLhqFyMJYiecsw92WXv9IwTt
3RYSH8DWeLNHlA97ohsL/AujUpC5nrEATIzZJIXNiWBFPW0M2/Ipux6krcbtKr6v
sM/ZroQCSiY7YtOXnJJRhbRTJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMvzmEKn
CdnmqHrOpXXazbRULjSzMB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2
MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ
bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJEREYvQTIxMjc2OEM3NjBCMTFFRDhDNkNGMjRFQzRGOUFFMDIvRThGMkIxQzIy
NEU5MTFGMEI1QzI2NzE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZzCjMA0GCSqGSIb3DQEBCwUAA4IBAQBAVGWYpmw/L/ow0Ro6DV4u
KkoNrw4Yc+YVICaOekElELwfERwxc28GtaZVfOCmG0/SxxsrRQhtVHc+OOiaVCAi
yeaqh2BQ0hgl+HjPOQwQfSvGC7xA1tHP3a+FMZwT62uo4BZEy6tQBS2SZ+Dd1cqj
1s5IXunRl076uW1Ru0qQWW+RHtxftfWG7ro+Oo6CvF1vI8BHtFnczjTmPcNTyr+3
WIFR3jJEKWZ6zBusez3DUCcxXSz5dKEerWK9FdLda0VvuVeVIozOKetCP8rupx8A
8Ktqbg/ypt8S+TN8rCigplHpK7ifqo5Puh+YuvdOtwcNxIqZwmEQeWhlKv1svJem
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:10 2026 by rpki-client