
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/0294C902459511EE982FBC6DC4F9AE02.roa
File: 0294C902459511EE982FBC6DC4F9AE02.roa (raw, json)
Hash identifier: dCOu9SWE3pUxFDJykl6C0mTQJtKqMJIuuUM8T2xcP1w=
Subject key identifier: F6:D3:6F:1E:EE:1B:30:56:DB:8D:D3:FB:C1:FE:1C:D1:9A:DC:33:BB
Certificate issuer: /CN=A911BEA7/serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
Certificate serial: 01DE
Authority key identifier: 17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/0294C902459511EE982FBC6DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 10:18:40 +0000
ROA not before: Thu 23 Oct 2025 05:18:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151781
IP address blocks: 103.26.28.0/24 maxlen: 24
2001:df2:db40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl
rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:43:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BEA7, serialNumber=17AD605D06C7ED0A14485C02A12F001709A22D62
Validity
Not Before: Oct 23 05:18:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a41280-ded6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:2e:36:44:2e:fe:aa:0b:9e:a7:71:4e:67:
6a:7b:8d:7a:f2:77:d6:10:c0:87:45:a4:24:71:e4:
cf:46:c5:97:05:be:bb:e7:81:2c:4e:d9:fc:30:8c:
bd:c3:ec:78:b0:72:e0:3d:9e:16:50:71:cf:13:b8:
8b:47:20:f7:34:96:0f:6a:29:2d:3b:69:c7:41:ef:
12:1a:cb:4d:ee:64:f0:c9:e2:d8:fb:93:3f:4f:ee:
b4:5e:08:ae:0d:e2:5e:4e:83:40:b2:33:a4:c3:8b:
67:ae:7c:d1:ec:02:08:96:83:56:74:37:0e:5f:8f:
d7:cd:90:7a:fa:4c:00:a8:77:61:97:d4:15:f6:42:
23:9b:35:91:2e:43:1b:9e:9c:21:90:54:70:0e:b3:
e4:f6:f5:d4:a5:77:b9:00:a1:45:13:2e:63:6a:0d:
6d:1f:88:67:55:ef:f5:36:83:b0:c9:b0:0c:c9:71:
fa:64:24:23:2d:6c:e8:ef:bc:99:9c:b0:b1:9f:0b:
fa:ca:1c:4d:d6:df:24:f2:ea:4a:50:d8:91:69:15:
38:33:aa:0a:f0:0d:56:96:33:31:d5:eb:9a:69:21:
85:5d:2f:82:dd:e5:7b:45:93:99:4b:7a:79:34:2f:
db:16:79:a4:c8:3f:8e:0c:db:46:25:46:a0:c0:d0:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D3:6F:1E:EE:1B:30:56:DB:8D:D3:FB:C1:FE:1C:D1:9A:DC:33:BB
X509v3 Authority Key Identifier:
keyid:17:AD:60:5D:06:C7:ED:0A:14:48:5C:02:A1:2F:00:17:09:A2:2D:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/F61gXQbH7QoUSFwCoS8AFwmiLWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F61gXQbH7QoUSFwCoS8AFwmiLWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BEA7/BE67D710459411EE85452E6DC4F9AE02/0294C902459511EE982FBC6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.26.28.0/24
IPv6:
2001:df2:db40::/48
Signature Algorithm: sha256WithRSAEncryption
4e:3f:f6:48:b0:f0:03:33:63:5e:3f:98:a8:50:25:ab:af:3d:
08:7b:0e:47:ee:79:70:40:ba:73:05:12:48:09:20:e8:57:76:
e9:4d:28:1a:71:52:e0:41:d1:0c:31:12:6e:8f:87:25:97:5d:
35:b4:79:f6:33:b3:dd:1d:c5:b6:06:e4:ab:37:52:99:04:2e:
e5:54:e1:00:4c:be:2e:5c:4c:f6:d1:df:cc:b0:2c:91:c3:4f:
85:fb:e8:7c:e0:72:ef:19:3e:9e:29:84:6b:9c:5c:62:08:cd:
6a:2b:77:33:6f:aa:14:f9:11:9d:8f:50:1f:0f:22:ff:28:6a:
09:19:00:28:6e:2e:e8:ac:e7:b1:3f:40:14:fa:6e:93:f5:b8:
df:eb:a2:b1:21:c7:84:03:48:e2:6c:a0:0e:3d:37:55:5c:c1:
be:e9:77:8d:6b:8c:79:88:6c:5d:b6:8b:72:da:cc:dc:cc:2b:
c4:a2:89:37:80:7a:dc:04:e3:a1:cf:fb:60:e8:af:bc:e1:cd:
6b:47:58:90:98:75:9f:db:63:5f:19:03:77:ed:3f:03:ec:cf:
b9:11:42:a4:24:d8:c7:ca:0e:2b:49:63:d1:e7:ef:e3:06:0f:
ab:39:3e:b7:f6:18:e0:76:5e:c6:9a:af:e0:07:91:e3:be:98:
49:df:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:07 2026 by rpki-client