
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa
File: 3FE30722468C11EE9462EC3AC4F9AE02.roa (raw, json)
Hash identifier: GghlvZSMgFSIPZl/c13nz5F4JJXOhoiY0qEmjni18nQ=
Subject key identifier: 3A:3D:79:4E:CF:42:5E:9D:D8:98:72:92:83:58:8B:C3:6E:88:D9:C5
Certificate issuer: /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial: 01DA
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:37:33 +0000
ROA not before: Tue 09 Sep 2025 04:10:31 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 396982
IP address blocks: 103.248.10.0/24 maxlen: 24
103.248.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Validity
Not Before: Sep 9 04:10:31 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a3ecbd-4f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:ba:db:db:71:ba:23:1f:c5:43:f1:fc:28:
ce:6e:46:fd:2b:d3:15:cc:78:b7:f7:12:ea:6b:41:
e6:65:6f:38:b4:96:6b:cc:18:ee:e1:a8:46:24:e5:
e4:37:c7:c1:8c:77:9c:5e:0c:1d:99:f3:a2:1e:39:
72:3d:60:b3:a4:85:ed:1d:42:bb:65:41:c6:8d:21:
05:fd:c6:df:e3:81:d0:4e:43:49:cb:b2:a6:5d:70:
80:16:8c:e7:cc:a6:44:0c:e7:d4:8d:b0:03:51:03:
c7:2e:64:03:32:22:8b:68:b6:5e:57:f4:fb:56:6a:
09:3a:31:c1:1d:4f:9f:03:60:d9:43:ae:d8:9f:99:
f5:67:00:6a:e0:c5:db:38:1a:13:83:49:cb:4e:f0:
47:d9:d3:66:c2:f1:26:59:f5:8d:a5:b4:52:dc:93:
b7:cc:ce:23:7a:95:8f:99:5b:ba:97:4b:d7:c8:09:
10:9e:c0:09:66:02:85:31:9b:62:b9:c4:68:07:1e:
37:22:8d:8b:8c:24:8a:57:2c:c9:36:d4:c8:ff:c4:
db:dd:2e:37:28:f4:9d:20:9f:ad:a4:d1:ac:2a:a1:
a6:6c:7e:98:f0:1b:d0:b8:a8:d2:80:a5:f8:ca:b9:
4a:79:31:25:56:52:1b:d1:e0:0a:ce:b7:2b:e2:f3:
0d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3D:79:4E:CF:42:5E:9D:D8:98:72:92:83:58:8B:C3:6E:88:D9:C5
X509v3 Authority Key Identifier:
keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.248.10.0/23
Signature Algorithm: sha256WithRSAEncryption
65:16:91:f8:f3:f0:a7:35:6e:db:2e:cb:a5:6f:52:61:7b:48:
f5:74:cd:ef:d9:47:92:a0:99:d7:1c:01:7d:87:19:1a:c1:ad:
70:0f:c1:1f:b7:90:d1:30:98:7c:15:94:13:5f:23:f4:bb:b7:
4b:33:52:2a:d4:7c:2a:15:e3:e0:e8:a0:16:7d:54:ac:8b:7e:
0b:ba:82:d7:34:43:e6:6e:ee:20:ea:e2:e1:14:96:49:76:ad:
f4:a4:56:fc:a6:28:e5:4f:69:f1:ec:00:6e:92:75:ca:27:c5:
8a:a9:98:b6:96:0f:03:16:c6:a4:a5:aa:4c:4f:a2:79:e5:0d:
49:46:33:eb:04:4c:a4:ca:2f:2c:bc:90:7a:01:28:02:01:c5:
28:91:d2:75:68:df:d3:b4:46:64:d4:60:15:82:43:c8:5d:49:
f5:aa:e0:36:d0:4b:6f:fe:c1:e0:7e:fa:92:37:b8:02:18:9d:
4d:dd:73:ac:52:b4:c6:1d:23:c3:da:d5:4e:4b:5b:6a:77:29:
3b:e5:cb:af:4b:71:14:3f:4b:56:a2:3e:a6:fd:b3:dc:31:7d:
90:28:3f:4d:0f:6d:33:9b:cb:02:d4:24:3d:19:87:ac:b8:89:
7e:e1:8d:e4:02:ec:98:21:82:27:62:36:fb:6d:7b:fc:98:42:
32:e5:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:21 2026 by rpki-client