
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa
File: 197CE9C2C0C111EE84A55128C4F9AE02.roa (raw, json)
Hash identifier: pv+TSjOIdZ7NDrJ4z58kpSpDp3kbno6S26qXS1oFNpk=
Subject key identifier: 92:E6:DC:8B:AA:E1:46:D9:B5:35:B8:AB:89:50:84:20:13:EF:68:06
Certificate issuer: /CN=A911D971/serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Certificate serial: 032A
Authority key identifier: 76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa
Signing time: Tue 03 Nov 2026 01:49:56 +0000
ROA not before: Tue 03 Nov 2026 01:49:55 +0000
ROA not after: Mon 01 Mar 2027 00:00:00 +0000
asID: 140077
IP address blocks: 103.24.16.0/23 maxlen: 23
103.24.16.0/24 maxlen: 24
103.24.17.0/24 maxlen: 24
2001:df1:6e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 00:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810 (0x32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D971, serialNumber=764D1CE6727D31BD8F39662E2004C4689DA6B7E5
Validity
Not Before: Nov 3 01:49:55 2026 GMT
Not After : Mar 1 00:00:00 2027 GMT
Subject: CN=6ae93dc3-c330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:f2:db:ae:6c:53:d8:77:fa:13:3e:94:0f:
93:6c:6c:f2:7f:7c:d0:fa:40:a7:5f:9f:83:e9:e6:
29:20:b2:78:9f:a8:c0:00:ea:69:78:5c:ca:5a:dd:
fa:08:d1:8c:93:19:d5:fb:14:98:8d:bd:1f:8e:c4:
4e:15:e5:37:c0:74:ff:b6:cc:1d:91:80:da:89:06:
d9:ff:94:b7:89:f0:6e:bd:cd:f0:fe:b4:3c:9c:e7:
21:bc:09:04:e0:ff:46:89:06:f8:1c:3a:2e:0e:24:
a1:f4:c9:14:1e:9d:fc:ff:b1:e4:d8:1a:04:6d:a3:
60:81:d1:c9:0b:ac:5d:e2:f3:09:a0:6b:e6:9a:29:
95:51:78:81:d1:83:5a:3a:e2:b8:e5:0f:10:75:8f:
bf:50:94:f5:be:af:21:15:fa:a3:94:a3:77:2d:0f:
95:06:da:49:76:95:97:85:01:a4:19:ff:ea:52:53:
52:8b:97:5d:6d:4e:30:82:ee:57:53:fd:75:97:3e:
a4:9d:a8:0d:0c:d7:20:b2:63:a8:d8:8e:2c:f9:7a:
98:c7:5e:70:19:90:84:36:3b:81:5d:31:29:75:5d:
66:de:af:06:1a:d4:c9:7e:d5:ac:a8:3e:a9:9f:13:
fa:17:be:cb:5a:d8:8d:f9:9d:d5:36:46:fe:53:47:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E6:DC:8B:AA:E1:46:D9:B5:35:B8:AB:89:50:84:20:13:EF:68:06
X509v3 Authority Key Identifier:
keyid:76:4D:1C:E6:72:7D:31:BD:8F:39:66:2E:20:04:C4:68:9D:A6:B7:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dk0c5nJ9Mb2POWYuIATEaJ2mt-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D971/DE25B86856A411EDA8C00C3EC4F9AE02/197CE9C2C0C111EE84A55128C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.24.16.0/23
IPv6:
2001:df1:6e40::/48
Signature Algorithm: sha256WithRSAEncryption
43:aa:54:81:f7:a5:47:26:12:ed:6b:19:68:44:50:0b:ce:61:
6e:fe:53:3c:ff:c6:8c:02:e6:0a:ec:ea:97:c4:3d:e5:9d:e7:
61:2b:68:15:ad:23:83:70:27:e0:86:48:b1:11:02:39:88:dd:
98:9b:9a:6c:0c:da:d7:1e:a5:f3:68:2f:80:34:dc:7c:31:88:
cc:e1:1b:9a:39:54:0b:5f:b1:fb:53:c3:9a:e5:c5:01:ac:1f:
94:43:ba:2f:8f:1e:a3:71:bb:72:a7:ac:3d:b4:66:32:b0:34:
82:e2:ba:84:49:65:72:ca:73:bc:85:5d:77:da:50:57:9b:d9:
fe:3a:01:67:86:ed:c1:a7:39:6b:3a:7e:9f:c8:3d:20:c7:ea:
ed:f0:03:a6:71:fd:7b:cb:40:7d:74:a2:85:e3:3d:d7:c5:d6:
d7:23:e8:93:02:33:1a:a2:b4:54:ef:3b:de:f7:45:75:30:6c:
dc:f9:ad:30:88:b4:b4:f6:ce:13:83:ea:cc:8f:e4:7f:af:07:
57:26:3a:6c:3d:b0:a2:4a:9f:dc:d6:a8:b2:c3:8d:1a:9c:99:
6d:c4:25:6b:4b:d2:af:ac:11:9b:03:57:4a:4c:d2:27:10:a4:
96:d9:fc:2e:88:05:76:6c:83:8b:23:f2:43:cb:fa:35:57:ff:
3a:94:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:20:15 2026 by rpki-client