
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/C001E5861FCC11EEB409C35EC4F9AE02.roa
File: C001E5861FCC11EEB409C35EC4F9AE02.roa (raw, json)
Hash identifier: BKPtg7HeDu7JSoWpyLKk1keMXR9Vj+kENI1xPmqvGCw=
Subject key identifier: 1C:F3:49:0A:86:5F:20:93:B6:0A:66:DB:DF:8D:B9:B6:A5:DA:90:25
Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Certificate serial: 0234
Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/C001E5861FCC11EEB409C35EC4F9AE02.roa
Signing time: Fri 03 Jul 2026 03:30:54 +0000
ROA not before: Fri 03 Jul 2026 03:30:54 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 151466
IP address blocks: 103.230.42.0/23 maxlen: 24
2001:df2:a140::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:45:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6
Validity
Not Before: Jul 3 03:30:54 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a472cee-1c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:db:f8:37:54:91:31:28:04:ec:c8:01:15:
7a:8e:01:04:33:27:45:23:1c:83:3c:01:b7:0b:0f:
ad:48:78:57:c5:1f:50:f3:2a:27:69:db:72:d1:8d:
e7:15:d8:37:00:7d:ec:66:65:53:87:de:f1:40:97:
e3:5d:43:91:0d:1c:8b:1c:c0:09:35:3f:6e:05:cb:
33:df:61:1a:b1:06:1a:bf:2f:ab:4d:3f:ad:fe:28:
96:e7:79:7a:13:c9:54:43:92:1e:d9:af:e5:05:be:
d4:18:e6:fa:d3:cf:99:23:e9:91:77:84:63:b8:f6:
ef:48:58:5f:e7:60:fb:51:95:da:18:f9:8d:95:be:
52:29:7a:0b:0b:0d:55:e9:ba:d8:72:ad:0b:d7:3a:
8c:95:7b:05:4b:88:f1:75:19:e9:4a:08:ca:75:b2:
72:1d:09:1b:d6:de:7e:fd:51:2c:7f:e3:89:d9:2e:
09:49:0f:63:06:a3:d8:ca:58:08:90:ab:28:56:1e:
51:fe:f7:a9:ac:cd:3c:3c:06:46:81:72:fc:e9:e1:
bf:94:5f:39:da:36:27:cb:b6:52:46:75:d8:24:4b:
1d:9a:4d:18:5c:a5:b9:02:94:46:f6:0b:0e:e8:a8:
db:43:36:b2:c7:76:7b:ed:bb:3a:c9:c6:7c:cc:19:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F3:49:0A:86:5F:20:93:B6:0A:66:DB:DF:8D:B9:B6:A5:DA:90:25
X509v3 Authority Key Identifier:
keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/C001E5861FCC11EEB409C35EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.230.42.0/23
IPv6:
2001:df2:a140::/48
Signature Algorithm: sha256WithRSAEncryption
92:15:0f:c5:f8:00:da:84:4e:2d:c5:d1:bb:82:48:9e:73:71:
86:c2:08:24:6c:4e:f5:2f:d8:30:fa:f4:72:10:d8:94:8b:ef:
48:34:e1:f1:0f:d8:4c:93:c6:f1:d5:ec:25:97:94:4a:e4:77:
85:74:47:82:b6:a6:56:d6:5d:a8:3e:07:68:8b:8a:3d:b0:41:
ba:c3:f1:09:74:ee:2e:81:1d:c0:d1:94:05:9e:fd:6d:3d:31:
3d:c5:38:84:d3:76:07:34:5d:be:a2:b4:a3:b2:f4:ec:34:28:
a0:a4:5d:9f:ea:5c:d1:1d:e2:32:60:a3:6b:49:3b:57:9d:3b:
58:90:42:a7:ae:6b:4e:67:d2:7c:14:a5:0c:27:e5:2d:e4:ed:
7d:d7:f0:9e:fe:2b:f9:d4:85:2b:a5:a2:f1:8e:62:65:62:f5:
57:8b:54:49:d8:22:47:eb:65:9f:d6:39:7b:e2:ba:11:3c:31:
36:5f:f4:57:c7:a3:5b:88:6c:ab:e3:1c:e5:7c:33:26:2b:08:
05:ca:62:ac:29:eb:f3:e2:52:38:83:28:0f:04:c2:5d:11:8a:
fe:4d:c2:5c:ab:19:3d:8c:b0:24:dd:d6:03:81:c8:4c:ad:4d:
03:c5:5e:82:ac:c7:10:df:64:75:73:71:a4:66:e7:cc:ca:59:
b2:52:b1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:53 2026 by rpki-client