
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/DC10E79AABF211F0AF7B0010C4F9AE02.roa
File: DC10E79AABF211F0AF7B0010C4F9AE02.roa (raw, json)
Hash identifier: QIY5+tAPc8DfMOA80SMfbx8hkFkcFR22q658Pj8FL9I=
Subject key identifier: 50:B7:F2:E7:0C:B0:F0:72:5D:F4:5D:27:0E:F4:12:6D:84:26:30:DC
Certificate issuer: /CN=A9144DEA/serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Certificate serial: 01AF
Authority key identifier: 2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/DC10E79AABF211F0AF7B0010C4F9AE02.roa
Signing time: Wed 11 Nov 2026 04:51:50 +0000
ROA not before: Wed 11 Nov 2026 04:51:50 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 26658
IP address blocks: 103.4.20.0/22 maxlen: 24
202.9.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 04:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144DEA, serialNumber=2BCACF6165B58740590E59718433D8183FF9466D
Validity
Not Before: Nov 11 04:51:50 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6af3f466-9430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:65:95:cd:be:7d:f0:16:69:ad:3b:11:dd:
56:f4:df:10:34:5f:f3:a0:45:2f:28:c0:df:cd:96:
4d:b7:27:b3:83:de:3d:e7:38:47:6c:22:e3:ac:ba:
02:5b:3a:f0:e7:fb:3b:b7:4e:fd:0e:de:d3:9e:d3:
c6:5e:66:6c:a9:c7:b4:3a:25:1b:5e:67:a4:4a:f3:
99:08:e2:fc:1d:93:f4:d1:78:93:9c:d6:74:b0:07:
ab:2b:1f:76:85:11:4b:f2:6c:2a:b1:2a:b0:3e:fb:
27:a5:62:d5:00:a1:91:75:80:b9:23:55:6d:b3:ee:
16:40:76:80:4d:81:5c:50:16:c7:54:b2:b0:cb:96:
f3:21:6a:32:9e:c8:a9:ec:b3:bc:a3:cd:33:19:e1:
a2:38:69:b5:0d:68:77:9b:c3:05:0f:16:3a:71:fd:
dc:ce:bf:e0:04:8b:47:fd:ed:2a:f7:26:04:53:cc:
3e:8c:22:cb:5f:cf:cc:8c:b8:63:b7:69:45:c5:f8:
47:e3:e8:b5:89:15:34:d1:c1:1d:f3:6e:a4:37:b5:
48:4d:7e:2f:9c:b8:22:14:2a:a3:e9:5a:c6:96:bb:
04:04:8d:d5:36:59:69:4c:c8:1b:a3:43:17:90:88:
b4:4c:9b:56:e9:77:e8:dc:67:0e:33:50:cb:dc:0a:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B7:F2:E7:0C:B0:F0:72:5D:F4:5D:27:0E:F4:12:6D:84:26:30:DC
X509v3 Authority Key Identifier:
keyid:2B:CA:CF:61:65:B5:87:40:59:0E:59:71:84:33:D8:18:3F:F9:46:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/K8rPYWW1h0BZDllxhDPYGD_5Rm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8rPYWW1h0BZDllxhDPYGD_5Rm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144DEA/3BF5F2E05AE111EFA7563C2CC4F9AE02/DC10E79AABF211F0AF7B0010C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.4.20.0/22
202.9.60.0/22
Signature Algorithm: sha256WithRSAEncryption
83:76:ce:13:38:cc:63:60:26:7e:d1:4a:cc:39:69:9a:57:b4:
30:30:23:63:f9:ba:4e:c7:25:52:a1:59:6a:52:98:13:fd:e7:
76:a0:f6:a1:40:9b:01:02:01:a5:4d:ed:c2:26:5a:b1:ae:bf:
97:a6:25:1e:1e:1a:29:51:2e:c2:e8:6b:c2:2c:66:c1:59:ef:
57:48:55:1b:c6:c9:ca:4a:0d:b3:60:71:a8:6d:75:55:da:7e:
44:ba:87:11:75:55:82:1e:1f:81:29:e9:13:41:03:e4:8f:92:
7f:95:1a:5b:6f:b0:cf:6e:fe:c1:15:81:8f:47:dd:a7:72:83:
da:0d:ac:3c:5d:32:e2:f1:48:ea:78:ab:7d:ab:43:66:7a:25:
96:7e:bd:fd:ad:d9:09:2f:cc:23:26:79:62:c3:e7:76:3b:93:
a9:8d:61:8c:5f:b9:8e:19:a7:c1:dc:34:e9:70:d3:b0:76:87:
7b:47:06:69:3c:ab:45:58:7d:a9:94:cc:2b:8d:3b:15:e9:07:
73:a2:d6:68:8a:a4:1f:26:92:dc:03:a7:b4:32:4b:98:a6:aa:
b4:b5:46:07:52:fb:b6:b7:5c:36:dd:44:80:3a:13:51:ff:bc:
f4:2c:69:fb:74:86:9e:46:72:d4:11:3b:d4:db:6d:4d:c6:6d:
85:2c:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:40:43 2026 by rpki-client