
$ rpki-client -vvf rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/DB626DF24AF111F18CF4AA40CD833773.roa
File: DB626DF24AF111F18CF4AA40CD833773.roa (raw, json)
Hash identifier: Qc04/3jafq1HIqjArWLPfNu0P5WLlwA1tLsJj60Zayw=
Subject key identifier: 25:9C:94:CD:32:10:64:7E:2E:3F:43:68:8E:98:B8:41:C3:E0:2B:F2
Certificate issuer: /CN=A914823C/serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Certificate serial: 03
Authority key identifier: E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/DB626DF24AF111F18CF4AA40CD833773.roa
Signing time: Fri 08 May 2026 15:23:25 +0000
ROA not before: Fri 08 May 2026 15:23:25 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 150716
IP address blocks: 103.66.238.0/24 maxlen: 24
103.66.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 09:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914823C, serialNumber=E2798BE18CD64E0838E9A822D47842040AC80343
Validity
Not Before: May 8 15:23:25 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69fdffed-ed7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:a1:e2:25:39:05:bd:6d:31:f9:ff:93:30:
96:68:c3:5e:25:53:67:23:46:be:95:5f:53:6e:21:
8b:0a:f2:bb:6b:db:f6:ab:94:2a:06:46:ec:8f:3c:
74:52:2c:eb:f8:cd:62:76:38:10:39:2a:cf:a5:13:
a6:f3:de:2d:ab:c1:cd:e7:de:e5:b7:47:a0:ad:68:
07:2b:27:86:67:13:73:82:bf:e3:0b:95:3f:a2:0b:
ca:92:06:54:45:5d:bd:57:eb:a7:f2:03:cf:41:6e:
05:22:45:9f:2b:85:d7:04:d5:04:f5:27:8e:e9:ff:
5b:bb:cb:50:d7:aa:03:84:32:95:dc:f4:2b:a3:8b:
89:72:d9:50:47:8f:9e:de:d8:21:db:2a:d3:46:37:
3e:22:e8:7f:e2:b9:22:b4:86:4f:d8:1d:eb:bc:4c:
a4:94:1c:dc:19:7b:c4:9f:74:38:86:e2:80:4e:46:
33:0e:c6:24:9b:4a:ac:d8:b9:55:38:0b:f9:04:d3:
57:86:d8:3d:10:6e:ec:22:10:4d:94:fe:dc:7a:1f:
43:ce:9e:92:51:95:fc:3e:27:34:b0:5c:42:07:b8:
a4:9f:dc:86:94:d0:5a:21:d9:46:2a:ca:64:21:db:
18:4f:0f:92:4c:85:5f:0f:04:06:9f:4c:c3:5a:89:
0e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9C:94:CD:32:10:64:7E:2E:3F:43:68:8E:98:B8:41:C3:E0:2B:F2
X509v3 Authority Key Identifier:
keyid:E2:79:8B:E1:8C:D6:4E:08:38:E9:A8:22:D4:78:42:04:0A:C8:03:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/4nmL4YzWTgg46agi1HhCBArIA0M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4nmL4YzWTgg46agi1HhCBArIA0M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914823C/A308D0D04ACA11F1A44594B1C0833773/DB626DF24AF111F18CF4AA40CD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
103.66.238.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:18:9c:e5:6f:24:4b:c9:b1:c0:56:d1:d2:71:56:58:d9:d2:
0e:61:32:e5:57:76:a9:49:32:b7:73:08:e9:05:fd:f9:72:a4:
39:b4:96:43:35:dd:a2:66:ae:80:ec:f1:b0:fc:20:21:b8:d0:
cf:da:88:7d:e2:c2:14:a7:3a:00:42:a6:ee:0b:50:a4:15:82:
0f:14:b7:95:7f:14:8f:64:29:48:6e:30:8f:d7:6f:f4:78:b6:
78:fa:47:3d:a9:c7:ca:60:60:c1:08:49:70:a7:ac:25:95:4d:
45:61:81:db:52:fd:42:d3:da:c2:75:c1:15:d1:eb:28:2b:72:
25:24:5e:07:2f:59:c6:b2:f1:ad:a6:56:da:1b:cb:29:18:0b:
b7:d3:95:37:68:67:19:ec:a2:bd:2b:c5:1b:60:4c:4f:cd:46:
31:82:8e:2b:af:57:84:e6:2d:a4:27:a7:ef:1b:c0:66:35:9f:
3c:2e:05:c6:f5:f9:2b:66:6b:b1:9b:25:2b:68:f8:95:58:4f:
f4:2f:02:fc:c1:bd:a7:57:fc:7a:17:f0:ed:ac:f3:38:55:41:
d7:8b:9b:d1:68:8c:77:91:0a:1c:60:b3:96:2b:b9:7e:27:4f:
7d:a4:c4:d7:7b:4b:8a:69:15:b3:a5:b2:a4:ee:21:41:b0:5a:
93:4e:9c:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:10:43 2026 by rpki-client