
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/CC2E531EAA7811ECB6791A3EC4F9AE02.roa
File: CC2E531EAA7811ECB6791A3EC4F9AE02.roa (raw, json)
Hash identifier: rD7xbaxDGtxMLLPNlo5JYzCCoS0tSS52lqqObFtwgek=
Subject key identifier: 91:A3:BF:A4:15:72:13:9A:52:D6:CA:3D:A5:25:F8:8E:D1:1F:7C:80
Certificate issuer: /CN=A914AA58/serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Certificate serial: 046D
Authority key identifier: 6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/CC2E531EAA7811ECB6791A3EC4F9AE02.roa
Signing time: Thu 03 Sep 2026 00:52:10 +0000
ROA not before: Thu 03 Sep 2026 00:52:10 +0000
ROA not after: Fri 01 Jan 2027 00:00:00 +0000
asID: 132537
IP address blocks: 103.183.194.0/23 maxlen: 23
103.183.194.0/24 maxlen: 24
103.183.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 23:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914AA58, serialNumber=6E3A42CD2B239DA3E658EFB97EAD15B0E6EDDAA1
Validity
Not Before: Sep 3 00:52:10 2026 GMT
Not After : Jan 1 00:00:00 2027 GMT
Subject: CN=6a98c4ba-f9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:fc:b5:4a:43:1b:12:8a:15:89:3a:50:7d:
8e:b9:0c:87:01:03:83:86:27:a3:e9:4b:40:de:c4:
df:0a:94:49:5b:cc:38:8a:81:30:77:0d:e5:34:29:
2b:66:58:2a:47:39:49:0c:e2:f9:d1:39:bd:fa:7b:
38:34:92:df:cd:b5:f2:91:bb:d8:93:fd:25:7f:df:
c9:fc:f2:05:73:14:cc:24:c1:c7:8b:64:2f:3a:e4:
2c:fe:96:ff:53:77:c2:34:9b:7c:1d:97:97:33:33:
37:b2:35:89:0d:84:35:f3:6d:39:f4:1e:31:07:8d:
84:55:18:18:19:8e:5f:c7:53:1c:4d:8e:67:40:f6:
be:4a:42:26:e7:da:97:5b:53:1d:a7:2f:21:ac:17:
27:2d:e6:64:d1:98:de:99:94:03:86:95:d6:98:3a:
65:89:01:1c:77:64:42:c9:66:55:df:fd:67:a6:e4:
21:61:50:57:1c:12:c4:ba:d7:67:3d:13:3c:8f:ed:
55:53:62:85:7f:bd:cd:f9:ab:c4:6d:12:3d:85:26:
8f:fe:d7:b1:f3:21:47:8e:0b:56:66:4e:f5:cf:f0:
6d:bb:52:9e:76:c0:9f:7a:7f:ef:79:2e:b1:90:ac:
da:ad:a4:87:cd:2a:98:fd:d1:5c:97:ae:a2:4b:ad:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A3:BF:A4:15:72:13:9A:52:D6:CA:3D:A5:25:F8:8E:D1:1F:7C:80
X509v3 Authority Key Identifier:
keyid:6E:3A:42:CD:2B:23:9D:A3:E6:58:EF:B9:7E:AD:15:B0:E6:ED:DA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/bjpCzSsjnaPmWO-5fq0VsObt2qE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bjpCzSsjnaPmWO-5fq0VsObt2qE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AA58/0FDCA6FEAA7611EC8F7D5639C4F9AE02/CC2E531EAA7811ECB6791A3EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.183.194.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:07:56:c1:0e:bf:71:af:0d:1b:a3:a1:75:66:bb:da:a1:d2:
54:58:7b:d0:7b:7a:5c:e0:74:ee:ef:a9:70:b5:fb:97:9d:a8:
27:fc:57:38:23:d3:ad:7f:43:48:41:39:3a:59:ce:b5:fe:6b:
93:6f:eb:59:61:e0:c1:6a:05:01:1c:77:ec:e3:2b:83:32:87:
6f:9e:14:0a:24:33:96:52:18:5d:9e:bc:2f:3d:a3:f4:8d:2c:
79:9a:43:88:8d:04:5e:1a:83:94:77:8e:93:4f:4f:8c:69:06:
d0:99:c9:c9:44:e8:c8:8c:cc:79:ff:8b:f4:5c:9d:c5:ec:90:
b7:a8:f8:11:c5:de:e4:95:57:ed:ce:2c:8e:be:c4:11:cd:39:
5e:de:d4:36:44:6a:f4:fe:18:a3:7f:4b:81:41:dd:be:9b:1c:
67:63:5e:4d:8b:85:59:4c:65:c3:0d:c5:ee:e7:b6:62:96:91:
2d:73:e7:84:44:8a:ed:4a:cb:f0:44:1e:3c:06:f1:9a:3c:50:
a6:81:f3:9d:34:dc:05:3a:a7:ae:eb:b2:e2:98:c1:b1:88:8a:
11:9a:09:f3:b2:17:85:08:7d:02:31:8e:ed:e9:bf:ec:3e:d7:
fd:a2:11:52:3f:89:40:c8:ec:33:56:0f:82:11:62:36:65:b5:
b2:58:42:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:45:07 2026 by rpki-client