
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/67827BDC0B8511EA97C80D52C4F9AE02.roa
File: 67827BDC0B8511EA97C80D52C4F9AE02.roa (raw, json)
Hash identifier: 7CjBAuah6/o6TO56EaGyhTraMGUdKeiH/EG6F7J9nYY=
Subject key identifier: 59:69:A7:74:1C:8D:E1:16:71:B8:57:7C:F7:5C:18:A9:93:27:10:39
Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Certificate serial: 0CEF
Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/67827BDC0B8511EA97C80D52C4F9AE02.roa
Signing time: Fri 24 Apr 2026 18:24:07 +0000
ROA not before: Fri 24 Apr 2026 18:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137526
IP address blocks: 103.111.224.0/22 maxlen: 22
103.111.224.0/24 maxlen: 24
103.111.225.0/24 maxlen: 24
103.111.226.0/24 maxlen: 24
103.111.227.0/24 maxlen: 24
2402:a1c0::/32 maxlen: 32
2402:a1c0::/36 maxlen: 36
2402:a1c0:1000::/36 maxlen: 36
2402:a1c0:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3311 (0xcef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B
Validity
Not Before: Apr 24 18:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ebb547-c432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:c0:c2:6a:43:08:0b:e2:b8:84:13:78:d2:
6d:50:82:7a:1a:e3:89:18:4c:46:a2:93:d7:a2:b4:
11:26:97:4e:e6:68:00:2b:4a:12:0a:76:2d:b3:54:
fd:48:31:76:1d:f2:01:21:3d:57:61:3d:81:34:42:
43:14:ac:79:95:a9:e4:7f:4d:62:29:71:12:66:b0:
d8:c3:e1:69:3b:f7:d5:60:42:d0:b0:f1:47:a8:4c:
85:5a:ee:68:1b:0f:b8:d9:24:d6:14:6f:c2:95:70:
aa:43:a0:56:62:9f:c9:8c:d2:f4:8c:c5:79:f4:9d:
3b:ed:25:45:28:a5:b4:f2:ea:3d:5f:42:60:a9:16:
bd:c9:bd:ef:a6:0b:50:97:91:19:00:e1:46:4f:0e:
97:af:5b:de:e8:72:ec:19:82:e8:28:32:d3:ae:20:
19:20:04:69:28:0d:9b:ee:d3:ce:1d:94:9c:75:15:
b1:d8:07:27:a3:74:01:5e:01:16:12:78:cb:09:72:
6b:83:44:9c:27:ca:e9:fb:10:a6:c4:52:22:e8:9f:
b2:eb:a4:d1:5d:95:b0:fa:07:e4:fa:0c:97:f9:44:
a1:3e:55:e1:b1:af:c3:ac:48:3f:20:f9:bf:7a:aa:
6e:d5:00:a5:ea:59:51:a3:35:c6:ac:40:e4:d2:17:
55:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:A7:74:1C:8D:E1:16:71:B8:57:7C:F7:5C:18:A9:93:27:10:39
X509v3 Authority Key Identifier:
keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/67827BDC0B8511EA97C80D52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.111.224.0/22
IPv6:
2402:a1c0::/32
Signature Algorithm: sha256WithRSAEncryption
04:32:cd:0b:eb:bc:9e:16:f2:fb:1c:4e:3d:25:20:14:e6:9e:
f3:c9:a4:ab:27:57:05:0e:f4:38:86:2f:a0:46:4d:04:ec:a6:
43:aa:8b:7c:2c:10:90:ef:ca:8d:5d:75:43:42:d2:eb:6a:b1:
5f:5d:45:33:d7:ae:56:7e:fd:75:e2:44:0d:8f:1b:da:e1:34:
b6:90:2b:84:4a:5f:3a:a6:b6:92:56:43:26:f4:43:40:aa:1f:
d1:dc:83:b8:d3:0a:fb:89:26:9b:08:73:ad:4e:27:2c:25:a1:
1b:75:a5:9a:f6:f9:f0:29:52:9e:2c:c5:5d:26:3c:42:97:90:
1b:97:bd:e4:52:53:3e:f8:e6:73:40:17:fe:b9:35:01:3a:dc:
36:e7:f4:1c:4b:5d:4d:45:69:38:e5:54:c1:ae:9d:ab:35:15:
ea:8b:b3:d3:ed:63:dd:c5:6a:c7:51:ac:aa:e9:9c:be:90:cf:
6d:4d:47:84:c3:2a:72:8f:84:fb:df:e8:76:4a:71:60:5b:8e:
8e:d9:55:6e:ba:69:c6:c7:74:a4:af:a6:da:f5:8b:ee:85:bb:
01:69:b7:16:f5:26:b5:e4:2f:33:09:37:5b:44:8b:70:10:12:
2a:6e:be:09:df:c9:2c:a7:53:64:a6:d5:17:11:dc:5e:05:49:
58:e6:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:59 2026 by rpki-client