
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa
File: 4B167396E74111EC80E35542C4F9AE02.roa (raw, json)
Hash identifier: s3LCy4JitIxrk8TrdHNnZ3pFI/mZ0+J3BlkxeqJMpVg=
Subject key identifier: EA:8E:04:90:24:35:EC:6F:70:84:6F:94:3C:41:83:52:96:7F:63:BA
Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Certificate serial: 04A4
Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:37:00 +0000
ROA not before: Wed 03 Sep 2025 00:45:40 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 3786
IP address blocks: 103.99.208.0/24 maxlen: 24
103.99.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 23:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188 (0x4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3
Validity
Not Before: Sep 3 00:45:40 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a4793c-135d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:14:7d:68:28:a1:8a:c7:1d:84:cf:75:74:
50:69:cf:dd:4a:1f:3a:17:07:fd:64:56:ce:71:5e:
23:97:14:6c:a0:13:c6:ef:f5:ce:98:36:71:50:42:
ea:4a:ff:59:df:25:91:c6:b8:13:08:8b:ad:0a:27:
13:2a:08:1b:d2:1e:9d:70:88:a2:6a:fa:19:ab:36:
4d:8a:ca:d0:d0:56:27:14:a3:95:82:78:b1:22:d0:
c8:eb:1a:81:27:f2:5a:e4:12:05:68:5b:b6:67:69:
05:ec:b3:4e:f0:69:73:dd:a5:da:b5:5e:32:17:6e:
5a:aa:8a:b5:34:9f:dc:68:41:c0:db:0d:58:98:3a:
6d:34:35:10:53:3f:74:ce:35:a1:5a:f0:28:af:08:
c0:21:b5:6c:1a:59:ac:96:51:26:a7:46:bb:8b:63:
54:59:a9:32:b9:2a:e2:37:b3:d8:13:d6:59:b6:4c:
0c:de:19:3c:06:e4:5f:ae:7a:7a:ea:2e:3c:d7:f2:
c5:a3:97:32:6c:a2:22:bc:9c:9f:ba:86:33:91:db:
eb:46:44:69:d6:ab:1e:f5:8a:14:57:ed:b3:4f:84:
19:49:2c:6e:53:0f:82:c6:d0:4d:c1:98:b4:47:c9:
b1:ff:c3:fc:70:04:f4:5c:8e:e3:ad:aa:b5:43:bf:
72:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:04:90:24:35:EC:6F:70:84:6F:94:3C:41:83:52:96:7F:63:BA
X509v3 Authority Key Identifier:
keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/4B167396E74111EC80E35542C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.99.208.0/24
103.99.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:59:15:16:91:49:61:b1:e3:0b:6b:57:7a:17:60:1f:eb:e1:
3f:78:b7:60:96:ab:69:af:ac:06:16:84:80:ea:c5:d6:69:e3:
29:12:5f:4a:32:54:7b:a0:ca:0b:2c:df:c1:ee:6a:29:f2:6a:
9d:60:20:1c:a9:0c:cd:89:6e:af:a5:f9:ba:35:1e:3e:c6:17:
62:a4:3c:49:53:21:3e:e9:91:89:6c:a6:8a:1b:6b:34:9d:ae:
b0:d2:cc:76:60:5f:d5:82:7f:b9:6e:5f:70:9a:a7:66:22:24:
59:c1:e2:31:89:a2:d2:84:ac:e5:c8:cf:80:03:0c:f8:62:4d:
81:89:72:85:2e:7d:cb:46:3e:f5:f1:8e:1f:b4:d6:bc:55:87:
b5:27:f6:f1:17:d5:ae:d3:d4:d9:6a:65:87:fc:d6:a4:fb:34:
59:1d:eb:46:3f:75:01:ab:b2:e3:1c:27:3c:ad:0c:9e:9e:3f:
75:8d:86:e9:a6:7f:38:5c:b9:1d:bf:89:15:2a:9a:41:e0:b3:
8b:ae:8f:89:04:70:02:80:01:69:e9:fb:01:c9:74:79:d1:56:
18:1c:d4:99:6d:fd:de:4e:3e:4e:8d:8c:ba:04:cb:41:3b:a0:
26:8b:d4:b2:43:b8:9b:72:15:5e:b0:e0:82:b4:c3:52:07:80:
c4:5b:f7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:36 2026 by rpki-client