
$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa
File: 41C460BE1BE911ED81DB667EC4F9AE02.roa (raw, json)
Hash identifier: HcV+IrVTq5pa4gc80I8x5ly7AndrsJpUFdKWEySl9RA=
Subject key identifier: AA:5C:5A:2D:E8:73:D8:86:30:67:1F:76:EE:0E:77:A6:40:21:AB:72
Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial: 038E
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:26:28 +0000
ROA not before: Fri 15 Aug 2025 02:07:40 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 137967
IP address blocks: 103.189.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Validity
Not Before: Aug 15 02:07:40 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a44c94-12aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:87:f9:c3:08:79:0e:cc:86:72:78:c4:6d:
da:50:2a:a8:21:dc:84:0c:35:ad:0a:f2:97:99:85:
86:19:92:99:f8:e6:dc:94:78:c5:e2:23:f1:1a:37:
fd:e4:af:6d:9c:c6:4f:6b:c9:5b:c9:ab:ba:85:e8:
7f:fd:60:f9:03:48:67:9b:c7:ac:85:dd:3c:02:16:
dd:26:ae:00:e2:71:72:7b:be:9b:d7:8f:ea:5b:8f:
18:68:64:63:ee:22:28:ed:3d:51:ca:5d:5d:f8:fc:
53:24:54:1c:c4:08:40:a1:45:71:5b:d0:45:d2:e6:
4e:4a:33:de:da:60:a7:02:c3:6d:0d:7b:53:7c:15:
71:c0:96:bc:77:64:a1:80:e7:c7:28:e0:f3:fe:15:
3b:7a:72:43:83:91:c8:33:ed:b6:a6:3b:2e:f1:3e:
8c:b6:59:43:90:a6:7a:c9:b7:04:72:58:ff:1f:ca:
53:28:69:12:8a:f5:29:ff:a3:7c:ff:3f:08:8d:f6:
5d:bc:1d:4f:d8:72:11:fe:89:99:b4:79:48:38:29:
72:72:79:37:66:03:68:7c:c3:0d:ca:66:97:3a:20:
52:b6:2a:83:ac:7f:dc:cd:e3:2d:7e:7e:d3:b5:e4:
be:da:7f:8d:e1:78:d5:c4:f3:0d:17:2f:79:1a:df:
5b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5C:5A:2D:E8:73:D8:86:30:67:1F:76:EE:0E:77:A6:40:21:AB:72
X509v3 Authority Key Identifier:
keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/41C460BE1BE911ED81DB667EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.189.11.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:b0:8c:d0:9b:68:e0:f8:d7:bc:e8:38:ff:0e:88:7e:98:6c:
de:45:1a:77:ac:73:7b:ce:8d:80:c8:15:ac:fe:97:24:d5:16:
1d:d5:9d:8d:62:6e:c8:fd:a2:cc:ec:50:7a:31:3a:62:d3:90:
44:86:fe:24:31:74:8d:9f:af:51:94:61:2b:f1:d9:78:4e:7e:
17:25:c8:db:9a:94:fe:08:d8:4c:d7:a6:a3:76:af:05:bb:30:
61:c2:ae:c9:3f:4a:0a:ef:d5:29:7a:33:2d:43:95:95:a8:4f:
41:04:28:f8:c4:54:cf:25:55:27:ff:cf:da:3a:bc:a1:b9:b9:
cb:9a:f9:ba:02:e6:50:95:9e:b4:35:17:cc:c9:a3:25:e8:4b:
c0:da:35:3b:c0:56:f4:a4:dc:e7:61:58:9a:12:48:9d:78:af:
89:d6:e9:bc:a5:57:f6:3c:03:82:b7:d1:3b:d9:43:ac:48:78:
a7:ba:1f:61:74:81:a4:32:d1:f0:39:d8:d3:93:28:23:36:64:
bf:22:0d:aa:7a:42:ff:b3:e8:03:2f:70:10:82:df:6f:c1:5e:
7f:5d:81:e1:d5:72:4a:77:a5:a0:34:0c:fb:1b:ed:c9:5b:05:
b6:63:74:13:3c:af:0f:39:cf:ec:57:f5:ad:6d:ea:ea:51:6e:
2e:c9:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:22 2026 by rpki-client