
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
File: 1CED22CCEEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier: 25gq5/S5E1fNMSp9IlKYv9C2whb0+QVibr14Yr9qjOk=
Subject key identifier: C2:F1:97:A9:A2:87:20:39:85:90:B3:06:AA:C1:4E:6A:BB:CE:92:63
Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial: 37
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
Signing time: Sun 01 Mar 2026 06:01:08 +0000
ROA not before: Sun 11 Jan 2026 08:18:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147176
IP address blocks: 138.252.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Validity
Not Before: Jan 11 08:18:30 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d624-b3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:c3:a8:9b:cf:13:86:42:45:e2:43:e0:78:
19:56:17:5e:43:0c:83:df:e5:ff:80:3e:d5:09:e8:
c0:d8:14:9f:52:6b:0f:e5:15:bd:1b:de:d7:51:a0:
66:ca:bc:a6:fc:0c:bc:3b:10:fb:42:cd:a0:72:83:
32:d8:5a:24:21:0f:1d:e2:72:13:81:e4:aa:21:a3:
0f:92:e3:30:8a:0f:c4:0c:6c:84:02:ed:87:c0:d4:
9c:15:31:1e:e1:95:fc:e9:04:6d:ed:94:47:c6:a1:
28:8d:65:08:83:df:58:2b:1b:e2:be:13:13:f6:1a:
15:44:c2:23:76:df:7d:7b:f5:b5:1d:a1:f3:07:41:
72:27:6d:3d:71:bc:2d:96:0c:9e:40:aa:84:b5:8a:
28:3f:70:1e:f0:5c:b5:1d:16:5e:67:f5:99:16:2f:
c3:4c:f2:81:ca:8b:a9:0c:31:e2:08:c2:8e:e2:01:
5f:53:56:16:ae:7e:dd:3f:31:ea:d7:b7:8b:1b:2b:
3a:bb:71:ca:a7:d5:24:ba:8f:c9:17:50:6e:3e:7e:
bd:a6:49:08:14:ec:ce:a0:23:4c:f4:da:fd:a9:e9:
69:4a:32:7c:f6:7b:d0:99:f3:0f:55:eb:b5:47:de:
57:cf:ae:cf:97:89:4d:b9:5a:61:1f:f0:ae:f3:c0:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F1:97:A9:A2:87:20:39:85:90:B3:06:AA:C1:4E:6A:BB:CE:92:63
X509v3 Authority Key Identifier:
keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f8:ba:4b:f8:95:bc:7b:9b:41:4a:e7:49:f6:cf:4c:72:f3:
bf:54:ed:9e:cd:8b:a8:e3:15:05:4d:5f:4a:8f:17:ba:06:41:
c7:a8:32:5c:c6:7f:c3:cd:55:bb:ee:85:82:22:3a:2a:c8:20:
ac:9c:e1:4b:51:28:ca:4d:3d:96:0f:54:1d:6d:17:91:cb:d6:
c9:3f:b7:94:8f:18:c5:b1:bd:67:89:60:23:91:f0:17:ee:2a:
c7:be:a9:5f:e5:48:b7:a0:f2:d1:10:9f:31:20:30:79:64:18:
9a:5c:4f:c2:19:42:23:33:13:e8:8b:6c:c7:04:50:01:93:b4:
0a:dd:89:5e:06:c4:a4:1e:78:38:5c:16:45:34:6e:19:a1:7c:
3d:6d:21:a3:68:2d:03:9b:a1:c3:24:c4:6c:7a:1c:58:8e:14:
64:b9:9f:12:ea:49:87:c3:99:7c:32:91:46:06:4b:b0:8d:7d:
76:39:82:98:f7:d3:d1:85:4c:44:57:d4:52:8b:74:0b:2d:3a:
f2:e2:80:6f:be:f6:e2:ce:d5:c8:b9:22:27:ae:25:96:1c:7b:
ca:63:12:3f:04:5f:aa:86:c0:9b:b3:1c:3a:5a:a1:c7:9b:94:
ee:45:ac:1c:ab:0c:e3:32:2e:49:f3:2f:73:b5:78:4d:05:b5:
83:05:b6:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:23:24 2026 by rpki-client