
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1DF3803AEEC611F0B6553517716F56BC.roa
File: 1DF3803AEEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier: 3w7j7SPBNuYGbUKcI3vyZONgHMBi2xhfwsRI7in3gbo=
Subject key identifier: 12:54:C1:EE:7C:5C:93:6C:98:78:B1:3A:5D:D4:B5:95:87:8B:F0:3E
Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial: 39
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1DF3803AEEC611F0B6553517716F56BC.roa
Signing time: Sun 01 Mar 2026 06:01:10 +0000
ROA not before: Sun 11 Jan 2026 08:18:32 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 20473
IP address blocks: 138.252.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Validity
Not Before: Jan 11 08:18:32 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a3d625-55a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:6f:1f:26:f0:33:a9:c9:97:8f:cf:06:67:
45:2d:c7:23:7b:bb:24:8c:10:77:db:4a:17:a7:91:
04:9c:2a:b0:c2:cb:28:bd:53:7a:55:91:07:ad:1a:
b4:3f:9f:b8:55:9d:e9:8f:ba:fd:0c:ff:15:9c:46:
e1:36:bd:c1:0e:c7:6b:54:92:1d:98:bc:51:77:12:
45:03:4a:0f:36:4f:f7:81:17:03:28:3b:36:19:af:
31:d0:6a:62:1e:b7:ae:a3:cc:f4:09:f6:fb:39:07:
13:58:00:15:55:c4:e4:fb:a1:bf:f0:42:3b:8b:c3:
a5:a3:16:7f:bd:41:26:62:8d:2b:44:dd:51:41:35:
bd:9e:26:76:8d:e3:29:79:68:cc:65:19:5b:c2:b8:
68:89:ff:0f:0a:93:56:40:4d:14:99:14:e5:f9:ed:
f4:43:33:ec:a8:30:d8:39:4e:28:61:fe:f5:69:44:
27:52:05:9e:b7:05:da:c6:23:0d:0c:ab:c8:77:a7:
db:2b:45:5d:45:f3:54:f4:dc:79:ec:c2:fc:5e:a2:
19:ac:75:cc:64:41:e0:b3:8b:21:38:62:1e:86:8a:
10:ad:1f:c7:99:ae:d5:bb:a5:e5:44:96:62:4c:8b:
3e:e6:e4:a2:70:39:b2:28:b7:44:a0:63:9c:40:8e:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:C1:EE:7C:5C:93:6C:98:78:B1:3A:5D:D4:B5:95:87:8B:F0:3E
X509v3 Authority Key Identifier:
keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1DF3803AEEC611F0B6553517716F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.93.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e1:9b:88:5d:8c:91:f5:5b:5a:cf:b3:0e:48:88:cd:70:53:
4d:98:8d:1a:b7:34:f0:25:36:f5:24:e1:07:24:93:fa:b3:b9:
01:ce:49:7c:b7:8c:46:cb:41:8b:5f:75:e1:ef:63:78:1d:8e:
7e:7a:90:c5:cd:06:c4:d2:b9:ed:dd:15:a9:f6:0d:1e:da:b9:
7f:14:b6:86:d1:c9:2d:cd:55:61:75:cf:02:dc:d3:68:b0:62:
32:12:f8:6c:f5:41:16:1a:95:66:b8:15:14:1e:09:4d:7c:7e:
2b:42:b7:30:73:cc:c3:97:35:95:f9:06:d6:ee:bc:51:dd:b0:
c9:27:87:c3:ec:84:1f:67:11:9c:70:61:6f:b2:60:7f:5e:9a:
1d:d9:37:ab:67:74:8b:e0:36:a1:1b:ba:41:9e:67:9e:f3:c3:
8b:2e:84:ed:61:2f:9e:03:33:27:c1:5a:c3:99:60:ef:54:2b:
3a:fd:7b:aa:55:1e:d1:d1:64:02:0a:8d:63:20:9f:6c:cd:6b:
d3:6f:62:59:a6:a7:3d:b5:9c:b0:89:7f:6e:2a:d4:6b:28:01:
c7:00:78:a5:1e:a3:d4:9e:af:41:ab:8c:c7:2c:6d:f9:68:b6:
4b:39:b9:df:54:ca:67:c1:11:63:da:26:f2:71:5e:17:b1:d5:
83:3f:ba:66
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njk1QTExMC8GA1UEBRMoMjIyNjYyN0I3M0U1MTU0NkIzQkQ1MTBFMEUyQTBERUFB
ODI1MjA3ODAeFw0yNjAxMTEwODE4MzJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNjI1LTU1YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/Mm8fJvAzqcmXj88GZ0UtxyN7uySMEHfbShenkQScKrDCyyi9U3pVkQetGrQ/
n7hVnemPuv0M/xWcRuE2vcEOx2tUkh2YvFF3EkUDSg82T/eBFwMoOzYZrzHQamIe
t66jzPQJ9vs5BxNYABVVxOT7ob/wQjuLw6WjFn+9QSZijStE3VFBNb2eJnaN4yl5
aMxlGVvCuGiJ/w8Kk1ZATRSZFOX57fRDM+yoMNg5Tihh/vVpRCdSBZ63BdrGIw0M
q8h3p9srRV1F81T03HnswvxeohmsdcxkQeCziyE4Yh6GihCtH8eZrtW7peVElmJM
iz7m5KJwObIot0SgY5xAji2RAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUElTB7nxc
k2yYeLE6XdS1lYeL8D4wHwYDVR0jBBgwFoAUIiZie3PlFUazvVEODioN6qglIHgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzVBNzk3MTQwQzhG
MTExRjA4MEVFMzc3NkM0RjlBRTAyL0lpWmllM1BsRlVhenZWRU9EaW9ONnFnbElI
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSWlaaWUzUGxGVWF6dlZFT0Rpb042cWdsSUhnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Njk1QS81QTc5NzE0MEM4RjExMUYwODBFRTM3NzZDNEY5QUUwMi8xREYzODAzQUVF
QzYxMUYwQjY1NTM1MTc3MTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACK/F0wDQYJKoZIhvcNAQELBQADggEBAFPhm4hdjJH1W1rPsw5IiM1w
U02YjRq3NPAlNvUk4Qckk/qzuQHOSXy3jEbLQYtfdeHvY3gdjn56kMXNBsTSue3d
Fan2DR7auX8UtobRyS3NVWF1zwLc02iwYjIS+Gz1QRYalWa4FRQeCU18fitCtzBz
zMOXNZX5BtbuvFHdsMknh8PshB9nEZxwYW+yYH9emh3ZN6tndIvgNqEbukGeZ57z
w4suhO1hL54DMyfBWsOZYO9UKzr9e6pVHtHRZAIKjWMgn2zNa9NvYlmmpz21nLCJ
f24q1GsoAccAeKUeo9Ser0GrjMcsbflotks5ud9UymfBEWPaJvJxXhex1YM/umY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:04 2026 by rpki-client