
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/55778AA0757911EFBDEE9A73C4F9AE02.roa
File: 55778AA0757911EFBDEE9A73C4F9AE02.roa (raw, json)
Hash identifier: GMH8Mkw5UtCZ2ecpJ5boAvlU18bo2a/WaY9Trybc1hM=
Subject key identifier: 43:20:D2:1A:5A:11:44:FE:0E:E4:05:D8:CB:F5:FD:3B:46:3E:60:8F
Certificate issuer: /CN=A911A0AB/serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Certificate serial: 0161
Authority key identifier: 26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/55778AA0757911EFBDEE9A73C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:24:37 +0000
ROA not before: Thu 05 Feb 2026 14:24:15 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 136170
IP address blocks: 45.64.0.0/22 maxlen: 22
45.64.2.0/24 maxlen: 24
49.50.8.0/22 maxlen: 22
49.50.8.0/24 maxlen: 24
49.50.9.0/24 maxlen: 24
49.50.10.0/24 maxlen: 24
103.11.74.0/23 maxlen: 23
103.25.222.0/23 maxlen: 23
103.82.240.0/22 maxlen: 22
103.229.72.0/22 maxlen: 22
103.229.73.0/24 maxlen: 24
2400:88c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A0AB, serialNumber=265703D85933F45D9B04DAB77237584FC92D9D44
Validity
Not Before: Feb 5 14:24:15 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69a43e15-97c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:70:7f:a0:33:a0:f3:25:b5:74:53:f0:89:
60:0a:db:24:7e:8a:47:0d:34:c2:72:60:07:1d:ed:
f4:7b:ec:37:79:db:59:60:b4:9f:6e:3f:19:b0:f7:
d5:02:55:c9:dc:d9:25:52:f5:3b:b2:9d:c7:7f:59:
70:52:14:fc:c8:d1:c0:1c:28:f8:1c:95:96:1e:8b:
c0:ff:a9:a8:92:30:6f:af:4f:d3:3a:6d:5e:43:46:
6a:96:2a:0b:50:29:67:9c:74:8b:83:61:69:4d:d1:
75:94:d0:86:3b:9d:82:d5:bc:67:20:1d:a5:f7:90:
d6:ff:6b:9f:b8:85:d8:2b:af:bb:66:92:6e:15:db:
7b:ff:be:0e:57:31:15:84:3f:0b:33:63:18:b4:eb:
2e:c9:17:23:a6:eb:4b:e7:df:2d:bc:b3:e6:99:32:
e2:8e:28:e1:7a:99:4b:cb:a8:64:cc:8f:59:19:82:
4e:a0:61:3e:04:1a:d2:ce:2e:e8:9a:53:bc:4e:cf:
bf:21:4d:7f:0f:04:89:e4:fb:07:fc:5f:03:62:9e:
12:60:f4:6b:7e:3d:16:8a:1e:d1:07:08:93:b7:3d:
df:0a:cd:c9:09:fb:4a:82:9b:4c:39:75:3b:d3:3a:
87:81:ad:ca:96:88:99:de:6e:af:3f:ca:a3:76:23:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:D2:1A:5A:11:44:FE:0E:E4:05:D8:CB:F5:FD:3B:46:3E:60:8F
X509v3 Authority Key Identifier:
keyid:26:57:03:D8:59:33:F4:5D:9B:04:DA:B7:72:37:58:4F:C9:2D:9D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JlcD2Fkz9F2bBNq3cjdYT8ktnUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A0AB/744526F60FA111EFA6788886C4F9AE02/55778AA0757911EFBDEE9A73C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.0.0/22
49.50.8.0/22
103.11.74.0/23
103.25.222.0/23
103.82.240.0/22
103.229.72.0/22
IPv6:
2400:88c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:95:78:5d:d6:78:39:c0:ae:5b:f7:16:54:55:d4:ef:06:b1:
00:cf:8d:8e:48:4d:77:7e:1d:ef:48:6e:36:af:24:90:55:6a:
e0:07:bb:4c:6d:46:9d:32:50:da:24:75:53:53:80:04:be:65:
14:80:66:02:3f:c5:89:c6:de:b4:60:96:a1:1b:68:23:40:af:
3e:2f:ca:b9:db:7e:ba:5c:d0:1e:51:68:cc:93:0a:2e:7b:2c:
13:94:eb:a7:30:bf:19:11:fe:60:67:4c:18:d5:13:8d:4d:70:
7e:98:fe:68:f7:a2:84:9a:2b:ca:08:72:40:94:83:69:03:92:
5c:53:45:cd:ca:b7:e2:13:98:6e:f7:39:c7:40:84:97:aa:f2:
df:4a:33:0e:68:e6:cd:7a:7f:cd:bd:19:14:22:c9:12:b7:d9:
36:b0:8f:c0:f0:44:d2:bc:71:15:5f:4a:9b:1f:37:cb:34:d7:
2c:a1:38:a6:d4:c2:1a:cd:e1:40:40:46:79:75:2b:d9:96:e4:
93:c3:7b:5f:ae:6c:43:c7:97:00:88:50:8a:11:32:6e:d0:d7:
8f:6c:c8:7d:6c:4e:48:f0:97:79:98:12:7b:59:8e:87:be:06:
b7:5a:b8:54:fd:5c:ae:4f:99:48:85:1a:3e:bc:51:7b:9d:a5:
58:a5:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:54 2026 by rpki-client