
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa
File: C1D2BAAAE87711EFBE7C537EC4F9AE02.roa (raw, json)
Hash identifier: mBhPexFJCjhETjgQ1BBwLO6vkuwTxq2sdBYZtB3P694=
Subject key identifier: 65:7A:CF:52:F6:A7:49:1F:B7:7E:E8:C4:9D:2B:53:06:86:BC:6B:53
Certificate issuer: /CN=A911A557/serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Certificate serial: 0104
Authority key identifier: 67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa
Signing time: Mon 01 Jun 2026 07:34:48 +0000
ROA not before: Mon 01 Jun 2026 07:34:48 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58627
IP address blocks: 45.119.0.0/24 maxlen: 24
45.119.1.0/24 maxlen: 24
45.119.2.0/24 maxlen: 24
45.119.3.0/24 maxlen: 24
110.92.76.0/24 maxlen: 24
110.92.77.0/24 maxlen: 24
110.92.78.0/24 maxlen: 24
110.92.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A557, serialNumber=67CE3D9C26A14BCDFF9B3394D33557668218A156
Validity
Not Before: Jun 1 07:34:48 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a1d3618-e4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:ee:68:0e:e3:8e:24:fb:58:76:61:f4:f3:
7a:d1:6c:ac:e8:2d:21:db:47:a8:ad:29:38:0c:2e:
f6:9e:8b:c3:06:ef:c1:2e:26:ee:ce:92:48:35:14:
90:f6:a7:a3:eb:90:fb:ea:16:90:7b:63:bd:c6:4b:
e6:70:52:97:8f:3d:31:e4:f0:21:ba:50:0e:95:b9:
05:fa:55:4e:79:3b:ee:46:fe:da:0b:d7:04:36:01:
34:d0:b7:a7:f5:b8:50:86:da:e3:a7:71:51:c3:21:
86:44:ce:ae:2f:9d:b6:ab:8b:8e:cc:fe:69:cd:47:
cc:3f:5d:90:44:a5:b7:a0:25:48:aa:da:a8:89:54:
8b:29:5e:0c:06:37:fd:26:bd:bb:06:eb:02:d4:2c:
a1:c4:48:71:94:d3:d7:2d:e5:32:69:28:88:47:01:
85:f2:82:66:7b:35:69:37:ab:fc:e0:1a:45:95:43:
c3:1c:9e:79:eb:47:13:05:1d:f0:13:02:65:87:7e:
91:f5:05:5f:58:13:4c:cd:6d:86:f9:3d:6c:51:9f:
e8:30:99:7f:fc:c2:a8:b4:be:dd:75:c5:ca:8e:38:
16:c3:c9:96:cb:7f:b2:ba:05:0f:33:06:5e:38:22:
ee:02:6c:5a:e8:9c:13:20:54:1f:15:81:85:3e:8d:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7A:CF:52:F6:A7:49:1F:B7:7E:E8:C4:9D:2B:53:06:86:BC:6B:53
X509v3 Authority Key Identifier:
keyid:67:CE:3D:9C:26:A1:4B:CD:FF:9B:33:94:D3:35:57:66:82:18:A1:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/Z849nCahS83_mzOU0zVXZoIYoVY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z849nCahS83_mzOU0zVXZoIYoVY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A557/92683E3AE86C11EFB232056EC4F9AE02/C1D2BAAAE87711EFBE7C537EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.119.0.0/22
110.92.76.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:7f:d4:e7:fc:69:41:f0:1e:0f:df:f5:03:dc:33:4a:70:aa:
11:a1:e9:95:1a:ba:b9:86:58:af:11:9f:58:0f:50:a0:81:e2:
d0:07:4e:58:0d:f2:70:cf:3b:9a:db:ee:b9:46:9f:15:22:86:
49:4c:f7:f7:25:a4:48:47:d9:3d:24:34:cb:a1:de:e4:f2:b0:
76:55:f6:dc:d2:47:72:a6:f9:9f:8b:5b:e5:0d:cf:dc:3f:33:
42:1d:c6:9c:a8:d9:fd:f1:cd:eb:1a:5e:27:1f:a9:c1:01:c4:
8c:6c:6b:50:9f:19:03:a0:a4:b9:b9:f9:39:23:ee:7e:4e:03:
38:47:ca:c0:68:a0:69:6e:33:b1:30:64:21:91:00:99:00:78:
6c:b3:7c:4f:5c:9d:58:a1:87:62:9e:85:77:72:70:0f:e6:9b:
cf:e7:85:c2:dc:86:71:bb:b4:df:63:42:71:15:47:0e:45:c3:
ae:0a:4e:cc:0a:9b:6d:68:37:3d:51:20:e7:a6:98:c7:16:ee:
87:26:bc:74:fb:52:34:84:99:ce:b1:af:d0:07:49:ad:a5:2f:
00:3a:08:1f:1e:b2:ca:ba:9c:27:0f:4c:14:0d:ea:3a:a3:26:
50:d1:82:ec:33:4a:78:38:06:2f:ce:85:14:2a:f6:27:9b:96:
cd:90:75:85
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUE1NTcxMTAvBgNVBAUTKDY3Q0UzRDlDMjZBMTRCQ0RGRjlCMzM5NEQzMzU1NzY2
ODIxOEExNTYwHhcNMjYwNjAxMDczNDQ4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFkMzYxOC1lNGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoUbuaA7jjiT7WHZh9PN60Wys6C0h20eorSk4DC72novDBu/BLibuzpJINRSQ
9qej65D76haQe2O9xkvmcFKXjz0x5PAhulAOlbkF+lVOeTvuRv7aC9cENgE00Len
9bhQhtrjp3FRwyGGRM6uL522q4uOzP5pzUfMP12QRKW3oCVIqtqoiVSLKV4MBjf9
Jr27BusC1CyhxEhxlNPXLeUyaSiIRwGF8oJmezVpN6v84BpFlUPDHJ5560cTBR3w
EwJlh36R9QVfWBNMzW2G+T1sUZ/oMJl//MKotL7ddcXKjjgWw8mWy3+yugUPMwZe
OCLuAmxa6JwTIFQfFYGFPo1hNwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFGV6z1L2
p0kft37oxJ0rUwaGvGtTMB8GA1UdIwQYMBaAFGfOPZwmoUvN/5szlNM1V2aCGKFW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTU1Ny85MjY4M0UzQUU4
NkMxMUVGQjIzMjA1NkVDNEY5QUUwMi9aODQ5bkNhaFM4M19tek9VMHpWWFpvSVlv
VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1o4NDluQ2FoUzgzX216T1UwelZYWm9JWW9WWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUE1NTcvOTI2ODNFM0FFODZDMTFFRkIyMzIwNTZFQzRGOUFFMDIvQzFEMkJBQUFF
ODc3MTFFRkJFN0M1MzdFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQCLXcAAwQCblxMMA0GCSqGSIb3DQEBCwUAA4IBAQC7f9Tn/GlB8B4P
3/UD3DNKcKoRoemVGrq5hlivEZ9YD1CggeLQB05YDfJwzzua2+65Rp8VIoZJTPf3
JaRIR9k9JDTLod7k8rB2Vfbc0kdypvmfi1vlDc/cPzNCHcacqNn98c3rGl4nH6nB
AcSMbGtQnxkDoKS5ufk5I+5+TgM4R8rAaKBpbjOxMGQhkQCZAHhss3xPXJ1YoYdi
noV3cnAP5pvP54XC3IZxu7TfY0JxFUcORcOuCk7MCpttaDc9USDnppjHFu6HJrx0
+1I0hJnOsa/QB0mtpS8AOggfHrLKupwnD0wUDeo6oyZQ0YLsM0p4OAYvzoUUKvYn
m5bNkHWF
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:18 2026 by rpki-client