
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1AB7C58C57E411EEB143C80EC4F9AE02.roa
File: 1AB7C58C57E411EEB143C80EC4F9AE02.roa (raw, json)
Hash identifier: BqC7pGOxO/szZnK2WNXYhwBGYw4rUQUrMZEPUUYyFIQ=
Subject key identifier: 8E:26:22:D5:A2:B8:2F:C6:3D:0D:57:2E:32:7B:48:09:05:91:41:56
Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial: 0267
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1AB7C58C57E411EEB143C80EC4F9AE02.roa
Signing time: Thu 29 Oct 2026 03:51:34 +0000
ROA not before: Thu 29 Oct 2026 03:51:34 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 1239
IP address blocks: 43.239.250.0/24 maxlen: 24
114.31.208.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 03:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 615 (0x267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Validity
Not Before: Oct 29 03:51:34 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ae2c2c6-0c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:48:4f:5c:92:48:9a:85:fb:26:b0:8e:13:
34:7b:c0:d5:50:b6:c5:2f:26:cb:57:35:21:c2:6c:
84:41:c3:f8:f0:2a:f4:8a:ae:da:90:7a:e5:6f:97:
47:c0:24:38:d7:7d:7d:d9:72:96:7b:91:40:5a:cc:
a9:a2:53:d7:b9:56:17:d1:ca:77:9c:58:2b:00:74:
56:ae:de:b9:c8:03:9b:6e:13:49:d9:4b:a4:55:8a:
14:20:72:09:e9:dc:a8:63:cb:d8:1a:ae:68:c2:8e:
c3:5e:94:b1:12:8f:1f:7d:18:e1:66:54:62:82:74:
c9:ad:9c:7e:c2:9a:9d:06:1f:f0:fc:cc:0b:0c:04:
2b:74:53:75:2d:ae:98:37:ba:6b:96:c0:1d:ce:bb:
de:6a:07:36:12:4d:53:8e:88:64:ab:64:7b:a6:11:
49:7a:52:7a:93:b9:10:9e:ef:e4:58:fd:f1:58:d6:
28:25:fd:08:8b:84:87:c3:b2:61:d6:5c:64:a1:29:
eb:d2:59:62:d2:d6:74:8f:63:f4:d2:ac:3f:b9:1c:
31:00:5a:d5:31:48:20:ef:a2:f9:06:04:03:3d:1b:
33:4a:24:17:9e:5f:47:6a:ff:8e:c9:76:ea:c5:c6:
0e:60:2b:77:a0:f7:82:e5:26:77:af:61:6f:8c:e5:
9f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:26:22:D5:A2:B8:2F:C6:3D:0D:57:2E:32:7B:48:09:05:91:41:56
X509v3 Authority Key Identifier:
keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/1AB7C58C57E411EEB143C80EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.250.0/24
114.31.208.0/22
Signature Algorithm: sha256WithRSAEncryption
59:54:bc:2c:c6:f9:24:80:ca:1b:7e:23:ba:5e:a1:b9:34:e1:
ab:14:5a:0c:29:71:f7:b6:4e:b3:e7:01:c9:e0:e4:11:25:81:
09:1b:1c:f6:5a:00:11:6f:89:b0:4d:c6:e3:e3:ff:00:58:1b:
3b:bd:42:e1:f2:7a:2f:ef:bb:a7:bc:f8:e9:fa:4d:56:8d:6b:
4c:11:dd:0f:81:da:5c:f8:de:d5:ec:0f:96:e3:9d:0d:13:26:
50:25:de:a4:ba:fe:72:8e:e5:cb:12:4f:b0:52:dc:08:87:04:
42:94:f8:3d:d8:27:ea:b3:0c:c7:e1:b0:25:46:a5:dd:40:e5:
b4:09:bb:20:5b:7e:eb:db:be:e9:a0:de:16:dc:89:61:fb:b4:
f3:1b:4c:17:dd:55:ec:ce:d8:d4:65:94:86:89:20:9d:51:ec:
e3:17:1b:29:f6:ea:25:32:fe:19:f5:c5:1d:f8:40:3c:6d:41:
a9:10:a1:ae:27:f7:7a:09:18:19:51:78:b0:a2:05:ad:87:1a:
26:34:31:a1:67:7d:a5:63:29:48:61:6d:40:5c:bb:57:9c:39:
1d:34:da:10:36:02:ec:12:d5:5b:06:c9:2a:c4:ba:87:2d:05:
15:9f:77:ee:51:d1:6a:67:b3:51:67:cc:5a:ab:e9:78:63:ab:
e6:39:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:13:17 2026 by rpki-client