
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/A537B070BA4B11F0BD639513C4F9AE02.roa
File: A537B070BA4B11F0BD639513C4F9AE02.roa (raw, json)
Hash identifier: zfUTfDN6MNZwyyQaYTs7HfwVxHWJRQ0R4nx1a49wJN0=
Subject key identifier: 03:05:BA:71:4E:F2:C6:AD:8B:84:4D:99:48:55:1F:EA:58:AD:FF:A5
Certificate issuer: /CN=A911AF72/serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Certificate serial: 56
Authority key identifier: 8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/A537B070BA4B11F0BD639513C4F9AE02.roa
Signing time: Sun 01 Mar 2026 06:19:12 +0000
ROA not before: Wed 05 Nov 2025 13:30:51 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 142647
IP address blocks: 45.115.42.0/24 maxlen: 24
45.115.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AF72, serialNumber=8A51EA58C45C2F4460E3AB13EB6A6745465DAF8B
Validity
Not Before: Nov 5 13:30:51 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a3da60-5263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:e8:da:f5:68:11:f9:5d:9b:d8:c1:b1:de:
78:07:22:9a:2e:9a:7d:48:2c:e2:29:b3:31:ee:6c:
d3:a6:83:70:e6:63:eb:34:a1:de:56:b6:06:92:47:
79:72:52:1f:8f:5f:29:e6:f0:52:76:7d:dc:8d:f0:
63:bd:c8:6e:2b:8a:12:a7:9a:dc:d2:fd:61:b4:08:
e8:80:2f:d9:d8:56:e1:80:af:77:a8:ca:91:5a:36:
f1:fd:71:7b:c0:4f:da:54:5d:53:36:f7:26:fb:bf:
0c:1e:45:66:09:ef:0d:0b:3c:7b:60:0f:8f:99:8a:
9e:04:d3:7d:a3:b3:18:75:19:7c:6d:1d:61:f9:84:
9f:fe:7b:45:cd:c2:b0:f2:a1:7e:02:b6:2f:9f:5d:
a7:05:aa:b4:d3:e2:f4:2f:79:ab:1d:23:66:87:e1:
c3:15:05:13:23:3a:f3:6b:82:a7:b9:d8:25:d3:6c:
96:44:65:78:df:b7:59:56:0e:28:d1:4a:5c:42:f6:
7c:87:8d:dc:11:63:30:51:cc:be:27:53:d2:02:f4:
a3:c5:3a:f0:dd:cc:9f:ff:35:04:9f:b5:b6:95:77:
bd:4a:98:99:5d:fd:bf:6a:0c:c4:8c:dd:78:3a:fc:
f8:80:06:fe:31:d5:52:df:00:d6:32:83:44:9e:8b:
ff:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:05:BA:71:4E:F2:C6:AD:8B:84:4D:99:48:55:1F:EA:58:AD:FF:A5
X509v3 Authority Key Identifier:
keyid:8A:51:EA:58:C4:5C:2F:44:60:E3:AB:13:EB:6A:67:45:46:5D:AF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/ilHqWMRcL0Rg46sT62pnRUZdr4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ilHqWMRcL0Rg46sT62pnRUZdr4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AF72/809CC4BA97AC11F0915E4E28C4F9AE02/A537B070BA4B11F0BD639513C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.42.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:47:00:1c:93:c2:9d:24:7a:01:ea:28:2c:1e:8e:2d:d5:86:
5e:ed:08:da:86:29:cc:18:fb:4c:dd:a4:61:0f:4e:4c:7c:81:
a4:f5:a7:6a:bb:04:59:27:99:4b:8f:93:bc:ca:06:52:a6:51:
ee:43:9b:a6:19:6f:2a:28:96:cf:42:ba:ee:72:77:36:d3:c0:
f9:f7:4c:17:af:e4:ca:d0:fb:a9:c8:d7:47:ca:1c:4b:bd:9f:
e4:98:62:e0:d5:72:ad:ea:3d:63:3d:65:20:3e:b4:c8:cd:b2:
61:99:e8:46:d6:4d:64:61:0f:82:4a:60:19:fe:1b:65:cb:0b:
c9:c6:36:bb:83:aa:77:9c:ae:89:f9:25:bb:9e:7d:99:8c:b2:
94:00:01:e6:9f:ab:36:be:9a:c0:04:cc:e4:1b:d4:85:fa:d9:
ff:91:86:3d:79:e5:2e:59:4b:f3:9c:73:21:c0:23:67:34:73:
b6:6e:94:66:be:fd:db:b3:11:13:ac:b2:e4:06:b6:f0:3e:d2:
64:16:62:93:b1:7b:ed:5f:b7:25:9e:74:5d:6a:81:52:67:a4:
73:f4:4f:4d:be:54:67:5b:bf:1e:34:f3:fd:43:78:53:68:89:
43:47:07:ec:25:7a:1d:80:ad:90:e3:a3:22:ed:78:5c:15:cc:
cb:fc:ac:d4
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QUY3MjExMC8GA1UEBRMoOEE1MUVBNThDNDVDMkY0NDYwRTNBQjEzRUI2QTY3NDU0
NjVEQUY4QjAeFw0yNTExMDUxMzMwNTFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkYTYwLTUyNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXo+ja9WgR+V2b2MGx3ngHIpoumn1ILOIpszHubNOmg3DmY+s0od5WtgaSR3ly
Uh+PXynm8FJ2fdyN8GO9yG4rihKnmtzS/WG0COiAL9nYVuGAr3eoypFaNvH9cXvA
T9pUXVM29yb7vwweRWYJ7w0LPHtgD4+Zip4E032jsxh1GXxtHWH5hJ/+e0XNwrDy
oX4Cti+fXacFqrTT4vQveasdI2aH4cMVBRMjOvNrgqe52CXTbJZEZXjft1lWDijR
SlxC9nyHjdwRYzBRzL4nU9IC9KPFOvDdzJ//NQSftbaVd71KmJld/b9qDMSM3Xg6
/PiABv4x1VLfANYyg0Sei/+BAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUAwW6cU7y
xq2LhE2ZSFUf6lit/6UwHwYDVR0jBBgwFoAUilHqWMRcL0Rg46sT62pnRUZdr4sw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBRjcyLzgwOUNDNEJBOTdB
QzExRjA5MTVFNEUyOEM0RjlBRTAyL2lsSHFXTVJjTDBSZzQ2c1Q2MnBuUlVaZHI0
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWxIcVdNUmNMMFJnNDZzVDYycG5SVVpkcjRzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUY3Mi84MDlDQzRCQTk3QUMxMUYwOTE1RTRFMjhDNEY5QUUwMi9BNTM3QjA3MEJB
NEIxMUYwQkQ2Mzk1MTNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAEtcyowDQYJKoZIhvcNAQELBQADggEBAG5HAByTwp0kegHqKCweji3V
hl7tCNqGKcwY+0zdpGEPTkx8gaT1p2q7BFknmUuPk7zKBlKmUe5Dm6YZbyools9C
uu5ydzbTwPn3TBev5MrQ+6nI10fKHEu9n+SYYuDVcq3qPWM9ZSA+tMjNsmGZ6EbW
TWRhD4JKYBn+G2XLC8nGNruDqnecron5JbuefZmMspQAAeafqza+msAEzOQb1IX6
2f+Rhj155S5ZS/OccyHAI2c0c7ZulGa+/duzEROssuQGtvA+0mQWYpOxe+1ftyWe
dF1qgVJnpHP0T02+VGdbvx408/1DeFNoiUNHB+wleh2ArZDjoyLteFwVzMv8rNQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:24 2026 by rpki-client