
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/18AEE1E0B16D11F1BCA2775C5E11F970.roa
File: 18AEE1E0B16D11F1BCA2775C5E11F970.roa (raw, json)
Hash identifier: rZcWPvQoR1WYbXFCJV6P3SynRgFri5JbrqbiuZ4cKOY=
Subject key identifier: 1A:3C:42:75:53:9F:0F:D1:0B:93:9F:A0:76:7F:2D:D1:4B:7C:76:03
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2D13
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/18AEE1E0B16D11F1BCA2775C5E11F970.roa
Signing time: Wed 16 Sep 2026 01:39:34 +0000
ROA not before: Wed 16 Sep 2026 01:39:34 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 55808
IP address blocks: 110.164.135.0/24 maxlen: 24
110.164.146.0/24 maxlen: 24
110.164.203.0/24 maxlen: 24
110.164.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 15:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11539 (0x2d13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Sep 16 01:39:34 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aa9f356-c15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:c3:0e:f0:0e:45:88:d7:52:93:64:3a:87:
e5:0f:95:29:b1:68:11:1a:39:71:41:d8:41:a7:8c:
4c:a3:b2:f5:54:2c:ef:28:b2:4a:ad:c4:e8:ce:9c:
85:71:46:82:09:0d:55:a0:e4:86:81:82:28:47:3c:
cf:75:38:68:b3:b1:3c:42:c4:84:55:a6:b4:6a:8e:
d1:73:39:b5:bd:8c:f6:ad:fc:8e:83:ee:88:0e:38:
4c:0f:f6:3c:43:19:b2:0b:23:ca:a8:87:d3:90:6d:
d4:2e:67:00:14:f9:98:73:d6:6e:63:29:03:0c:b7:
87:44:9a:d2:8a:c4:82:14:75:2e:2b:8d:57:57:30:
79:72:1f:a7:bc:5c:6e:53:70:56:25:72:2f:ff:45:
e8:46:45:d1:5b:c5:1d:0f:4b:eb:20:08:da:d8:1a:
05:47:1f:25:6a:70:f9:4a:e9:2f:97:3e:82:db:76:
ad:3d:5e:b9:45:79:67:80:6c:2f:98:6b:1f:bf:fb:
41:d4:12:0b:a4:aa:e5:e2:88:a5:df:da:3d:04:e6:
d0:6a:aa:0a:aa:3d:0c:67:62:93:63:e4:82:dc:0f:
e9:ff:95:27:a1:4d:f5:8a:ad:2c:26:b2:23:6d:f5:
bb:73:65:dd:c0:a7:9f:09:a8:70:f9:d5:34:30:8b:
78:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3C:42:75:53:9F:0F:D1:0B:93:9F:A0:76:7F:2D:D1:4B:7C:76:03
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/18AEE1E0B16D11F1BCA2775C5E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
110.164.135.0/24
110.164.146.0/24
110.164.203.0/24
110.164.236.0/24
Signature Algorithm: sha256WithRSAEncryption
25:87:f6:ba:5d:19:c7:ee:8b:5b:06:fc:da:fe:1d:d9:62:32:
33:5d:68:f3:ba:d5:6b:e7:5f:79:f1:61:d4:37:07:b5:cc:8b:
51:4e:38:71:5f:55:cd:68:0e:e0:2e:85:c9:7b:8b:9d:d6:5d:
80:2e:b1:4e:96:d2:e4:f3:35:84:aa:81:5d:8c:43:97:5c:f5:
e0:e3:01:96:8a:ba:a8:89:49:51:73:dc:66:35:7e:f8:68:97:
43:d8:49:78:88:6e:ab:15:10:06:4e:bf:e0:66:93:a6:7b:8a:
c5:b7:4c:5a:c9:de:3a:c1:75:dc:6f:c2:35:22:67:26:27:33:
9c:f7:72:53:ae:5d:f2:79:0d:f9:d6:52:02:bb:f5:35:f4:d3:
2a:b3:95:e9:9b:73:a5:8f:32:3d:7e:2b:61:93:63:0f:65:bd:
48:20:bf:5e:e8:45:e9:48:5d:e2:b5:3c:e4:f5:86:2b:5c:4c:
8a:91:02:0b:b3:5f:ac:59:90:d2:d4:5c:57:e8:8c:65:31:2e:
20:18:a5:64:51:95:f5:46:7a:b8:01:d3:88:5a:1d:8a:b2:73:
9d:53:55:15:db:37:46:af:54:df:1f:73:40:33:e1:63:d7:c5:
35:ad:8d:a7:fd:82:c4:54:01:8c:90:98:2d:30:4c:b4:65:92:
87:cf:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:22:36 2026 by rpki-client