
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C6B95F6D85F11E991811862C4F9AE02.roa
File: 1C6B95F6D85F11E991811862C4F9AE02.roa (raw, json)
Hash identifier: zCWVdm7YWBX1GlnzKXHTJLpEYwXfnX6pxZbTc5/yrJM=
Subject key identifier: A0:0A:7A:96:40:E7:D1:86:09:57:30:F1:1D:7B:4F:E4:D2:14:0A:18
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2BB9
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C6B95F6D85F11E991811862C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:22:58 +0000
ROA not before: Fri 02 Jan 2026 16:13:03 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 136040
IP address blocks: 58.64.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11193 (0x2bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:03 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a49212-680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:1f:f9:6d:0e:73:be:49:12:2b:a8:49:a2:
99:68:66:8c:01:df:9e:b1:6f:50:0c:e7:90:65:af:
65:4b:f2:53:24:87:0a:59:5e:ac:a3:fb:f2:7c:e3:
d9:47:ce:37:5c:6e:31:54:3c:39:27:52:96:c3:01:
ca:8a:28:3f:06:b4:5f:c0:43:17:c9:c1:95:4f:15:
2d:1d:9a:c1:1e:88:62:96:f4:55:b2:86:9c:03:bc:
63:4a:83:82:af:3f:95:95:5b:72:88:23:ca:45:de:
62:bb:de:1b:2b:eb:73:da:5a:a4:4c:80:64:65:16:
71:3f:15:13:c5:b7:f8:ec:79:d4:ab:8c:dd:ca:36:
fe:38:c2:08:da:36:66:1c:21:b4:b9:15:11:86:42:
78:a1:52:4a:c3:81:f9:2e:c9:b5:1c:99:74:f6:9f:
06:b3:93:9f:fe:30:3c:a0:39:c8:60:ad:58:5b:55:
05:1c:fc:9e:e6:23:f8:f1:42:41:0b:e1:f2:8d:c5:
99:9c:9e:23:8d:f3:0c:eb:38:7d:1a:d4:20:06:8b:
4d:6b:67:86:8e:cc:70:e6:c3:ca:35:6d:04:4a:74:
73:36:cd:4d:73:0d:8b:f3:78:4c:14:3c:8a:ef:a6:
63:14:c9:e9:2d:ae:18:a0:83:92:db:bf:4a:d0:1b:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:7A:96:40:E7:D1:86:09:57:30:F1:1D:7B:4F:E4:D2:14:0A:18
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/1C6B95F6D85F11E991811862C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.64.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b2:67:24:fa:49:f1:cd:10:97:31:31:b0:c9:78:5f:70:7e:
f5:57:83:d1:2a:d9:a6:45:6e:b5:63:65:9e:f0:04:91:d5:eb:
b9:ff:28:86:de:99:51:a5:69:bc:22:3a:3a:a3:bf:84:3f:46:
ef:fb:0f:93:08:4e:55:2c:c7:bf:35:0c:d8:24:fd:b5:9f:ff:
a4:c2:07:9b:67:d3:d9:ae:e0:5b:c9:da:15:a0:bc:f6:e1:25:
8b:0e:68:de:25:66:88:39:83:c8:0c:26:2a:be:56:31:cb:78:
67:d5:ad:26:cf:1c:f9:6c:f7:96:4c:1a:cc:a9:ab:59:38:e6:
fc:80:8c:bd:8f:c3:d8:42:ee:2d:7b:2b:89:6e:71:ba:72:41:
85:72:b9:43:ff:5b:65:ab:17:24:99:f1:fd:f4:56:42:70:f4:
66:7f:82:4e:18:39:30:17:c3:5c:73:83:b0:70:c5:fe:a1:69:
cb:c6:3a:e1:eb:23:50:72:1a:0d:09:c3:a6:19:88:65:36:59:
52:d6:1e:b8:d3:aa:fd:77:77:71:7a:fc:bf:d1:d2:48:67:65:
a1:5d:88:78:e2:76:e9:be:94:fb:2e:1e:f9:ac:5e:57:f6:69:
f3:b9:71:85:c9:99:47:77:df:de:d3:0a:a1:14:e8:77:a8:c8:
f0:d1:d2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:43 2026 by rpki-client