
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/20313836639E11ECA24A0411C4F9AE02.roa
File: 20313836639E11ECA24A0411C4F9AE02.roa (raw, json)
Hash identifier: 52cdHjvrEl/AEQax5U+EBppBhjw50cTtpOuMNyEIXwM=
Subject key identifier: F9:3A:E4:FE:36:E3:62:D2:CC:E2:B5:29:4E:2B:D2:ED:6E:72:6F:3D
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2BE4
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/20313836639E11ECA24A0411C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:23:36 +0000
ROA not before: Fri 02 Jan 2026 16:13:49 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4827
IP address blocks: 58.64.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11236 (0x2be4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:49 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a49238-ac76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:18:8d:c0:72:45:f9:10:97:a0:c5:14:c4:
12:75:0b:73:40:3f:1d:f5:cc:53:e6:0c:19:2f:52:
d6:82:a9:c0:3a:c6:4c:63:f5:c1:16:42:b1:11:51:
5b:97:78:72:53:86:05:bb:7b:71:dd:48:79:89:c1:
4f:cc:80:8f:16:1e:13:10:f7:b8:62:b6:c8:be:30:
38:4d:8d:65:73:53:21:22:42:8a:74:10:d5:fa:d4:
a6:05:f8:39:77:70:d0:12:f1:97:c6:7b:c3:eb:4f:
f3:be:46:02:58:e9:e4:19:ce:fe:53:a3:34:77:de:
f2:ba:7a:91:c8:25:db:f1:f5:7a:c8:cf:a7:b9:40:
ef:86:d3:b4:51:11:54:69:a3:08:e6:4a:8a:2a:c5:
b7:8f:c3:7b:e5:2f:77:a0:66:ac:d8:f3:a6:8c:e1:
b2:a5:31:7d:bd:0a:13:00:97:bd:ff:9e:f8:05:c9:
bc:fb:fe:f1:f1:4a:12:25:26:4e:fb:bf:70:a6:6a:
82:53:57:c6:28:24:b4:92:c0:e6:34:ad:bc:cb:df:
c5:e9:96:34:cd:ae:22:3e:2a:d5:85:8d:82:a9:8e:
74:3b:63:87:32:8b:fd:d8:1f:07:1d:38:81:83:92:
50:8f:24:a6:46:69:8b:0b:da:2a:26:b2:54:5a:14:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3A:E4:FE:36:E3:62:D2:CC:E2:B5:29:4E:2B:D2:ED:6E:72:6F:3D
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/20313836639E11ECA24A0411C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.64.34.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:16:6a:ec:4e:4a:2a:a1:58:cf:14:95:a8:fa:f4:e4:45:39:
af:81:df:d6:c1:85:9e:46:1f:e0:7a:8c:dd:2a:d0:0b:c0:2d:
14:ad:fc:7e:fe:70:9e:98:2b:a6:11:5b:fb:2d:8b:51:4d:a6:
0f:4c:29:ff:f9:88:4a:47:43:da:b4:01:01:c5:0a:61:79:bd:
19:9c:c2:ae:bd:ce:c8:a7:ab:35:9e:85:9d:59:25:49:47:f5:
d1:d3:9f:1f:63:85:8a:ff:30:f8:97:88:b5:0a:58:90:ef:e6:
ff:71:6c:86:77:0c:8f:f5:c1:fb:6e:8a:a9:0a:17:d1:95:c0:
4a:4f:65:01:b5:06:60:f3:02:cc:dc:1c:cb:98:34:7f:3a:56:
ae:59:37:a6:2f:30:9b:25:fe:9f:b6:26:d2:43:db:79:c0:79:
6b:19:7a:3d:56:4b:25:32:bb:39:63:09:0d:12:a6:4a:50:9e:
92:33:e1:ec:e1:b4:81:22:68:79:87:cc:42:30:5b:c4:63:06:
90:e6:13:22:02:79:41:26:c6:1e:27:d7:ef:d2:a3:3b:47:33:
04:56:97:a7:b3:3d:32:5b:1a:b0:f6:34:f7:76:9b:f6:8e:60:
36:fc:89:bd:0e:d6:17:0b:e0:fa:5e:54:00:fc:3c:3f:e2:3c:
83:7a:2a:63
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwMTAyMTYxMzQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTIzOC1hYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlfoYjcByRfkQl6DFFMQSdQtzQD8d9cxT5gwZL1LWgqnAOsZMY/XBFkKxEVFb
l3hyU4YFu3tx3Uh5icFPzICPFh4TEPe4YrbIvjA4TY1lc1MhIkKKdBDV+tSmBfg5
d3DQEvGXxnvD60/zvkYCWOnkGc7+U6M0d97yunqRyCXb8fV6yM+nuUDvhtO0URFU
aaMI5kqKKsW3j8N75S93oGas2POmjOGypTF9vQoTAJe9/574Bcm8+/7x8UoSJSZO
+79wpmqCU1fGKCS0ksDmNK28y9/F6ZY0za4iPirVhY2CqY50O2OHMov92B8HHTiB
g5JQjySmRmmLC9oqJrJUWhSc7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPk65P42
42LSzOK1KU4r0u1ucm89MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvMjAzMTM4MzY2
MzlFMTFFQ0EyNEEwNDExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAOkAiMA0GCSqGSIb3DQEBCwUAA4IBAQChFmrsTkoqoVjPFJWo+vTk
RTmvgd/WwYWeRh/geozdKtALwC0Urfx+/nCemCumEVv7LYtRTaYPTCn/+YhKR0Pa
tAEBxQpheb0ZnMKuvc7Ip6s1noWdWSVJR/XR058fY4WK/zD4l4i1CliQ7+b/cWyG
dwyP9cH7boqpChfRlcBKT2UBtQZg8wLM3BzLmDR/OlauWTemLzCbJf6ftibSQ9t5
wHlrGXo9VkslMrs5YwkNEqZKUJ6SM+Hs4bSBImh5h8xCMFvEYwaQ5hMiAnlBJsYe
J9fv0qM7RzMEVpensz0yWxqw9jT3dpv2jmA2/Im9DtYXC+D6XlQA/Dw/4jyDeipj
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:34 2026 by rpki-client