
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/8A838A80B16F11F1858066DB5E11F970.roa
File: 8A838A80B16F11F1858066DB5E11F970.roa (raw, json)
Hash identifier: HPm/m2TAZx4s2SN5sld+VijkIFDAziMcICZmEuWrxG8=
Subject key identifier: F0:3F:C1:83:42:F1:08:4F:EF:36:71:61:DC:73:FC:84:DF:04:16:ED
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2D2B
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/8A838A80B16F11F1858066DB5E11F970.roa
Signing time: Wed 16 Sep 2026 01:45:47 +0000
ROA not before: Wed 16 Sep 2026 01:45:47 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152734
IP address blocks: 110.164.146.0/24 maxlen: 24
110.164.184.0/23 maxlen: 23
110.164.186.0/23 maxlen: 23
110.164.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11563 (0x2d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Sep 16 01:45:47 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6aa9f4cb-ef46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:68:e7:20:c0:9b:e8:50:c0:09:73:77:78:
47:30:3f:ea:f1:f2:ec:06:37:fd:bd:b8:3e:de:02:
79:ac:f5:be:e3:69:ac:fe:fc:c2:db:69:f0:09:70:
7b:00:b0:04:a3:d1:91:37:1b:b8:2c:03:af:ab:61:
22:ed:68:d1:dc:c5:4b:a9:4b:90:68:76:9a:11:df:
1e:76:c8:cd:13:ee:1b:b0:2c:f5:af:f1:2e:b1:32:
52:bd:0d:4b:78:0d:40:d2:0a:10:90:b0:dc:a7:1b:
18:57:db:ef:d9:8f:da:51:16:5a:f2:b7:3e:82:88:
c8:3d:28:a5:78:6a:54:8a:75:f8:26:06:9d:89:29:
81:56:9a:63:3b:f0:e2:2e:8e:03:ac:28:3d:bb:00:
fb:6c:db:12:0b:12:8d:8b:63:38:7c:c5:58:73:32:
bb:75:69:52:5b:eb:b9:c6:f0:8f:14:a9:55:ca:81:
32:75:a7:b3:4d:75:2a:5c:2b:9e:bf:34:f9:f0:c0:
bc:b7:57:21:e9:4d:1a:07:28:6b:ae:9e:d2:6d:4e:
65:8b:63:8e:84:9f:ac:54:1c:d8:18:cc:45:9b:73:
b3:66:a0:80:30:f4:5e:74:30:ea:f1:1b:33:cf:ad:
2a:9b:75:85:b4:64:e9:a8:ad:98:82:9c:fc:d8:9b:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:C1:83:42:F1:08:4F:EF:36:71:61:DC:73:FC:84:DF:04:16:ED
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/8A838A80B16F11F1858066DB5E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
110.164.146.0/24
110.164.184.0/22
110.164.203.0/24
Signature Algorithm: sha256WithRSAEncryption
81:34:30:bf:60:eb:0c:9d:d0:12:18:cb:ae:22:8b:91:67:b7:
f8:1c:3a:1e:0d:a3:d3:fa:17:9e:ea:00:95:ae:97:27:5f:3f:
ec:2c:86:7c:79:9e:08:db:5d:3f:b8:bf:c7:3f:9a:04:4e:dd:
1d:a3:f2:b8:d0:3f:11:3a:96:3e:e7:7d:50:e6:fe:cd:34:a4:
d6:ed:40:de:64:89:25:a5:53:b2:e3:f1:77:92:cc:b4:38:26:
9f:48:64:83:8e:41:ae:2f:8b:8e:09:50:24:81:8f:b6:7e:82:
c4:7b:3a:c0:9b:46:67:9b:d5:aa:ed:b4:b2:49:64:9f:04:b8:
ad:91:6b:21:c6:f2:81:f4:da:8d:95:60:8d:6e:a4:a9:bb:69:
4b:fb:4d:51:60:f4:57:1e:d4:ef:02:cc:f7:04:f3:16:1f:91:
32:1c:1b:5f:8c:93:b6:40:5e:b5:68:21:c1:e2:e3:8d:85:9b:
bf:56:7e:ca:54:1a:7b:10:9d:31:30:ba:60:f2:ae:d2:7a:60:
99:bd:65:ab:ab:10:63:15:18:4d:bd:5b:02:43:45:90:bd:dd:
83:8f:90:6c:38:c9:d6:5f:a7:bc:9f:ff:12:b3:96:a5:cd:21:
0c:7b:2d:1d:49:ed:e1:e4:7e:08:6e:00:a4:69:a4:04:5b:8e:
2b:ee:df:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:16 2026 by rpki-client