
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa
File: 955A10B4D61111E999D7033CC4F9AE02.roa (raw, json)
Hash identifier: k5WUfjufMtiaq8EACsvsn18TEnqesW/PihKGnomX1TE=
Subject key identifier: D6:4F:C1:1C:9F:B5:6B:1D:1C:D9:4B:7B:68:DB:26:D6:B2:6D:75:79
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2BEC
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:23:42 +0000
ROA not before: Fri 02 Jan 2026 16:13:56 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 9551
IP address blocks: 49.231.232.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11244 (0x2bec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 2 16:13:56 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4923e-b526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:37:6c:d1:73:39:a4:5a:85:ca:c9:64:b2:
3c:0c:17:27:f0:f8:01:e5:96:67:89:b9:2d:48:23:
39:8d:54:52:13:00:59:5a:57:b1:a4:fa:ab:dc:13:
07:d2:43:5b:c6:1f:89:7b:01:38:0b:38:53:c8:19:
8a:0c:6c:ba:fc:7f:23:65:76:e7:1f:af:ed:fc:18:
35:9e:cf:22:e2:31:8e:8e:90:fb:22:d1:ad:88:50:
bd:28:9b:5a:d9:5b:1c:d7:2e:b4:7b:a8:5a:b3:03:
a0:9a:fe:7d:74:bd:d7:9d:bd:2c:5b:a5:9c:e0:43:
fe:41:40:b3:61:bb:fe:fb:15:2e:0f:a7:d5:32:9d:
37:62:d1:ef:96:ed:83:76:88:45:85:ba:ac:13:ee:
54:db:52:5c:97:68:9d:c3:98:fa:f8:2d:b3:e7:e5:
e4:55:ef:2b:62:79:97:34:d2:ac:c0:27:07:60:27:
a8:31:b1:ad:95:46:0b:f7:7d:b5:90:8e:31:9c:25:
e1:fe:cb:3c:a3:d3:23:48:53:7e:cf:11:a3:c1:63:
75:7e:c7:33:d9:84:7a:dd:f1:68:94:6e:b7:60:11:
b7:f0:ef:5a:12:83:38:31:e3:b6:2e:d0:21:13:91:
b8:ea:b9:59:18:a0:4e:d4:c2:3d:c8:f1:8e:e7:e1:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:C1:1C:9F:B5:6B:1D:1C:D9:4B:7B:68:DB:26:D6:B2:6D:75:79
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/955A10B4D61111E999D7033CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.231.232.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:97:ba:6f:a6:b0:a4:95:22:fd:2f:d8:0f:cf:3d:7f:bc:20:
ff:bc:8b:bd:c7:a9:53:1b:26:e3:60:76:95:34:98:81:6c:a4:
05:c3:48:20:c4:39:d3:19:40:af:08:58:20:0a:95:39:f2:7a:
61:d3:54:c8:24:06:6a:f3:a7:3e:8f:62:62:0c:1c:e2:5a:10:
6f:89:be:fa:e3:6f:52:b0:12:f3:d6:df:c8:9a:59:b2:76:51:
8e:bc:b1:ad:18:b3:2b:05:3f:69:81:75:d2:9c:3a:d9:1e:18:
b4:64:43:36:b9:ec:25:4a:33:44:93:87:25:d1:0a:1d:b2:0d:
16:6d:f4:ac:70:cf:a3:53:6f:f3:1a:39:b4:0c:40:19:e9:c1:
44:9d:05:f2:2f:0b:9b:ee:bf:62:e8:6d:25:f6:e6:4c:95:13:
c9:fb:38:b3:11:5c:b2:ce:b8:22:db:aa:53:7b:2f:f4:28:93:
63:3a:42:b4:99:c5:30:5e:69:a6:08:6a:0b:a9:b4:63:50:0f:
85:66:10:e5:9e:ba:ba:0d:ed:da:6a:01:aa:3e:1f:82:1d:62:
37:55:93:35:f7:0c:b4:f3:43:50:bd:2f:cc:e4:94:0d:53:6a:
95:a2:d3:61:0b:9a:ee:f9:bf:5b:0e:b0:29:8d:3d:20:09:44:
f2:1b:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:54:38 2026 by rpki-client