
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/8A2C40D474B911F08BA0CD37C4F9AE02.roa
File: 8A2C40D474B911F08BA0CD37C4F9AE02.roa (raw, json)
Hash identifier: x1cJvjh7zdmg7T/0iUEkEcxMiM7lfkwPcQV8vAeDdfc=
Subject key identifier: BC:F6:18:CF:5C:F3:3E:DE:2E:A3:52:C3:82:EE:3C:9E:55:09:1C:D0
Certificate issuer: /CN=A911BE01/serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
Certificate serial: 70
Authority key identifier: EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/8A2C40D474B911F08BA0CD37C4F9AE02.roa
Signing time: Sun 01 Mar 2026 07:13:35 +0000
ROA not before: Sat 09 Aug 2025 00:43:14 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 151660
IP address blocks: 210.56.150.0/23 maxlen: 24
2402:21a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl
rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BE01, serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721
Validity
Not Before: Aug 9 00:43:14 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a3e71e-2137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:33:35:84:fe:f8:eb:98:3b:19:f8:9e:d9:
92:b3:af:93:f3:66:8c:42:14:e2:10:d2:42:bb:f5:
40:49:e6:a3:f6:27:ae:df:80:bf:93:59:db:42:1d:
51:ad:bd:e1:90:07:f4:d1:c9:f5:81:38:92:e6:97:
55:fe:7f:97:b6:d4:ee:c6:de:70:25:73:22:31:d2:
34:5a:42:62:b3:71:bd:4a:18:fd:c6:ae:fe:06:3b:
f9:a0:a4:d3:27:56:b5:e7:4a:a5:8a:48:43:1b:ac:
d9:76:8b:be:5a:9b:78:65:fe:0b:d7:d1:70:11:ac:
8c:d1:33:bb:91:95:f8:52:0d:1f:59:a3:36:6c:7f:
f0:e8:06:42:ce:ac:15:d6:e1:6d:86:8e:3a:02:11:
7d:79:ed:e9:8b:c6:88:fa:4d:f0:4a:d8:df:82:4a:
23:f1:a1:c5:33:a0:46:f4:3b:d8:4b:10:42:3f:95:
40:98:d2:cb:1a:59:2d:a3:7b:be:33:dd:e2:8c:06:
18:98:9f:b0:06:7a:54:a1:32:2d:10:c2:f5:99:da:
03:bf:a0:7d:4b:a7:a7:5f:27:a8:69:10:76:10:05:
37:61:da:ba:df:8d:9e:be:9f:f9:4b:a4:ce:eb:3c:
99:57:4d:e6:72:cd:bf:27:6f:f3:15:bb:82:96:a6:
dd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F6:18:CF:5C:F3:3E:DE:2E:A3:52:C3:82:EE:3C:9E:55:09:1C:D0
X509v3 Authority Key Identifier:
keyid:EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/8A2C40D474B911F08BA0CD37C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.56.150.0/23
IPv6:
2402:21a0::/32
Signature Algorithm: sha256WithRSAEncryption
a3:b4:a8:c0:1a:a2:85:c7:a1:51:69:b5:0e:b6:4d:b8:fe:3d:
cb:09:99:50:c5:7c:64:47:1b:18:66:22:75:df:c3:10:f7:9f:
d6:9c:bd:a8:3d:b5:9c:f0:64:e0:fa:48:b5:f9:a4:9c:ec:b6:
45:c6:b6:ac:61:31:43:a6:9a:05:0a:5f:81:79:e0:99:ef:77:
10:22:7d:e0:70:ac:b9:36:20:22:07:ac:c2:14:17:24:3c:3d:
b0:ad:6f:68:1c:45:a2:54:8d:48:72:d6:0d:ab:fc:83:2f:ea:
5b:b4:d3:76:b3:1e:44:6a:06:1d:6c:7e:fd:84:66:f7:d1:3a:
41:51:ad:e2:d9:1b:95:59:1a:70:35:c3:95:82:bb:c1:01:92:
4a:0f:69:63:cc:ec:8d:df:75:47:ed:cb:5a:07:11:e3:11:d8:
ab:db:fe:9e:bf:c5:3e:a0:35:9b:76:bd:79:09:a3:28:72:44:
80:8b:4e:1e:f5:6a:bc:ea:dd:d7:73:25:b8:d5:b8:41:06:b7:
de:00:67:8e:e3:27:29:18:c0:66:35:72:21:02:51:65:84:38:
fe:7d:83:49:22:19:16:61:6e:73:39:2c:48:8f:78:a6:d4:f1:
8a:64:38:6d:87:62:8e:f7:ef:59:4a:1a:4d:66:09:71:63:64:
57:42:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:50 2026 by rpki-client