
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
File: 68894B22402811EB91B49250C4F9AE02.roa (raw, json)
Hash identifier: liLPy91xdDc1pdMOxAhLDDGEhSWylfhoV6UNE1PovoQ=
Subject key identifier: 00:2C:33:20:F3:E8:A5:A0:71:31:AE:2E:2B:2F:7B:E3:09:F2:6A:46
Certificate issuer: /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial: 07AC
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:54:33 +0000
ROA not before: Sat 06 Dec 2025 21:03:19 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 24068
IP address blocks: 202.133.81.0/24 maxlen: 24
202.133.82.0/24 maxlen: 24
202.133.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1964 (0x7ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Validity
Not Before: Dec 6 21:03:19 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45329-6343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:c8:49:19:f4:8d:a6:3f:2f:8f:6a:62:1c:
90:9e:9d:7e:61:68:24:c6:86:46:ee:75:57:5c:35:
61:9e:bb:8e:c7:35:fd:a0:93:54:75:33:7a:ae:de:
2d:f4:8a:b2:67:4a:e5:c5:e8:c9:50:24:39:6a:be:
80:b1:3a:ba:ec:45:aa:15:13:a1:e1:20:a0:38:15:
75:37:ba:3b:2f:17:0f:c0:a5:04:eb:15:3a:59:c1:
38:c7:2f:2e:3e:57:8a:69:dc:0a:09:d0:18:e4:87:
6a:4d:27:e3:7a:51:46:6e:93:4e:b1:d2:d8:be:03:
39:ae:39:7c:a7:68:58:a3:13:45:7b:51:71:a6:87:
3a:ce:a2:82:80:d8:78:bc:b4:c2:03:8e:be:34:da:
d5:52:ff:eb:1f:9a:75:f9:e6:38:36:b6:83:f8:f1:
08:d8:92:9e:db:44:22:de:98:9c:60:7c:25:eb:8e:
c4:68:95:55:cb:cd:ca:ce:e6:7d:df:2a:48:7c:78:
76:fa:dc:36:c9:81:ab:b3:d2:91:e1:ca:c6:5b:f4:
6e:53:5c:79:54:c9:e2:0e:d5:07:c0:d0:0e:d5:41:
16:4c:16:d8:2a:c8:b0:7f:8d:eb:18:c8:fa:7c:49:
5d:ee:65:ef:9d:e0:8d:be:85:1d:55:66:dc:03:33:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:33:20:F3:E8:A5:A0:71:31:AE:2E:2B:2F:7B:E3:09:F2:6A:46
X509v3 Authority Key Identifier:
keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/68894B22402811EB91B49250C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.133.81.0-202.133.83.255
Signature Algorithm: sha256WithRSAEncryption
34:4f:63:b4:d9:c2:2f:a7:a6:0c:c5:24:fa:97:e9:d9:59:6b:
1e:c0:d2:5b:45:e2:1b:a1:21:99:76:16:75:61:e1:88:4e:8d:
c6:db:23:1a:9c:9e:6f:52:9d:d5:a9:64:60:f3:24:8d:4e:ec:
66:87:1a:c7:2b:59:19:87:cd:06:63:32:15:be:fb:a5:35:ad:
b4:a5:d6:78:91:72:77:0f:d6:41:8e:04:db:e0:0f:3a:3a:01:
4a:b7:40:25:60:54:58:d0:74:4e:36:68:6e:09:f4:7a:69:66:
64:cf:00:08:b2:68:15:f3:72:8f:5e:f7:ca:a2:d6:3c:60:00:
1b:26:8c:91:d3:1f:af:4b:2b:e3:8e:58:51:61:00:c7:ac:e9:
2b:6b:d4:17:c6:87:d8:2d:70:af:f7:c4:fe:bb:e8:92:80:fb:
03:0c:37:dd:ce:0a:9f:c2:2f:dd:c6:ce:da:60:3c:13:25:99:
f2:8e:54:be:19:a9:be:c5:e4:89:a8:ef:d4:c4:0c:5b:d5:11:
3a:59:16:81:0d:ff:06:0e:90:11:25:59:aa:29:e2:69:e6:69:
96:f5:14:be:9c:6d:e9:ae:c4:44:cd:fd:ad:8a:c5:57:dd:93:
3f:ed:48:7e:cc:70:b0:8b:41:f1:46:20:16:74:36:7a:e2:eb:
bc:57:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:19 2026 by rpki-client