
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/BB3B63A83A7011F1B365A8EDB1833773.roa
File: BB3B63A83A7011F1B365A8EDB1833773.roa (raw, json)
Hash identifier: rrNm2V87UUk3ZtAA1EOIUlvBXqSc+wZlGyp0mTMptsA=
Subject key identifier: 37:3C:D1:BF:B0:57:4B:80:D1:77:70:38:CB:2B:4C:78:BC:DF:F9:B4
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0DE5
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/BB3B63A83A7011F1B365A8EDB1833773.roa
Signing time: Fri 17 Apr 2026 15:25:22 +0000
ROA not before: Fri 17 Apr 2026 15:25:22 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 19551
IP address blocks: 58.27.56.0/24 maxlen: 24
219.93.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 18:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3557 (0xde5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Apr 17 15:25:22 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69e250e2-ab53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cb:d1:ff:56:61:30:53:2c:1b:70:0b:77:d7:
a0:bb:d4:60:84:1e:bc:15:af:b1:bc:c2:25:07:93:
17:6c:68:e3:dc:a1:74:df:99:ad:a9:06:82:ce:88:
ad:64:69:51:23:34:f4:fd:fe:cb:fb:53:12:37:de:
06:49:fd:c1:bb:d6:e2:3e:b3:dd:be:fe:1d:45:45:
b4:3a:bc:03:a2:00:60:53:c4:09:eb:74:23:13:d9:
b9:9d:25:fb:ec:a9:3e:e0:8d:74:3d:4b:19:00:c0:
d8:0e:1f:70:88:47:18:69:34:b1:63:23:b0:00:27:
30:0e:b3:ab:0d:a0:ae:21:a7:75:7d:a0:c9:99:3c:
ae:b7:08:08:3d:f6:5b:16:40:cf:c1:a6:7b:57:52:
d4:83:a9:46:24:56:9e:d9:b2:67:c6:64:4d:26:e2:
a8:25:d5:fb:55:fc:0d:53:ea:a1:c8:dc:a2:b0:bd:
f1:7a:25:0d:82:fd:b3:de:13:f6:21:df:93:e0:41:
a1:d2:4e:3f:35:6c:25:67:be:60:58:50:e9:6c:00:
7f:ad:48:3b:25:8e:72:d3:85:fc:cc:d1:32:75:01:
ac:d7:5e:94:f8:c3:a8:0c:08:56:30:4b:84:e1:11:
68:b0:84:89:5b:0f:35:07:f0:ff:50:8a:13:1b:27:
eb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:D1:BF:B0:57:4B:80:D1:77:70:38:CB:2B:4C:78:BC:DF:F9:B4
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/BB3B63A83A7011F1B365A8EDB1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
58.27.56.0/24
219.93.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ad:0a:34:b5:ef:08:73:05:86:f3:ce:92:fd:9c:7e:34:7e:
12:1b:7e:8a:a6:b3:c9:3d:23:ad:f1:e3:ac:9f:e6:d5:0d:27:
4d:31:98:49:33:90:9c:ed:cf:b7:d9:b4:85:d2:ae:ff:ed:be:
fc:44:36:6f:ae:fe:aa:2f:b9:2e:d0:ae:ff:19:77:c8:27:33:
78:85:4d:b6:0e:8e:a7:8d:1e:92:7e:7a:c0:56:f0:35:55:18:
77:20:13:6a:22:57:6a:72:42:8b:73:b5:47:03:b7:63:7f:d1:
9f:59:bb:69:9c:1f:3e:71:04:7b:5a:60:22:06:67:2a:1d:6d:
d1:b0:6e:c9:a4:88:17:65:01:2a:27:9f:b1:d3:d4:b0:e8:5b:
4e:af:f7:bd:83:71:24:ac:b2:94:4b:3c:c2:98:a4:5f:95:65:
ce:90:e8:58:29:98:3e:57:33:1c:3f:d6:b2:75:08:75:16:23:
7e:76:3e:8a:0b:88:f9:7c:fe:63:95:11:ff:e2:c2:90:5a:21:
97:3f:7c:5b:e6:2a:48:bc:71:ee:d0:e2:0a:b0:71:d3:2b:6a:
ed:72:ac:70:ab:57:e3:fb:1c:21:56:32:1e:1f:0e:24:5c:50:
69:8e:a9:c7:e5:fb:6f:7d:21:e9:d3:85:b5:55:27:2f:bf:cd:
0c:96:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:39 2026 by rpki-client