
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/87421F34DA3E11F09B1225578ED3641D.roa
File: 87421F34DA3E11F09B1225578ED3641D.roa (raw, json)
Hash identifier: UtPJM8H0Jn4XRTUJzDBFAqLrKI7+GYkS60Ss/BvP398=
Subject key identifier: F8:33:54:18:84:FD:ED:FF:07:00:DE:DB:70:AF:DB:BC:F7:30:19:12
Certificate issuer: /CN=A911CC61/serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D
Certificate serial: 32
Authority key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/87421F34DA3E11F09B1225578ED3641D.roa
Signing time: Sun 01 Mar 2026 05:55:03 +0000
ROA not before: Tue 03 Feb 2026 08:26:07 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 64050
IP address blocks: 43.226.17.0/24 maxlen: 24
43.226.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl
rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D
Validity
Not Before: Feb 3 08:26:07 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a3d4b7-5c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:74:7a:9d:e7:40:6d:a4:8b:76:5b:c5:0f:
63:77:2c:84:be:74:54:58:7a:b8:e4:92:45:78:e4:
1a:a4:97:60:00:4d:ef:5f:f9:cf:06:c2:ce:5d:0f:
d2:18:43:48:59:c2:16:de:53:37:8e:a4:8a:39:be:
d5:4c:89:c1:b0:06:6d:68:16:44:0a:0a:4f:2f:ec:
0a:86:a4:ff:bb:03:6f:86:73:81:f4:6a:d5:f0:a4:
e9:b7:79:e7:81:a2:8b:74:ce:f2:41:cc:d5:a3:eb:
48:45:0e:e8:35:b0:f4:75:71:e7:09:80:11:e3:31:
8a:39:bf:e1:92:e2:cf:10:9a:03:99:01:4b:1c:fa:
00:c5:0a:31:14:91:31:08:b3:c2:b3:51:c9:38:06:
a7:82:2d:b1:0f:c4:ad:08:b7:92:07:4e:3d:bf:bb:
28:84:f1:e2:68:e1:55:e1:ab:2d:6f:37:a7:9b:40:
aa:12:0f:b3:85:fa:21:24:1a:4c:6d:48:0a:c7:50:
f3:18:1e:e5:2c:3d:40:b9:fc:24:d1:57:da:09:ed:
58:62:c6:0a:d0:58:fb:63:94:c0:95:e3:07:b5:53:
89:5f:25:23:fa:32:03:a1:37:93:b7:dd:1c:8c:4f:
d0:e6:27:5c:9a:d9:71:3e:6a:6a:5e:52:5f:89:c7:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:33:54:18:84:FD:ED:FF:07:00:DE:DB:70:AF:DB:BC:F7:30:19:12
X509v3 Authority Key Identifier:
keyid:04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/87421F34DA3E11F09B1225578ED3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
43.226.17.0-43.226.18.255
Signature Algorithm: sha256WithRSAEncryption
17:12:62:7c:e2:62:f3:c9:35:23:25:1f:be:47:27:77:43:93:
15:77:27:3e:07:05:dd:9a:83:ad:b5:01:17:f9:dc:c3:d6:b4:
98:51:40:2e:c9:12:42:09:33:9c:07:78:02:82:60:3c:94:07:
2b:d0:3b:56:31:ba:9f:60:fb:d5:9c:fe:bd:f9:34:a9:b9:f5:
0c:c9:72:74:1f:cc:50:df:e5:f7:5c:62:8f:3e:53:8b:a3:f6:
f1:7f:93:84:00:33:2b:d7:ed:bb:42:e7:1f:0f:9f:d1:94:3c:
bd:1e:79:3d:02:dd:44:c1:e2:63:84:26:64:15:1a:7a:a5:2f:
b8:98:e6:b5:85:64:b9:0b:d3:30:8e:ee:36:cb:ec:e8:e2:70:
04:c6:28:3c:68:4d:1f:89:ef:94:60:23:1d:70:c3:c6:8d:10:
0a:22:51:8d:6e:9a:16:67:d0:0b:7e:ee:c0:d7:16:78:57:31:
a2:a6:88:68:10:4c:f9:6c:49:00:7f:48:25:4c:bc:94:2f:f5:
31:a1:93:55:7e:ed:d7:cd:2c:70:3c:27:26:7e:d0:d7:80:4e:
04:f8:d7:4c:68:c2:2a:00:c4:bd:36:29:7f:68:4d:05:08:b6:
95:8b:38:b2:a3:dd:41:01:2d:60:f1:56:72:3f:0b:c0:29:2d:
c1:65:9e:76
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Q0M2MTExMC8GA1UEBRMoMDQ3NDkzN0U3OUE5RDY3MzM1M0VBQkQ4MkM0Qjg0MjRC
NkM2ODMwRDAeFw0yNjAyMDMwODI2MDdaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkNGI3LTVjODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDagHR6nedAbaSLdlvFD2N3LIS+dFRYerjkkkV45Bqkl2AATe9f+c8Gws5dD9IY
Q0hZwhbeUzeOpIo5vtVMicGwBm1oFkQKCk8v7AqGpP+7A2+Gc4H0atXwpOm3eeeB
oot0zvJBzNWj60hFDug1sPR1cecJgBHjMYo5v+GS4s8QmgOZAUsc+gDFCjEUkTEI
s8KzUck4BqeCLbEPxK0It5IHTj2/uyiE8eJo4VXhqy1vN6ebQKoSD7OF+iEkGkxt
SArHUPMYHuUsPUC5/CTRV9oJ7VhixgrQWPtjlMCV4we1U4lfJSP6MgOhN5O33RyM
T9DmJ1ya2XE+ampeUl+Jx8xPAgMBAAGjggJoMIICZDAdBgNVHQ4EFgQU+DNUGIT9
7f8HAN7bcK/bvPcwGRIwHwYDVR0jBBgwFoAUBHSTfnmp1nM1PqvYLEuEJLbGgw0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQzYxLzMzMUQxNDE4REEz
RTExRjA4RkQxRTgzODhFRDM2NDFEL0JIU1Rmbm1wMW5NMVBxdllMRXVFSkxiR2d3
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQkhTVGZubXAxbk0xUHF2WUxFdUVKTGJHZ3cwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC84NzQyMUYzNERB
M0UxMUYwOUIxMjI1NTc4RUQzNjQxRC5yb2EwJwYIKwYBBQUHAQcBAf8EGDAWMBQE
AgABMA4wDAMEACviEQMEACviEjANBgkqhkiG9w0BAQsFAAOCAQEAFxJifOJi88k1
IyUfvkcnd0OTFXcnPgcF3ZqDrbUBF/ncw9a0mFFALskSQgkznAd4AoJgPJQHK9A7
VjG6n2D71Zz+vfk0qbn1DMlydB/MUN/l91xijz5Ti6P28X+ThAAzK9ftu0LnHw+f
0ZQ8vR55PQLdRMHiY4QmZBUaeqUvuJjmtYVkuQvTMI7uNsvs6OJwBMYoPGhNH4nv
lGAjHXDDxo0QCiJRjW6aFmfQC37uwNcWeFcxoqaIaBBM+WxJAH9IJUy8lC/1MaGT
VX7t180scDwnJn7Q14BOBPjXTGjCKgDEvTYpf2hNBQi2lYs4sqPdQQEtYPFWcj8L
wCktwWWedg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:06 2026 by rpki-client