
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B46F239C6A8D11EB82AF1144C4F9AE02.roa
File: B46F239C6A8D11EB82AF1144C4F9AE02.roa (raw, json)
Hash identifier: SzlEPDJi9zAc0zG3xIXsTR02HbNoFM1IdbpFsslC/FY=
Subject key identifier: CB:2E:8B:00:4B:72:3B:57:38:29:A9:B9:0D:A7:51:5A:F3:88:19:98
Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Certificate serial: 07ED
Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B46F239C6A8D11EB82AF1144C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:42:14 +0000
ROA not before: Thu 30 Oct 2025 22:12:08 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 9269
IP address blocks: 58.64.128.0/17 maxlen: 24
59.188.0.0/16 maxlen: 24
103.84.32.0/22 maxlen: 24
113.10.128.0/17 maxlen: 24
123.1.128.0/17 maxlen: 24
192.188.82.0/23 maxlen: 24
202.4.162.0/23 maxlen: 24
203.98.128.0/18 maxlen: 24
203.176.192.0/18 maxlen: 24
210.209.64.0/18 maxlen: 24
210.245.128.0/17 maxlen: 24
2401:4a00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029 (0x7ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF1F, serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5
Validity
Not Before: Oct 30 22:12:08 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47a76-6d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:a7:be:3d:4b:91:22:80:df:c6:77:d2:94:
e6:90:35:54:c3:71:f8:79:95:8d:ae:71:8e:c4:b8:
24:b4:ca:2f:d7:68:cf:3a:2c:ee:b9:b3:03:2b:80:
61:79:65:c8:4d:84:50:49:1e:10:72:58:c7:64:f2:
72:2f:ae:ee:77:85:c5:dc:f6:83:20:73:be:75:9b:
3d:10:e2:f6:ad:5a:69:a2:d0:9f:d3:b9:a3:59:f9:
72:50:bd:92:a8:b4:97:7a:75:9e:bb:07:31:ab:60:
21:3f:e5:ae:c5:d3:46:a8:44:a9:c6:8e:39:96:99:
4f:9f:5e:32:9a:e0:69:66:dc:ff:c8:69:7d:4a:b1:
1a:44:41:c4:ce:0c:c4:28:1e:13:26:27:aa:d4:ad:
dd:f0:0a:09:d9:09:6e:60:ae:e0:dc:cf:a0:14:d1:
2b:8b:00:e0:eb:e7:c7:c3:40:16:72:9c:01:48:75:
43:80:9b:d0:43:6c:71:05:ed:38:79:46:43:a1:05:
f0:66:67:36:cb:70:42:58:23:b6:a7:3d:99:c1:d5:
37:8b:55:bf:60:9a:2a:72:91:48:af:5d:d2:3b:4b:
95:c8:b3:e6:16:7f:9f:b8:3f:fd:51:cd:d1:7a:d6:
d1:a1:90:7e:f4:88:0c:fd:19:64:f4:fd:88:8a:3c:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:8B:00:4B:72:3B:57:38:29:A9:B9:0D:A7:51:5A:F3:88:19:98
X509v3 Authority Key Identifier:
keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B46F239C6A8D11EB82AF1144C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
58.64.128.0/17
59.188.0.0/16
103.84.32.0/22
113.10.128.0/17
123.1.128.0/17
192.188.82.0/23
202.4.162.0/23
203.98.128.0/18
203.176.192.0/18
210.209.64.0/18
210.245.128.0/17
IPv6:
2401:4a00::/32
Signature Algorithm: sha256WithRSAEncryption
16:67:3b:bd:24:66:39:70:97:d6:21:ad:4d:42:82:3c:00:b3:
95:2f:73:b3:e4:20:2e:69:f5:a4:d8:92:69:64:8a:a8:36:7e:
44:d6:d1:51:d2:2d:8d:9a:bb:e8:d0:70:d5:80:4e:81:e6:e3:
31:47:e6:77:3b:11:70:3c:94:50:86:e6:c5:2a:30:cd:2f:08:
eb:45:41:52:9a:90:7e:cd:b8:3e:d5:66:7f:be:38:59:8c:92:
f7:f1:46:49:67:4c:33:3e:f8:76:9c:44:ba:45:25:7d:d6:d1:
f9:a4:f5:88:c4:53:42:bd:19:d8:86:60:f1:be:04:bc:3c:86:
cd:86:1d:f6:13:6d:31:00:d1:73:d4:02:58:06:63:52:56:78:
59:24:c2:27:57:1b:6e:39:d4:3f:5b:e1:09:43:e4:65:dd:87:
50:b9:80:2f:06:7e:9d:58:29:46:c7:1f:4e:66:6e:7c:e7:1a:
3e:45:b9:64:ce:ea:36:71:9b:bb:73:50:eb:14:92:76:f1:7d:
30:a8:ae:16:d2:b1:ee:2c:ac:74:49:53:f6:e1:96:cc:4f:b2:
b0:1f:34:38:d3:b1:2d:f5:ff:6a:af:cf:8b:05:9c:5c:f7:c8:
a6:6b:0e:9a:0f:98:8b:f6:6f:0f:88:46:0d:f0:5d:4e:d3:8e:
57:16:e8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:56 2026 by rpki-client