
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3481400917811ED904ACF83C4F9AE02.roa
File: C3481400917811ED904ACF83C4F9AE02.roa (raw, json)
Hash identifier: 4xjAkin/j6TIMIFKuvZwnU4pQkfqHu8yYEJNx0r+s1o=
Subject key identifier: 6C:F5:99:82:67:B1:0D:74:A3:1D:47:28:9B:E1:FC:2E:E1:31:DC:26
Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Certificate serial: 0291
Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3481400917811ED904ACF83C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:44:55 +0000
ROA not before: Sun 07 Dec 2025 00:40:03 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 10022
IP address blocks: 203.214.200.0/23 maxlen: 23
203.214.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:13:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E9B6, serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C
Validity
Not Before: Dec 7 00:40:03 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47b17-84ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:3b:7a:0b:a7:6b:9b:a6:12:be:fb:2b:9a:
df:90:cc:12:68:c0:f7:2a:cd:10:18:db:63:47:ba:
77:e2:ed:d3:b6:a5:80:a1:15:01:68:a5:9e:84:2d:
e0:11:7e:63:4c:40:4b:b5:65:30:52:06:7f:0b:fe:
69:67:61:1a:c7:64:8b:c9:c1:99:e7:f1:e9:ff:93:
86:55:24:b6:6b:49:43:6f:53:91:10:82:76:72:d6:
bd:79:8e:c9:bb:83:5a:1a:06:24:93:f5:f3:55:a8:
94:47:89:de:87:87:e5:26:40:cd:63:b7:77:75:91:
87:ae:af:b5:9e:11:af:33:90:30:8c:63:01:d9:4d:
bf:1a:54:d4:2d:60:0a:26:d1:42:62:f6:af:dc:db:
34:13:7c:b5:b7:ff:87:ce:cb:92:99:93:6b:e1:4f:
f1:16:65:bc:15:49:d1:bf:be:6f:df:6d:0c:68:2e:
f2:2b:01:b4:52:be:6e:b5:fd:d7:c2:2c:6a:84:b7:
de:18:a5:0c:e3:84:ff:e3:06:53:72:8f:0e:8e:d7:
bb:6f:21:a7:77:5e:9d:24:d4:aa:14:5e:9b:47:3a:
2e:0b:9d:e5:65:f3:eb:e9:c9:bf:c3:0c:28:a6:68:
fc:08:78:a8:6b:93:c8:93:c8:63:5d:df:d9:74:19:
c6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F5:99:82:67:B1:0D:74:A3:1D:47:28:9B:E1:FC:2E:E1:31:DC:26
X509v3 Authority Key Identifier:
keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/C3481400917811ED904ACF83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.214.200.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:34:f4:03:6a:bf:ec:eb:0f:9f:79:ce:2b:1f:4b:39:48:02:
92:64:48:00:d0:2e:ad:8e:9e:0e:b4:a7:e4:f3:8e:df:06:54:
7f:24:07:5e:fc:b4:0b:77:fd:71:91:35:26:2a:87:91:77:9c:
1e:05:55:a4:73:88:2d:15:e5:87:e9:e8:0e:e7:88:ca:4b:30:
81:97:a7:49:81:b9:11:3e:6f:35:ad:93:83:b4:76:7f:b7:91:
ef:7c:4b:50:27:a6:56:d6:99:c6:98:56:34:ee:b7:99:b6:ba:
f4:ff:f4:ab:5d:b9:7a:61:93:df:63:9d:5e:46:0e:c2:0a:ee:
4b:15:ee:2d:3e:96:ca:e7:81:b9:f4:7d:b2:69:3e:b3:73:e0:
2c:93:be:c5:e4:90:17:e9:03:ef:bf:99:bf:ae:da:c9:8c:fd:
f8:63:c0:4e:a0:a2:c4:ad:8c:fe:e8:e4:12:04:8f:d1:94:eb:
9c:2c:c1:31:d3:26:0a:69:ff:22:00:f7:39:6f:5e:38:41:40:
14:b9:d4:83:cf:6c:61:4a:4f:77:3c:28:6a:d6:04:e8:18:6a:
6d:e0:08:02:ed:ed:bf:24:8b:33:c5:1d:4c:0f:20:a3:bf:53:
22:73:b0:40:b5:37:7f:86:c9:89:2c:a1:0d:a0:03:ec:d7:75:
88:46:95:df
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICApEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC
MThCODAzNUMwHhcNMjUxMjA3MDA0MDAzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2IxNy04NGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAQ7eguna5umEr77K5rfkMwSaMD3Ks0QGNtjR7p34u3TtqWAoRUBaKWehC3g
EX5jTEBLtWUwUgZ/C/5pZ2Eax2SLycGZ5/Hp/5OGVSS2a0lDb1OREIJ2cta9eY7J
u4NaGgYkk/XzVaiUR4neh4flJkDNY7d3dZGHrq+1nhGvM5AwjGMB2U2/GlTULWAK
JtFCYvav3Ns0E3y1t/+HzsuSmZNr4U/xFmW8FUnRv75v320MaC7yKwG0Ur5utf3X
wixqhLfeGKUM44T/4wZTco8Ojte7byGnd16dJNSqFF6bRzouC53lZfPr6cm/wwwo
pmj8CHioa5PIk8hjXd/ZdBnGEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGz1mYJn
sQ10ox1HKJvh/C7hMdwmMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG
RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvQzM0ODE0MDA5
MTc4MTFFRDkwNEFDRjgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCy9bIMA0GCSqGSIb3DQEBCwUAA4IBAQBKNPQDar/s6w+fec4rH0s5
SAKSZEgA0C6tjp4OtKfk847fBlR/JAde/LQLd/1xkTUmKoeRd5weBVWkc4gtFeWH
6egO54jKSzCBl6dJgbkRPm81rZODtHZ/t5HvfEtQJ6ZW1pnGmFY07reZtrr0//Sr
Xbl6YZPfY51eRg7CCu5LFe4tPpbK54G59H2yaT6zc+Ask77F5JAX6QPvv5m/rtrJ
jP34Y8BOoKLErYz+6OQSBI/RlOucLMEx0yYKaf8iAPc5b144QUAUudSDz2xhSk93
PChq1gToGGpt4AgC7e2/JIszxR1MDyCjv1Mic7BAtTd/hsmJLKENoAPs13WIRpXf
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:59 2026 by rpki-client