
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/2789337224DD11F19E4B5BF6AD833773.roa
File: 2789337224DD11F19E4B5BF6AD833773.roa (raw, json)
Hash identifier: PQr+ebVrtCzdXKAWNzsRyzxT+aGxBF4TMLTLw4pn3Sg=
Subject key identifier: 83:EA:F9:B6:15:FD:0D:B2:17:E7:F0:A7:12:0B:5B:90:00:C6:C5:7D
Certificate issuer: /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Certificate serial: 14
Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/2789337224DD11F19E4B5BF6AD833773.roa
Signing time: Wed 15 Apr 2026 08:44:14 +0000
ROA not before: Wed 15 Apr 2026 08:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133139
IP address blocks: 195.142.156.0/22 maxlen: 24
195.142.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 08:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Validity
Not Before: Apr 15 08:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69df4fde-7778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:9f:fe:e1:e7:f5:49:97:73:52:3d:34:db:
7f:95:21:ac:ca:db:be:00:f0:fd:3f:6d:25:c0:a1:
15:82:3d:da:f4:cf:38:3f:79:8e:f9:74:3f:25:ed:
14:04:85:07:ad:81:94:d8:aa:be:c8:6d:4b:08:ab:
d4:6b:5e:f2:4b:8c:96:6b:fa:d1:7c:92:e0:0d:07:
c7:ef:08:3a:fb:29:d4:6b:51:94:74:7b:79:c8:4f:
26:9e:26:3b:5e:8d:3c:7d:c0:e5:24:69:f9:02:e0:
87:8c:ab:3f:5c:fe:35:04:b1:90:2f:5c:93:77:7b:
ea:af:31:a4:14:ed:7f:e6:bb:84:c9:6b:d1:40:dd:
69:d0:c1:2c:a8:e8:5a:4a:18:c9:68:db:9f:12:3a:
b3:4c:86:38:30:a8:0d:cc:c2:13:e6:a1:2b:a4:80:
51:b2:ea:2f:a9:ec:f3:69:03:78:6e:3e:34:05:d1:
36:35:90:33:1b:62:65:91:07:47:7b:da:ac:08:b5:
3b:c0:13:46:bd:8f:2d:91:83:42:bc:3e:ef:bd:48:
d3:c0:f0:91:07:d7:55:d7:11:7f:1a:c7:02:21:1f:
81:ac:2c:7b:7d:fd:d4:7a:4e:93:a4:92:4d:f5:17:
66:87:be:ae:fb:47:b5:3d:ed:ba:d4:1c:19:e0:7c:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:F9:B6:15:FD:0D:B2:17:E7:F0:A7:12:0B:5B:90:00:C6:C5:7D
X509v3 Authority Key Identifier:
keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/2789337224DD11F19E4B5BF6AD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
195.142.156.0/22
195.142.212.0/22
Signature Algorithm: sha256WithRSAEncryption
65:53:7d:53:25:3f:29:ae:8e:36:63:44:0b:30:2e:e0:55:28:
d8:5d:a4:23:c0:ba:f1:37:ac:77:27:28:7a:f0:4e:73:8d:4f:
01:cc:5e:7d:05:66:77:aa:73:4e:73:dc:a3:00:69:b3:67:2b:
8b:10:78:f7:bf:1c:6b:e8:d4:c4:e5:ee:c8:cb:85:9d:71:19:
10:3a:ae:d7:57:ef:83:3d:aa:d8:00:40:80:8c:cc:5e:34:a4:
37:a9:e7:a6:7a:f7:87:2a:c0:21:dd:bb:b1:d0:8d:8e:09:9d:
54:9e:0b:2d:bf:c8:ab:3c:5a:ed:36:f4:c3:c2:23:3c:0b:89:
b5:18:62:34:c1:f1:02:e4:2a:54:b3:70:13:8f:31:a7:a5:20:
13:54:f5:26:d3:15:d8:42:b5:ad:55:b9:9c:ba:6c:a4:20:c3:
79:f0:1d:e2:7b:59:76:e1:3a:3a:57:87:47:8c:a3:a0:2e:96:
38:15:63:ad:b0:35:b3:c6:2b:e4:d6:e6:fb:0f:04:41:83:38:
05:99:e2:25:f0:90:5f:df:bb:36:4a:f6:42:9c:ae:22:69:3d:
78:0f:d7:7a:ff:53:16:f2:93:4e:0b:78:0f:be:29:c8:43:10:
32:1b:e7:0f:ec:20:7d:6d:29:4a:3b:fb:23:b0:54:de:c0:a9:
f1:e4:cc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:55 2026 by rpki-client