
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/3DE0E9065F0811EDB42DC97FC4F9AE02.roa
File: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (raw, json)
Hash identifier: NcHl9AJMYCFpUIi+eqsBTaf+YrjXdd3uK3fAP8cyrek=
Subject key identifier: 5F:63:85:18:6C:FD:20:D7:A2:87:61:E0:4B:CC:EF:DF:77:9D:5F:D1
Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
Certificate serial: 028A
Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/3DE0E9065F0811EDB42DC97FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:29:13 +0000
ROA not before: Fri 03 Oct 2025 02:27:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 149522
IP address blocks: 103.55.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl
rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
Validity
Not Before: Oct 3 02:27:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a44d39-0b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:99:3e:d9:df:92:d4:55:30:9f:00:d8:19:
3e:dc:31:2e:b2:77:be:83:ee:0e:89:29:b9:78:43:
b9:e5:9d:41:d6:54:c4:1b:be:ed:8f:e0:0a:b3:85:
1a:54:76:11:31:de:51:b3:cf:49:97:69:05:57:99:
f8:07:7f:e1:0c:ac:ae:65:f5:24:fc:ef:09:27:d4:
cc:92:9c:f4:20:95:3e:a9:5c:c6:66:df:b8:84:37:
5c:c1:41:73:31:9f:3d:9d:be:4c:c7:aa:7b:03:e3:
fb:24:c7:78:2c:5f:27:ee:bb:58:86:a6:7e:c1:c0:
82:46:b0:8f:51:3f:01:5b:b8:c1:a2:84:12:3f:7f:
9e:48:b9:69:5a:b9:04:0e:52:f1:75:fa:67:ba:69:
10:9c:c1:a2:bb:9f:5f:1f:6d:ff:8e:85:23:c4:98:
c8:52:60:e6:97:f2:58:51:48:51:2d:3a:e9:a6:53:
54:c6:2c:43:02:bf:f8:f5:ac:1b:e9:eb:23:19:2b:
ff:51:64:8b:28:69:43:ca:7e:45:06:db:9d:06:55:
d2:66:8d:90:f5:5c:22:ac:37:ff:a5:9e:54:18:96:
21:72:54:86:5a:43:2b:0b:5d:62:61:99:77:3e:d0:
fe:39:1f:5d:0c:47:c5:05:64:94:e3:3f:60:90:bd:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:63:85:18:6C:FD:20:D7:A2:87:61:E0:4B:CC:EF:DF:77:9D:5F:D1
X509v3 Authority Key Identifier:
keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/3DE0E9065F0811EDB42DC97FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.55.156.0/24
Signature Algorithm: sha256WithRSAEncryption
54:22:5e:d9:1b:35:3a:03:29:3d:72:52:a3:ae:6a:38:85:d1:
e5:fc:db:60:45:81:ce:ce:fd:f5:73:3f:e0:16:9f:72:83:38:
9a:61:4a:e1:10:56:92:af:da:03:e7:05:0a:f8:69:6e:12:c0:
61:d5:ea:f5:ff:c9:f4:36:b5:ae:c6:2d:ca:b4:96:20:95:6e:
af:26:39:73:c0:da:b6:ce:57:2f:3c:22:7e:25:42:c8:1a:73:
82:7a:1d:aa:6e:f9:20:ed:50:5f:c5:eb:32:67:f5:63:e3:10:
2a:95:cd:81:08:32:29:13:1c:0e:a7:fa:29:2e:c0:a6:b3:6b:
9b:8c:2a:c0:30:76:6b:65:5d:dd:be:57:2a:54:dc:a9:ab:59:
e7:30:fa:37:c7:8d:6a:74:8e:a4:9b:4f:ad:92:c9:d5:d4:4b:
48:a7:38:6b:c2:cb:28:68:14:c3:c4:6e:2c:77:bc:eb:1b:47:
d3:f9:d7:1e:2a:67:88:28:11:94:7e:aa:99:f4:af:8c:de:d2:
72:d1:ba:ac:7c:a0:2d:1a:8d:fb:41:53:2b:69:4c:6c:ca:48:
3e:db:5c:7c:a9:e7:91:bc:e5:2c:12:38:be:41:43:80:fa:41:
7d:ea:f6:a2:bf:a1:90:18:69:f6:1c:2c:cd:c6:7a:53:3f:12:
60:38:ad:f8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVBMjcxMTAvBgNVBAUTKEJDODYyMTQxMzA5NzE2QzBFNERDMzdERkZGMzNFNUFC
MEM1NTRBRDAwHhcNMjUxMDAzMDIyNzQ3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGQzOS0wYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsiaZPtnfktRVMJ8A2Bk+3DEusne+g+4OiSm5eEO55Z1B1lTEG77tj+AKs4Ua
VHYRMd5Rs89Jl2kFV5n4B3/hDKyuZfUk/O8JJ9TMkpz0IJU+qVzGZt+4hDdcwUFz
MZ89nb5Mx6p7A+P7JMd4LF8n7rtYhqZ+wcCCRrCPUT8BW7jBooQSP3+eSLlpWrkE
DlLxdfpnumkQnMGiu59fH23/joUjxJjIUmDml/JYUUhRLTrpplNUxixDAr/49awb
6esjGSv/UWSLKGlDyn5FBtudBlXSZo2Q9VwirDf/pZ5UGJYhclSGWkMrC11iYZl3
PtD+OR9dDEfFBWSU4z9gkL0YoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF9jhRhs
/SDXoodh4EvM7993nV/RMB8GA1UdIwQYMBaAFLyGIUEwlxbA5Nw33/8z5asMVUrQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUEyNy82QThCRDA4QzQ0
NkYxMUVEOTA5NUQ1NjVDNEY5QUUwMi92SVloUVRDWEZzRGszRGZmX3pQbHF3eFZT
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZJWWhRVENYRnNEazNEZmZfelBscXd4VlN0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUVBMjcvNkE4QkQwOEM0NDZGMTFFRDkwOTVENTY1QzRGOUFFMDIvM0RFMEU5MDY1
RjA4MTFFREI0MkRDOTdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZzecMA0GCSqGSIb3DQEBCwUAA4IBAQBUIl7ZGzU6Ayk9clKjrmo4
hdHl/NtgRYHOzv31cz/gFp9ygziaYUrhEFaSr9oD5wUK+GluEsBh1er1/8n0NrWu
xi3KtJYglW6vJjlzwNq2zlcvPCJ+JULIGnOCeh2qbvkg7VBfxesyZ/Vj4xAqlc2B
CDIpExwOp/opLsCms2ubjCrAMHZrZV3dvlcqVNypq1nnMPo3x41qdI6km0+tksnV
1EtIpzhrwssoaBTDxG4sd7zrG0fT+dceKmeIKBGUfqqZ9K+M3tJy0bqsfKAtGo37
QVMraUxsykg+21x8qeeRvOUsEji+QUOA+kF96vaiv6GQGGn2HCzNxnpTPxJgOK34
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:56 2026 by rpki-client