
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa
File: 1EC9E19C7AD111F188194D1271A30FBC.roa (raw, json)
Hash identifier: +9AXgCQZHA/qQnY6/zfwgsV6IjHJCtO7mBqzVtouNxg=
Subject key identifier: F3:A2:BC:C6:31:38:CF:93:C0:7B:9D:B0:86:0E:D1:D7:45:77:2D:F5
Certificate issuer: /CN=A911EED9/serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Certificate serial: 3F
Authority key identifier: 4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa
Signing time: Tue 11 Aug 2026 11:43:01 +0000
ROA not before: Tue 11 Aug 2026 11:43:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149514
IP address blocks: 162.4.48.0/24 maxlen: 24
162.4.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 08:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EED9, serialNumber=4ABF666B1E3C6C712C4B47701BFDD157DE038F2F
Validity
Not Before: Aug 11 11:43:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a7b0ac4-b73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:70:84:84:cf:b5:71:33:fd:37:70:75:c8:25:
09:83:3d:6c:ab:90:e2:30:cf:fd:93:5e:61:5b:f7:
0f:31:68:2e:21:fa:e3:ba:27:38:04:5b:be:cd:65:
58:30:68:05:03:a7:68:5e:ec:01:91:55:ce:7c:1b:
c5:3b:55:e2:5d:01:8a:20:82:34:cc:c5:6d:07:0e:
e7:33:f4:d9:cf:f1:7b:03:f5:4b:3c:7a:92:f2:2b:
6f:1e:6f:83:04:c4:18:ac:6f:ca:e3:fe:50:05:9b:
dc:90:1f:77:40:3c:de:e3:4e:25:55:35:4f:87:b7:
a8:4c:6e:18:74:15:aa:24:a9:48:66:8a:82:c2:9a:
58:7f:50:15:12:94:87:86:ec:69:a6:eb:c2:7a:1e:
bb:81:9f:e6:ab:1d:12:2e:28:58:b5:ca:51:e7:69:
91:ca:a0:e1:7a:90:84:26:86:c5:a1:4e:d9:d0:ba:
24:2f:ff:3c:76:c7:e9:8b:9e:bf:af:f7:d0:f4:1b:
31:c6:34:62:f3:95:9c:d9:74:07:d0:82:e9:73:31:
4c:1d:c5:0c:48:5e:43:b0:f3:c5:b0:80:66:3c:e3:
1e:fe:a0:a5:d6:1c:66:d5:fd:cb:ab:a0:3b:2c:b5:
f6:2d:68:86:96:4b:a2:9d:74:89:4c:0a:6e:c0:97:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A2:BC:C6:31:38:CF:93:C0:7B:9D:B0:86:0E:D1:D7:45:77:2D:F5
X509v3 Authority Key Identifier:
keyid:4A:BF:66:6B:1E:3C:6C:71:2C:4B:47:70:1B:FD:D1:57:DE:03:8F:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/Sr9max48bHEsS0dwG_3RV94Djy8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Sr9max48bHEsS0dwG_3RV94Djy8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EED9/242E0BBA43A711F1A59112E093833773/1EC9E19C7AD111F188194D1271A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
162.4.48.0/23
Signature Algorithm: sha256WithRSAEncryption
00:7f:09:15:3b:b4:72:ce:a9:87:2e:d9:b3:cc:51:b7:fa:f7:
ab:c2:9a:fa:0c:70:b7:5e:2c:dd:a8:37:6b:93:99:f0:d0:85:
82:84:2f:71:f2:01:fa:c5:e7:51:a2:7c:a3:37:c4:8c:c0:73:
f8:db:9a:1a:7b:a5:d6:a5:44:bd:78:3f:f6:d8:10:92:34:56:
a0:63:c5:c1:8d:2e:a5:3f:88:6f:8c:80:de:88:e0:c9:fe:86:
94:9a:ec:76:8f:10:e5:61:12:04:a1:5e:17:f4:b4:c8:c0:73:
8f:9a:a3:4c:ad:62:9f:ef:95:3d:77:48:a7:82:fd:20:51:37:
e1:2c:de:82:e9:47:bd:2c:65:0c:9d:fd:b0:f6:78:c8:6e:44:
24:51:42:a7:d1:6c:5e:3d:a4:a2:37:4c:65:c7:03:e4:61:d7:
f0:53:a4:d2:25:39:84:52:65:ae:f0:01:fa:66:d3:0b:9a:6c:
4d:af:a8:e1:48:11:77:d2:07:d1:c6:b7:d1:a1:53:25:d1:ea:
53:59:a0:a5:fa:b5:be:97:f9:65:2a:b1:60:31:89:75:51:e6:
83:e0:27:05:97:ae:b6:5b:20:ec:e3:e9:0a:c4:ae:a4:38:f3:
58:34:90:e7:bd:6e:a0:13:a0:9a:32:c6:ca:f0:a7:9f:3c:fc:
06:5b:44:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 29 03:02:24 2026 by rpki-client