
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
File: 57680C9CCA9911F0A4E15D65C4F9AE02.roa (raw, json)
Hash identifier: EJnyDwuSIzHst7JusIvMU9zwalSsj+VmD0NvAr/I8zI=
Subject key identifier: 9A:FE:85:21:76:B3:94:09:30:53:93:8C:00:15:12:E8:FE:B2:A6:63
Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial: F4
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:35:25 +0000
ROA not before: Wed 26 Nov 2025 07:27:20 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 18383
IP address blocks: 202.10.96.0/20 maxlen: 24
2403:1800::/32 maxlen: 34
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244 (0xf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Validity
Not Before: Nov 26 07:27:20 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a5a02d-3707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:44:06:a0:b7:86:ff:2c:b1:24:39:dd:51:
05:3d:2a:1b:fe:e9:52:cc:99:7a:78:4f:6b:73:bf:
e3:90:a2:a5:6e:60:dd:47:98:82:c8:18:d8:fa:58:
3e:8f:d5:98:54:e5:00:ae:fe:cf:40:f7:69:4b:d6:
ef:ea:16:93:fb:e7:92:94:96:fb:60:d4:d2:7d:95:
dc:bc:30:bd:87:99:2e:59:f8:f0:d2:1e:ac:b3:22:
6a:5f:ae:80:ac:1d:95:1e:f3:35:0a:30:69:b4:8d:
3c:c9:d6:75:83:bc:f1:04:1e:ac:fc:86:7b:a3:2e:
0f:11:55:7c:1a:5d:2e:7d:40:6a:e2:bf:f2:e3:fb:
af:e9:9e:f9:f4:a7:7e:82:60:0d:20:13:29:36:39:
12:e4:c6:e4:d4:af:53:e5:e8:bf:d7:84:25:55:45:
0a:95:96:20:52:27:7e:95:2f:0c:87:4f:bc:55:31:
45:32:00:54:12:ac:97:b6:30:ff:bc:ac:a7:9c:88:
7c:86:ba:72:66:90:40:a4:77:ec:82:ee:57:4e:3b:
f1:da:9b:8f:49:26:e7:0d:93:18:96:2d:a1:3a:91:
46:bb:87:e2:65:3e:06:f3:12:0d:ec:16:e3:93:20:
41:55:9f:fb:14:bd:e9:96:20:fa:cc:6d:d9:c3:32:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FE:85:21:76:B3:94:09:30:53:93:8C:00:15:12:E8:FE:B2:A6:63
X509v3 Authority Key Identifier:
keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/57680C9CCA9911F0A4E15D65C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.10.96.0/20
IPv6:
2403:1800::/32
Signature Algorithm: sha256WithRSAEncryption
33:dc:2d:56:f5:17:ad:da:cc:5e:d9:aa:48:41:98:20:8d:c2:
f3:9e:95:12:3f:79:b4:db:9d:d0:8c:41:0a:a6:d5:95:1b:b1:
b3:49:92:1f:c6:fe:9e:8a:39:e8:f7:5a:7e:f8:53:0d:ec:c4:
15:31:2f:f7:4f:a9:be:b1:e1:6c:50:10:5d:d4:fe:a2:83:c3:
25:a6:e7:89:1e:5d:71:c3:c9:8f:f5:e0:8b:7b:5b:b8:e9:4f:
b7:50:d3:86:c2:46:03:d4:bd:14:6f:3d:63:92:b2:2a:fb:cd:
9c:14:0d:f8:dd:67:1c:53:4d:8e:f7:d0:61:59:70:a0:fe:b8:
20:8e:8c:65:9b:d6:49:64:d9:1e:75:a5:d7:87:82:dc:5f:62:
64:72:da:b2:d6:63:8c:2c:4f:dd:9a:3b:32:b6:f9:8a:50:13:
de:ab:b5:ba:b6:a3:05:da:78:00:8b:74:62:1d:a1:3d:79:c2:
3a:18:fc:cb:69:93:3d:99:75:1a:c3:94:f5:d3:a8:27:e7:4a:
01:89:1a:3f:57:8c:e0:0d:80:3e:99:df:52:16:88:13:c3:6d:
87:00:09:9b:1f:81:1b:3e:29:99:93:6d:e2:dd:34:92:99:0d:
ff:e6:d9:ba:0f:27:4b:c1:51:9f:d6:e3:57:e1:d4:6e:17:98:
3c:fb:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:57 2026 by rpki-client