
$ rpki-client -vvf rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9DD56C2A3FD311F08A76B677C4F9AE02.roa
File: 9DD56C2A3FD311F08A76B677C4F9AE02.roa (raw, json)
Hash identifier: 0apNe0l5FgQvHElgMHv4f+0Whu9gEz8dqP8QgQpe1fU=
Subject key identifier: 1B:70:46:AE:A0:F3:F6:87:4C:DC:97:2B:CE:9A:03:55:83:DD:CE:7A
Certificate issuer: /CN=A912981B/serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Certificate serial: 019C
Authority key identifier: 33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9DD56C2A3FD311F08A76B677C4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:24:02 +0000
ROA not before: Thu 29 Jan 2026 03:23:43 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 152296
IP address blocks: 157.10.30.0/24 maxlen: 24
157.10.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:51:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412 (0x19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912981B, serialNumber=337B450FDDC9FC70221DA5CA09785885B1D1B7CC
Validity
Not Before: Jan 29 03:23:43 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a43df1-8b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:0e:c6:c4:5d:e2:18:cd:e4:29:ac:22:ec:
37:91:cb:38:ac:bb:c1:65:30:e0:91:95:26:0e:fb:
42:dc:00:15:d0:ea:ea:83:81:db:a6:95:3a:a5:31:
55:ff:b3:18:bd:d7:d2:a6:04:f1:42:a6:3d:19:48:
c3:1a:7b:65:af:30:af:a9:45:d3:76:7a:2f:a5:ff:
8a:91:81:93:8f:ee:02:f1:bd:de:49:09:04:d5:4f:
31:a0:aa:98:5f:50:4f:71:8b:49:60:e3:ac:9e:ae:
ca:39:cb:1a:bc:aa:ac:17:3e:75:e9:e5:f8:55:af:
9b:2c:3c:48:1c:20:ce:97:6a:0f:77:de:c3:6e:fb:
09:00:e4:93:ef:26:5b:87:4d:be:b9:d1:db:19:fe:
05:9f:c4:ba:73:67:eb:e6:6b:f0:8c:4c:bb:eb:8c:
80:08:d0:47:18:44:35:43:4f:27:ed:31:0b:5f:18:
cc:74:84:22:27:0e:06:74:16:04:4c:27:ee:f7:ad:
3e:39:bf:41:83:21:d0:d0:42:58:61:86:3c:c6:93:
ec:97:f9:c1:29:da:1e:dc:e7:5a:a3:9f:39:92:93:
89:77:e4:df:82:6f:ac:4f:55:de:fb:84:b5:8f:4e:
c2:36:d3:77:4c:ae:41:9c:87:86:70:92:48:09:46:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:70:46:AE:A0:F3:F6:87:4C:DC:97:2B:CE:9A:03:55:83:DD:CE:7A
X509v3 Authority Key Identifier:
keyid:33:7B:45:0F:DD:C9:FC:70:22:1D:A5:CA:09:78:58:85:B1:D1:B7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/M3tFD93J_HAiHaXKCXhYhbHRt8w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M3tFD93J_HAiHaXKCXhYhbHRt8w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912981B/BC5CEAB6CA8A11EEB056E61FC4F9AE02/9DD56C2A3FD311F08A76B677C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.30.0/23
Signature Algorithm: sha256WithRSAEncryption
43:38:77:d1:2b:a8:d1:bc:bd:16:ac:6a:b8:54:50:5e:20:cd:
f6:18:df:92:ac:a7:18:4b:b2:2e:eb:70:f6:c7:7a:eb:a4:6a:
2c:5c:3a:03:5a:c9:66:fb:85:a5:87:fb:02:ea:83:d2:02:48:
8e:e0:0d:74:46:ea:c2:b8:49:10:45:71:c4:1f:bf:b5:9a:a2:
1e:81:73:7a:3e:a6:21:53:a6:9c:55:7b:95:20:92:a5:d0:cd:
7c:70:f3:8f:d6:1e:f8:e4:06:7f:bf:65:61:e0:75:9b:d7:d0:
24:6b:1a:b6:21:3a:87:a3:92:34:f6:cb:80:f2:f4:3d:36:81:
20:ea:c1:26:1c:8c:8e:b1:02:ac:af:aa:72:0f:ba:75:9c:b1:
0a:0f:4b:3e:cd:97:a0:4b:83:67:b6:27:dc:8e:09:a3:03:bd:
92:3d:d8:5b:8f:23:d4:cf:3f:c3:62:e6:75:40:f7:7d:cc:63:
47:49:a8:8d:8a:56:08:7b:84:59:ce:50:4c:01:d2:a8:99:e6:
d5:71:33:9c:3d:18:34:da:39:30:0a:1f:b9:47:f3:a8:2a:db:
f2:c6:25:d7:10:a8:90:aa:24:de:32:40:59:9c:e1:7f:21:73:
c9:17:5c:1e:f6:b2:b1:95:cd:2c:07:e8:80:7f:85:2a:90:98:
a3:94:8c:dc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4MUIxMTAvBgNVBAUTKDMzN0I0NTBGRERDOUZDNzAyMjFEQTVDQTA5Nzg1ODg1
QjFEMUI3Q0MwHhcNMjYwMTI5MDMyMzQzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2RmMS04YjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAznkOxsRd4hjN5CmsIuw3kcs4rLvBZTDgkZUmDvtC3AAV0Orqg4HbppU6pTFV
/7MYvdfSpgTxQqY9GUjDGntlrzCvqUXTdnovpf+KkYGTj+4C8b3eSQkE1U8xoKqY
X1BPcYtJYOOsnq7KOcsavKqsFz516eX4Va+bLDxIHCDOl2oPd97DbvsJAOST7yZb
h02+udHbGf4Fn8S6c2fr5mvwjEy764yACNBHGEQ1Q08n7TELXxjMdIQiJw4GdBYE
TCfu960+Ob9BgyHQ0EJYYYY8xpPsl/nBKdoe3Odao585kpOJd+Tfgm+sT1Xe+4S1
j07CNtN3TK5BnIeGcJJICUYnxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBtwRq6g
8/aHTNyXK86aA1WD3c56MB8GA1UdIwQYMBaAFDN7RQ/dyfxwIh2lygl4WIWx0bfM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTgxQi9CQzVDRUFCNkNB
OEExMUVFQjA1NkU2MUZDNEY5QUUwMi9NM3RGRDkzSl9IQWlIYVhLQ1hoWWhiSFJ0
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL00zdEZEOTNKX0hBaUhhWEtDWGhZaGJIUnQ4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjk4MUIvQkM1Q0VBQjZDQThBMTFFRUIwNTZFNjFGQzRGOUFFMDIvOURENTZDMkEz
RkQzMTFGMDhBNzZCNjc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQoeMA0GCSqGSIb3DQEBCwUAA4IBAQBDOHfRK6jRvL0WrGq4VFBe
IM32GN+SrKcYS7Iu63D2x3rrpGosXDoDWslm+4Wlh/sC6oPSAkiO4A10RurCuEkQ
RXHEH7+1mqIegXN6PqYhU6acVXuVIJKl0M18cPOP1h745AZ/v2Vh4HWb19Akaxq2
ITqHo5I09suA8vQ9NoEg6sEmHIyOsQKsr6pyD7p1nLEKD0s+zZegS4Nntifcjgmj
A72SPdhbjyPUzz/DYuZ1QPd9zGNHSaiNilYIe4RZzlBMAdKomebVcTOcPRg02jkw
Ch+5R/OoKtvyxiXXEKiQqiTeMkBZnOF/IXPJF1we9rKxlc0sB+iAf4UqkJijlIzc
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:01 2026 by rpki-client