
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa
File: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (raw, json)
Hash identifier: Y9POkZEe3wRg+MXvb7ccC/944++smUYrxRZm5LhHG30=
Subject key identifier: 42:87:7B:82:A4:99:BF:61:06:DB:5F:94:2A:AD:E8:7A:E4:2D:A9:40
Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial: 1CB4
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:24:35 +0000
ROA not before: Thu 28 Aug 2025 16:34:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 134808
IP address blocks: 203.33.22.0/24 maxlen: 24
2001:df3:ba00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:28:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7348 (0x1cb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Validity
Not Before: Aug 28 16:34:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a46843-7c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:f8:74:8d:f8:76:4c:a4:86:74:c2:62:c6:
8b:9f:72:90:c1:24:42:47:d6:11:97:5a:71:dd:9f:
9f:6f:83:61:3b:ed:3f:b5:66:82:5a:20:25:37:3c:
ba:43:9d:b4:86:8a:a9:15:31:6e:e5:cf:7e:c1:5d:
bd:10:89:bf:eb:49:49:88:d9:a4:2a:1d:87:7f:71:
5f:7e:12:7b:89:b0:09:e7:dc:19:a6:bc:d2:d2:08:
9f:5d:ab:24:5c:84:55:a8:22:2e:01:8a:11:bf:8b:
80:a9:d9:47:57:10:4f:95:b5:bb:23:91:96:48:c9:
67:f4:99:59:58:d9:21:0d:49:8d:21:bd:c0:e0:94:
d5:96:d2:f5:af:84:44:2e:4b:6e:9a:eb:d8:2b:1b:
f0:e8:a1:2a:59:c8:7e:e6:88:92:be:48:e7:0d:df:
16:4a:64:16:41:dc:1a:c4:ef:81:ec:d6:56:85:28:
46:e8:a6:09:25:42:d1:d1:57:91:3b:89:3b:f5:45:
b1:9c:10:7a:d0:73:84:3f:03:ba:10:4b:1b:c9:21:
b1:54:24:52:ad:38:a3:00:2f:c3:6b:20:f8:85:96:
ce:9a:2c:14:52:a8:b2:ff:04:9e:84:02:0c:54:f2:
29:63:f8:c9:86:60:c4:6e:55:6a:94:8c:32:17:f5:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:7B:82:A4:99:BF:61:06:DB:5F:94:2A:AD:E8:7A:E4:2D:A9:40
X509v3 Authority Key Identifier:
keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.33.22.0/24
IPv6:
2001:df3:ba00::/48
Signature Algorithm: sha256WithRSAEncryption
37:f1:f6:d5:59:e2:be:53:25:fe:2e:7e:84:71:d3:13:e8:66:
15:2e:1c:13:77:64:72:9b:c3:d8:d2:3a:a2:a9:3f:a4:9c:c5:
fb:66:61:49:99:8f:ff:0d:83:5f:03:dc:b6:35:43:c2:19:05:
4a:09:d9:7b:4c:72:77:e2:3a:97:81:40:95:d8:19:c9:a0:9e:
a0:bb:9b:18:5b:39:4f:11:e8:27:54:e6:51:a6:9d:9c:d0:5f:
6a:b6:e1:30:ed:ff:2c:eb:15:4a:78:d4:54:64:5c:79:44:61:
bf:af:36:15:2a:9f:0e:ef:cf:08:be:03:1b:b8:f1:79:29:db:
2f:42:bd:06:39:8c:f4:8e:6f:63:92:3d:38:63:f7:d9:63:c8:
1f:6f:34:ba:6c:2d:b7:2f:f9:fa:45:12:ed:07:8e:f3:1e:a8:
f6:f9:34:42:b1:6b:2a:0c:91:93:fd:53:4b:93:e1:72:6a:91:
5e:ed:14:9c:30:0c:73:3a:26:b3:f1:dc:26:c9:4d:55:e9:ee:
76:1b:d6:dc:a9:2f:b5:65:7f:1a:2e:9d:cf:4d:a2:70:a6:8e:
9a:ee:00:79:50:62:e4:45:fa:f7:e7:23:7c:9e:67:8f:50:3b:
ca:26:bb:da:37:d1:d2:14:f4:4a:d5:4a:e6:ad:80:2e:ef:e6:
81:40:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:49 2026 by rpki-client