
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa
File: 619B0B285AE611E781C33D7CC4F9AE02.roa (raw, json)
Hash identifier: jo11qUhM4oXE7eBalp1J3JxJQge1HTpHBWzi+ddVqEw=
Subject key identifier: CD:16:E3:E8:DB:E4:EE:A1:ED:AE:45:01:B4:CF:3D:A5:EE:6F:48:5E
Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial: 1D13
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa
Signing time: Tue 18 Aug 2026 16:30:05 +0000
ROA not before: Tue 18 Aug 2026 16:30:05 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 20473
IP address blocks: 203.33.22.0/24 maxlen: 24
2001:df3:ba00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7443 (0x1d13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Validity
Not Before: Aug 18 16:30:05 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a84888d-8c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:7c:cd:d1:09:22:2a:a2:54:45:e2:0d:d3:
76:40:67:ee:8f:48:d8:53:9c:a1:6b:86:eb:4f:10:
42:22:ef:9e:fe:21:db:3d:e3:76:eb:41:96:35:dd:
3b:1e:9b:df:52:10:85:51:8a:26:00:61:ae:11:35:
69:c6:08:2a:50:0a:78:aa:4e:1e:09:77:af:2c:10:
1d:ac:da:90:97:61:20:8d:fc:ce:92:1f:20:f0:70:
39:92:08:b0:bf:0e:71:98:94:6e:0a:e2:52:eb:04:
71:ca:14:d0:09:87:d7:8c:25:88:c8:7c:6c:20:38:
4d:95:d6:5a:8e:06:7b:82:52:f5:e0:f5:86:0e:ae:
28:ed:d6:80:66:6a:dd:4e:bb:66:f7:9e:ec:09:c1:
98:2b:e6:50:8e:55:d6:cc:c9:21:56:c5:5d:c3:26:
e0:aa:7b:57:4b:42:d6:69:cb:c0:93:0f:6d:66:e1:
6c:f2:27:0a:17:1b:f4:68:b1:f2:06:2c:b1:1d:f4:
4c:ca:93:86:e1:0c:60:2f:0e:ac:aa:11:88:08:da:
81:1f:33:3f:fc:ad:d0:a7:f4:7d:6d:ba:0d:f7:6c:
92:af:bd:c6:e6:d6:35:92:d9:71:6c:9e:bf:dc:1a:
ae:58:d0:4a:0f:ea:24:40:47:7d:95:a3:ca:d6:d4:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:E3:E8:DB:E4:EE:A1:ED:AE:45:01:B4:CF:3D:A5:EE:6F:48:5E
X509v3 Authority Key Identifier:
keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/619B0B285AE611E781C33D7CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.33.22.0/24
IPv6:
2001:df3:ba00::/48
Signature Algorithm: sha256WithRSAEncryption
2b:f7:90:2f:02:b3:02:41:66:8c:4e:66:ce:60:06:b5:0f:8b:
96:6f:26:79:5e:20:3d:37:d9:3d:21:32:41:67:7e:55:1b:e4:
a7:d3:ca:90:f4:cd:4b:70:2d:1d:55:d7:f7:25:93:b4:c0:bc:
ef:08:79:df:84:b2:ab:7e:46:6e:03:c8:96:ce:29:a6:44:0a:
14:e7:01:68:15:a9:2f:5e:11:a0:74:ac:ae:0f:69:88:02:43:
09:5c:e7:7b:bf:7d:86:91:3b:9f:70:0c:2d:96:d1:46:9c:81:
26:5c:5f:66:63:d2:02:88:58:01:8d:84:ab:01:e5:b4:24:cf:
e6:b0:34:31:bc:b9:0b:0d:33:e4:1a:ba:f6:31:e3:e0:40:50:
d2:1e:dc:fc:e3:c6:8d:0b:27:ab:31:39:d9:db:dd:48:83:a0:
4b:d1:0c:f1:04:07:4b:c8:1f:01:67:83:ba:1a:f3:5b:8e:9d:
a5:5e:5e:f4:fd:09:b4:6f:60:b9:0d:9a:a9:88:5f:7e:db:ea:
c8:d9:cf:58:81:b4:69:56:f0:64:6c:59:68:99:9f:33:64:6c:
9c:39:75:0f:fb:f6:f9:66:4c:3c:3f:ce:38:3b:a2:3b:80:3c:
9b:84:ee:4d:0e:83:88:d3:c9:e5:87:a4:45:a9:bb:31:05:da:
c6:87:d5:03
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICHRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw
QjUxOEE0MEEwHhcNMjYwODE4MTYzMDA1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0ODg4ZC04YzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlaB8zdEJIiqiVEXiDdN2QGfuj0jYU5yha4brTxBCIu+e/iHbPeN260GWNd07
HpvfUhCFUYomAGGuETVpxggqUAp4qk4eCXevLBAdrNqQl2EgjfzOkh8g8HA5kgiw
vw5xmJRuCuJS6wRxyhTQCYfXjCWIyHxsIDhNldZajgZ7glL14PWGDq4o7daAZmrd
Trtm957sCcGYK+ZQjlXWzMkhVsVdwybgqntXS0LWacvAkw9tZuFs8icKFxv0aLHy
BiyxHfRMypOG4QxgLw6sqhGICNqBHzM//K3Qp/R9bboN92ySr73G5tY1ktlxbJ6/
3BquWNBKD+okQEd9laPK1tT3lwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFM0W4+jb
5O6h7a5FAbTPPaXub0heMB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx
QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0NBRTkvMDhEQTYwQzZGMUIyMTFFNjhFNzRBMjZDQzRGOUFFMDIvNjE5QjBCMjg1
QUU2MTFFNzgxQzMzRDdDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAyyEWMA8EAgACMAkDBwAgAQ3zugAwDQYJKoZIhvcNAQELBQADggEB
ACv3kC8CswJBZoxOZs5gBrUPi5ZvJnleID032T0hMkFnflUb5KfTypD0zUtwLR1V
1/clk7TAvO8Ied+Esqt+Rm4DyJbOKaZEChTnAWgVqS9eEaB0rK4PaYgCQwlc53u/
fYaRO59wDC2W0UacgSZcX2Zj0gKIWAGNhKsB5bQkz+awNDG8uQsNM+QauvYx4+BA
UNIe3Pzjxo0LJ6sxOdnb3UiDoEvRDPEEB0vIHwFng7oa81uOnaVeXvT9CbRvYLkN
mqmIX37b6sjZz1iBtGlW8GRsWWiZnzNkbJw5dQ/79vlmTDw/zjg7ojuAPJuE7k0O
g4jTyeWHpEWpuzEF2saH1QM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:33:59 2026 by rpki-client