
$ rpki-client -vvf rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa
File: E652AA52C40911EBA930053BC4F9AE02.roa (raw, json)
Hash identifier: sEb1EJmWVcSgKGVkUz52jLxfQvAvzd6VdzWj6R//XeM=
Subject key identifier: FA:59:1A:86:8E:45:A0:77:A1:65:09:8B:B9:19:6A:82:67:12:55:79
Certificate issuer: /CN=A913ED35/serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Certificate serial: 3590
Authority key identifier: 7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:25:58 +0000
ROA not before: Fri 18 Jul 2025 14:50:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 141047
IP address blocks: 111.119.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13712 (0x3590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ED35, serialNumber=7EE945E9E5E51C4B41D99C4332952F9C95876608
Validity
Not Before: Jul 18 14:50:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a476a6-e37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:b6:4a:3d:23:5c:ff:11:9c:89:b1:9a:9c:
d1:d0:29:66:11:43:72:35:bc:e1:89:3e:e7:73:8e:
60:04:81:d4:c2:ba:65:af:c6:76:d9:d7:0f:34:95:
f2:5b:8c:5e:5a:35:b6:75:ae:72:ac:b8:89:17:30:
02:f2:0f:1a:4b:f6:26:3a:ad:42:08:98:ad:f2:ec:
e3:08:e0:57:fc:d8:13:df:24:75:ac:27:8b:ae:b9:
19:5a:a1:1b:ca:12:c5:c1:63:f9:16:56:90:42:10:
14:e3:d3:b1:cf:53:54:a8:ec:35:dd:bc:77:5b:12:
2e:fc:41:24:4c:d9:b7:9d:58:92:9a:c9:fa:7b:18:
e3:2f:f1:d0:f8:a3:98:50:93:91:e8:02:8c:52:74:
67:b3:7c:6d:88:e6:d8:90:12:14:7e:91:0a:85:29:
3d:4b:34:1c:38:c5:ee:25:8e:fa:04:78:7f:90:72:
9e:a7:25:0f:97:bc:ba:fb:ac:65:4e:fc:70:f2:87:
10:6f:9c:b0:81:d5:91:a2:96:e4:12:7b:db:fc:33:
dd:4c:24:c5:cb:7a:24:24:3e:6f:bd:6b:48:a0:f4:
aa:9c:b1:4d:4b:39:79:3f:7b:3c:b1:3b:7f:21:8c:
85:52:b7:de:74:79:50:32:f2:56:d2:da:10:76:43:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:59:1A:86:8E:45:A0:77:A1:65:09:8B:B9:19:6A:82:67:12:55:79
X509v3 Authority Key Identifier:
keyid:7E:E9:45:E9:E5:E5:1C:4B:41:D9:9C:43:32:95:2F:9C:95:87:66:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fulF6eXlHEtB2ZxDMpUvnJWHZgg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ED35/B63BA7EE1D9411E29D1A2EF908B02CD2/E652AA52C40911EBA930053BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
111.119.40.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:dd:16:67:56:cd:d6:5b:d7:50:64:6f:a5:97:c2:fb:54:66:
d4:3f:be:15:c0:bb:da:91:51:7f:71:2c:df:89:eb:1a:60:21:
a1:31:08:6a:c3:e0:c7:f2:dc:27:11:88:d6:2f:c2:13:e0:46:
30:d2:7d:48:0b:ec:2e:11:a9:b4:25:11:27:8e:18:0a:90:9a:
cd:8a:52:5d:38:46:d9:c0:3a:ef:74:29:c7:00:f2:f7:28:49:
26:34:37:4d:5f:29:11:e8:47:74:d1:51:24:7b:97:7f:7a:b6:
ac:b1:1a:c3:a4:e0:91:73:26:64:9d:56:3d:65:e5:39:45:ba:
06:27:bc:df:63:e0:a1:e5:5c:47:30:bf:30:64:ef:e9:d8:bf:
9a:b6:7e:3f:9b:ef:5d:a1:4c:fc:39:c4:28:5e:75:96:9c:b9:
03:d5:e3:38:d5:79:92:c5:02:3f:3d:71:bc:95:fe:0c:a8:dc:
51:b1:e4:8e:24:40:a9:e4:a5:23:a8:c5:0c:24:40:82:5f:b1:
cb:3e:d2:db:d7:cb:47:46:04:ce:a6:6f:0f:80:2e:bf:34:c7:
3d:6b:6b:7e:27:5e:4e:de:a5:38:e8:99:db:76:0f:78:77:c1:
e5:ac:a6:c7:b7:20:7d:62:6b:23:b5:26:95:33:a0:a4:41:09:
df:3f:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:01 2026 by rpki-client