
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa
File: 11D961427C0311EBB2F8C86CC4F9AE02.roa (raw, json)
Hash identifier: CjO+8I3DQiWAPJtsp249rNJBqgAtu38CyLjJYCf1kgU=
Subject key identifier: 5C:F8:B5:59:42:12:6F:60:C0:B3:8A:2E:71:40:19:C4:23:D9:9F:1D
Certificate issuer: /CN=A915D99A/serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Certificate serial: 356D
Authority key identifier: D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:10:45 +0000
ROA not before: Mon 10 Mar 2025 14:30:54 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 18025
IP address blocks: 45.64.248.0/23 maxlen: 23
45.64.250.0/24 maxlen: 24
2405:d000:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13677 (0x356d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D99A, serialNumber=D17D77CB0C89B994CDDACBA275270A1E74DCAA27
Validity
Not Before: Mar 10 14:30:54 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=69a42cc4-b900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:47:be:8e:35:22:ae:0d:ec:e5:83:22:9a:70:
f5:0b:8a:23:77:e7:9c:a4:e5:e7:6b:14:47:2d:96:
3b:b1:f5:8f:f6:f0:d9:14:79:89:b6:b8:1a:86:45:
ac:48:4d:7e:a9:5c:bb:74:d5:ed:57:b8:b4:ca:d1:
c1:76:93:f2:ab:c3:89:6b:c8:c0:3a:ed:d1:6a:97:
75:64:e8:0f:52:62:95:c8:b8:98:8e:ef:5a:02:b9:
04:a7:53:69:42:3e:bf:d0:39:79:92:12:4a:85:af:
e8:ae:b9:45:0c:60:af:31:74:13:0e:04:b8:0a:66:
b9:de:28:ab:53:07:22:66:f4:ee:d5:8c:81:4c:1f:
d7:e1:9e:44:77:ad:4d:fd:4a:fa:5c:fe:b1:70:1d:
2a:4b:7c:8f:48:f5:b0:e8:d9:0e:a6:07:2f:9a:64:
63:96:24:26:46:e6:b9:8b:b3:52:e3:6b:42:b1:e1:
3d:c6:b7:47:6f:df:ab:89:ed:f8:82:c9:5d:8a:95:
55:5b:85:4f:bf:7d:7a:06:1d:e8:e0:02:be:cd:ee:
10:0a:e3:18:56:56:ca:68:1e:f9:c8:e0:9e:06:1e:
bb:ca:5b:9f:3b:1d:c3:b1:6c:27:7c:75:6c:c2:26:
92:ad:11:d1:b9:fd:b9:e2:88:20:ac:72:2b:a2:6b:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F8:B5:59:42:12:6F:60:C0:B3:8A:2E:71:40:19:C4:23:D9:9F:1D
X509v3 Authority Key Identifier:
keyid:D1:7D:77:CB:0C:89:B9:94:CD:DA:CB:A2:75:27:0A:1E:74:DC:AA:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/0X13ywyJuZTN2suidScKHnTcqic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0X13ywyJuZTN2suidScKHnTcqic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D99A/178822DA1D8511E2A82A7CDB08B02CD2/11D961427C0311EBB2F8C86CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.64.248.0-45.64.250.255
IPv6:
2405:d000:6000::/36
Signature Algorithm: sha256WithRSAEncryption
c3:b4:1b:34:f1:81:8e:68:a3:d3:fe:35:a6:f5:e4:00:34:07:
18:f2:d7:5e:8f:e4:12:a8:f2:4f:4a:a7:2b:f8:9d:9b:19:58:
a3:ed:22:9c:cf:48:a3:f4:0d:3c:8a:43:e1:bf:cb:44:52:de:
f3:9d:f0:0e:92:74:88:9d:5a:6e:ab:fa:13:14:e3:ce:f0:11:
68:a3:fb:c9:3a:bb:6b:89:75:73:44:4c:b1:85:bd:c7:ad:80:
68:85:3f:96:23:fe:3b:4d:64:5f:53:1a:3b:13:df:54:b9:89:
b6:4d:8a:e5:72:4a:40:5d:bb:91:7c:e5:23:fa:2d:fa:f0:9b:
8b:5c:a1:cc:df:c0:49:72:ff:d2:89:c8:08:ea:a1:34:3a:30:
ad:b7:66:b0:b4:1e:24:16:ff:4d:93:5a:e5:b0:23:4d:dd:85:
3c:e4:7c:33:cc:d4:c9:40:cc:99:d1:bb:ee:92:29:d3:00:81:
8e:0f:82:79:41:7e:de:c3:6e:fc:61:e9:35:04:65:10:62:f8:
cf:1e:3e:3f:21:e3:5b:af:52:8b:43:74:43:1d:20:4d:f2:0a:
7e:d8:3b:fa:a4:6f:28:8b:ca:2d:e5:47:51:54:a1:1e:cd:67:
d5:0c:b8:21:a5:b4:4b:dd:a5:2e:b5:5e:6b:2f:83:72:c0:40:
e9:84:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:01 2026 by rpki-client