
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/C3876BD8589D11EC9CF19A41C4F9AE02.roa
File: C3876BD8589D11EC9CF19A41C4F9AE02.roa (raw, json)
Hash identifier: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=
Subject key identifier: 5B:1B:1B:CF:18:1A:16:8E:8F:D4:81:A8:01:57:F2:71:66:F8:87:A6
Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Certificate serial: 29A2
Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/C3876BD8589D11EC9CF19A41C4F9AE02.roa
Signing time: Sun 01 Mar 2026 16:41:10 +0000
ROA not before: Sat 20 Dec 2025 16:12:55 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4764
IP address blocks: 202.84.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 15:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10658 (0x29a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD
Validity
Not Before: Dec 20 16:12:55 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a46c26-a920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:ca:a1:c5:80:6b:bc:b9:7d:5c:3b:a4:5b:
84:a4:0e:87:3a:67:5c:77:ed:de:b2:03:d2:6d:1e:
28:a4:33:cb:ed:d4:1d:7c:25:ea:27:b0:3b:ff:fb:
35:50:81:46:9c:22:ba:23:89:47:d1:2e:d8:59:13:
63:a6:ab:73:25:8f:d2:db:2a:e3:62:fe:17:34:06:
6d:20:63:30:09:9d:90:21:6a:30:e8:f1:4e:1a:17:
3e:6d:04:4b:60:cf:32:59:39:2c:66:54:ea:e9:c3:
18:d8:12:ea:5f:82:00:e0:8a:32:46:1c:27:69:b1:
28:87:5e:79:2d:ac:44:42:bb:2f:eb:c7:b8:5c:53:
82:ac:dc:00:a8:e3:25:39:24:67:0f:d1:87:41:98:
b9:51:43:f0:ca:ec:21:ed:1e:77:c9:7e:9a:04:36:
c4:5c:72:5b:08:46:cb:73:b5:27:f5:06:2b:91:15:
95:40:7e:3b:a1:56:fb:63:66:3a:c5:76:32:2d:9c:
38:a0:ea:46:f0:93:0e:6d:8f:5f:d6:67:a2:09:d3:
14:6c:c6:43:a6:31:de:c3:bc:83:ea:16:0b:70:6f:
07:b8:34:46:3c:58:a8:93:65:7f:2c:1e:fd:3a:11:
a3:d9:8f:4d:e4:1e:9d:16:e1:57:99:9c:bf:50:2d:
53:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:1B:CF:18:1A:16:8E:8F:D4:81:A8:01:57:F2:71:66:F8:87:A6
X509v3 Authority Key Identifier:
keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/C3876BD8589D11EC9CF19A41C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.84.20.0/23
Signature Algorithm: sha256WithRSAEncryption
95:33:34:bc:67:86:9f:00:a6:4f:be:a4:72:a2:9e:a6:64:dc:
00:9f:39:66:a8:95:96:f2:0f:00:6f:3b:df:a4:66:a5:b1:4c:
21:17:9f:c8:78:e4:e4:5c:94:fa:6f:9b:61:df:a3:b1:0f:30:
3a:47:3c:c7:ae:d1:52:23:aa:66:f6:45:ba:fd:f4:ee:c2:ce:
f4:48:62:51:1c:11:db:66:76:30:4d:ef:2a:a8:c1:34:49:7c:
c6:5d:4b:fb:ab:df:9a:0f:cd:28:48:4c:b7:f7:6e:ff:b7:d5:
22:ea:1c:45:da:9d:74:91:93:40:da:78:04:3f:d1:f2:12:10:
c0:68:d5:18:da:a7:af:48:c5:b3:e4:cd:39:4a:e7:72:53:0f:
f2:df:01:4f:d7:4a:f4:da:0d:64:12:a0:09:22:df:49:59:d0:
76:c0:18:48:ca:98:b4:e7:ee:64:63:6a:2b:f1:5f:bf:e5:fd:
4e:82:92:58:34:c1:22:bd:ae:e6:d0:86:b6:fe:b9:75:6f:48:
8f:94:3b:4c:6d:56:f4:d7:3c:ae:5c:51:38:c4:12:08:9e:3c:
ea:33:4c:e2:3d:d7:b4:09:1c:40:b8:6c:d3:c2:a6:18:0f:04:
14:16:51:f8:73:bd:89:5b:f4:aa:3a:7c:97:3a:2d:13:24:14:
d0:97:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:04:36 2026 by rpki-client