
$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
File: 1CED22CCEEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier: yCZ1YjOxjTNparFE9ezut6qYMPYgcu+lh0VxqkB60X0=
Subject key identifier: 79:EB:CD:26:45:D4:C9:EA:11:9F:5B:36:0B:39:DD:93:B0:5E:07:E4
Certificate issuer: /CN=A911695A/serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Certificate serial: 40
Authority key identifier: 22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
Signing time: Mon 02 Mar 2026 04:39:32 +0000
ROA not before: Sun 11 Jan 2026 08:18:30 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 147176
IP address blocks: 138.252.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:13:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911695A, serialNumber=2226627B73E51546B3BD510E0E2A0DEAA8252078
Validity
Not Before: Jan 11 08:18:30 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a51484-7179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:cf:fd:60:94:d3:e2:bd:02:46:ff:ac:b6:
7f:d6:cd:ff:20:6b:7b:63:89:46:9d:ba:65:e7:d4:
93:d0:17:95:53:a0:38:ce:bd:07:fe:4e:31:93:2b:
34:c8:8a:4d:53:fb:12:1e:57:52:ad:d8:4a:39:82:
0a:3a:65:7d:38:67:71:7c:3a:1b:8e:77:e4:70:20:
b1:ad:08:ee:ac:e1:b8:96:28:44:8f:5e:c5:46:56:
66:25:d2:2d:21:01:d3:46:14:70:c5:3c:41:98:d0:
9a:55:87:10:5a:0e:0a:aa:36:d3:ad:22:00:4a:f2:
c1:6f:0e:1c:eb:80:f3:e5:a8:11:0d:b5:2b:bd:00:
e3:d3:41:81:7b:c6:bb:89:97:ef:36:98:c5:b5:1b:
dc:48:aa:38:5d:63:a9:d4:96:7a:da:a2:21:cb:4f:
1b:b3:db:2e:74:2e:98:0a:f2:a1:4e:59:80:17:36:
a9:99:cc:6f:6f:1d:b9:bf:d2:a2:c8:c7:f7:81:73:
0a:4b:c2:b2:da:32:14:9c:57:b7:81:cb:19:0c:d9:
0b:02:d2:3e:7a:02:21:76:d8:99:21:e7:b4:80:dd:
7d:6b:20:2b:3f:fe:53:5e:35:a2:d0:cc:f0:ac:cf:
47:c7:f6:00:a3:08:c0:71:ff:57:16:83:54:b8:50:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EB:CD:26:45:D4:C9:EA:11:9F:5B:36:0B:39:DD:93:B0:5E:07:E4
X509v3 Authority Key Identifier:
keyid:22:26:62:7B:73:E5:15:46:B3:BD:51:0E:0E:2A:0D:EA:A8:25:20:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/IiZie3PlFUazvVEODioN6qglIHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiZie3PlFUazvVEODioN6qglIHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/5A797140C8F111F080EE3776C4F9AE02/1CED22CCEEC611F0B6553517716F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
138.252.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0f:ab:1a:c1:9c:04:e6:2a:58:b1:77:b9:00:97:aa:f2:c1:
09:e0:71:21:6a:71:81:49:2a:41:95:b1:ec:8c:4c:d1:7e:2a:
e5:81:e8:78:f5:68:cb:ea:18:c3:40:06:42:f0:05:37:41:0d:
5a:fe:12:09:59:42:55:6e:ae:51:94:30:fc:e1:80:3b:f0:34:
1d:5c:0a:e4:0f:3a:17:45:f2:52:48:0d:01:9b:61:0f:15:6c:
34:94:0e:c9:7e:0f:dc:26:de:9b:4e:fd:d5:e7:d0:5e:77:f2:
94:48:54:c7:14:d4:81:1f:59:ca:9d:54:26:63:0f:02:71:e8:
e9:45:c2:98:ee:34:2e:af:e4:ef:79:e5:c8:0d:5e:9d:e3:1d:
05:da:33:a8:52:59:15:19:bc:8f:8e:ab:d2:f8:92:60:5e:41:
16:98:8b:e3:65:cd:29:f7:4e:f1:24:f1:3c:2f:b1:8b:aa:74:
0a:ce:e3:62:ec:32:fa:8a:f7:1c:a2:21:aa:0b:45:01:cc:91:
f1:9e:64:2f:98:32:50:c9:c7:ca:1f:96:0e:2f:02:89:69:49:
1c:25:20:ba:0e:fd:b8:ad:c7:22:a3:6d:1d:70:33:45:ef:25:
ff:62:f8:c0:f8:ec:02:ab:f9:6b:f8:62:0c:be:93:55:78:6b:
72:3a:a4:fe
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Njk1QTExMC8GA1UEBRMoMjIyNjYyN0I3M0U1MTU0NkIzQkQ1MTBFMEUyQTBERUFB
ODI1MjA3ODAeFw0yNjAxMTEwODE4MzBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTUxNDg0LTcxNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMr8/9YJTT4r0CRv+stn/Wzf8ga3tjiUadumXn1JPQF5VToDjOvQf+TjGTKzTI
ik1T+xIeV1Kt2Eo5ggo6ZX04Z3F8OhuOd+RwILGtCO6s4biWKESPXsVGVmYl0i0h
AdNGFHDFPEGY0JpVhxBaDgqqNtOtIgBK8sFvDhzrgPPlqBENtSu9AOPTQYF7xruJ
l+82mMW1G9xIqjhdY6nUlnraoiHLTxuz2y50LpgK8qFOWYAXNqmZzG9vHbm/0qLI
x/eBcwpLwrLaMhScV7eByxkM2QsC0j56AiF22Jkh57SA3X1rICs//lNeNaLQzPCs
z0fH9gCjCMBx/1cWg1S4UNxrAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUeevNJkXU
yeoRn1s2Czndk7BeB+QwHwYDVR0jBBgwFoAUIiZie3PlFUazvVEODioN6qglIHgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTVBLzVBNzk3MTQwQzhG
MTExRjA4MEVFMzc3NkM0RjlBRTAyL0lpWmllM1BsRlVhenZWRU9EaW9ONnFnbElI
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSWlaaWUzUGxGVWF6dlZFT0Rpb042cWdsSUhnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Njk1QS81QTc5NzE0MEM4RjExMUYwODBFRTM3NzZDNEY5QUUwMi8xQ0VEMjJDQ0VF
QzYxMUYwQjY1NTM1MTc3MTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACK/F0wDQYJKoZIhvcNAQELBQADggEBAE0PqxrBnATmKlixd7kAl6ry
wQngcSFqcYFJKkGVseyMTNF+KuWB6Hj1aMvqGMNABkLwBTdBDVr+EglZQlVurlGU
MPzhgDvwNB1cCuQPOhdF8lJIDQGbYQ8VbDSUDsl+D9wm3ptO/dXn0F538pRIVMcU
1IEfWcqdVCZjDwJx6OlFwpjuNC6v5O955cgNXp3jHQXaM6hSWRUZvI+Oq9L4kmBe
QRaYi+NlzSn3TvEk8TwvsYuqdArO42LsMvqK9xyiIaoLRQHMkfGeZC+YMlDJx8of
lg4vAolpSRwlILoO/bitxyKjbR1wM0XvJf9i+MD47AKr+Wv4Ygy+k1V4a3I6pP4=
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:12 2026 by rpki-client