
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa
File: 22613D48AC7311EE8A97A86FC4F9AE02.roa (raw, json)
Hash identifier: fD5DWHU1EaBea9R/gnFrJ1KabDNAx9C2Atjc3re5F2o=
Subject key identifier: C1:AE:C9:1D:02:B7:DF:3F:03:94:2F:5D:75:F7:96:32:A9:17:33:46
Certificate issuer: /CN=A911ABCE/serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Certificate serial: 026A
Authority key identifier: 30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa
Signing time: Thu 29 Oct 2026 03:51:40 +0000
ROA not before: Thu 29 Oct 2026 03:51:40 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 2914
IP address blocks: 43.239.250.0/24 maxlen: 24
114.31.208.0/22 maxlen: 22
2404:3600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 03:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ABCE, serialNumber=300742E4AD547AE49DD82C82F7ECEB095B902A20
Validity
Not Before: Oct 29 03:51:40 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ae2c2cc-b34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:2e:08:e6:47:27:82:d6:6e:b2:3e:35:06:
d8:ac:15:58:94:93:c3:fd:3d:51:f6:9d:13:1e:d0:
b1:9c:ee:c5:ea:45:65:b4:f3:3d:81:3c:83:4c:e6:
71:9d:a7:d4:77:06:ff:ba:cc:a0:73:f1:aa:1d:65:
76:d0:45:cb:c6:cb:51:fb:bf:c6:26:40:9e:fd:37:
ab:98:58:43:57:08:74:65:e2:e2:86:0b:7d:00:62:
87:66:01:1f:43:ad:74:31:f4:1e:00:ee:fb:ed:a6:
36:c0:c3:6f:f3:8a:d2:f4:f5:05:ea:01:1f:a6:14:
9e:d3:8e:2e:47:2e:23:64:a9:db:04:51:96:45:0e:
bf:f1:2e:41:00:4d:eb:98:76:cb:35:6e:a3:6d:8f:
ca:d6:7a:d2:70:a5:73:15:21:f9:17:36:2e:6f:33:
55:4d:57:ff:1d:31:99:e0:16:89:0a:87:1a:34:11:
e1:be:12:33:ad:9a:dc:87:a1:1a:86:d7:5f:87:ab:
61:8b:14:ea:ba:2f:43:84:1c:a2:87:89:b0:a3:93:
f6:76:15:56:aa:6d:34:95:d7:27:4c:14:c0:a7:6f:
6f:ec:10:16:9c:5b:82:02:99:0c:fc:d9:0e:28:ca:
24:36:e6:f2:59:0b:ad:28:5f:9e:69:2d:52:4f:07:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:C9:1D:02:B7:DF:3F:03:94:2F:5D:75:F7:96:32:A9:17:33:46
X509v3 Authority Key Identifier:
keyid:30:07:42:E4:AD:54:7A:E4:9D:D8:2C:82:F7:EC:EB:09:5B:90:2A:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/MAdC5K1UeuSd2CyC9-zrCVuQKiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MAdC5K1UeuSd2CyC9-zrCVuQKiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ABCE/90099C4057DD11EEBAFFE42DC4F9AE02/22613D48AC7311EE8A97A86FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.250.0/24
114.31.208.0/22
IPv6:
2404:3600::/32
Signature Algorithm: sha256WithRSAEncryption
bf:46:eb:f5:0f:4a:04:28:0f:56:15:0b:bb:10:ed:ad:85:d1:
7a:fc:00:4b:23:c1:a2:80:1c:47:fc:ca:e4:b5:8b:da:82:77:
b4:e3:8c:54:6b:1d:1f:7a:6c:7d:66:a7:11:e2:82:7c:b2:b9:
f4:d6:c8:6d:78:d8:08:3e:24:4c:da:a7:a4:b5:94:4c:fa:d7:
09:66:55:ae:05:0a:2f:5a:6e:fb:80:30:1e:f0:39:1c:0c:4b:
7d:61:a9:c3:4a:9c:31:3d:5e:94:c3:ed:a0:92:f8:cd:65:70:
1a:07:f8:7e:4d:08:46:5b:7e:0c:ba:33:b0:45:68:bc:e0:97:
e0:e0:de:f6:20:4d:b2:67:ae:60:fa:a5:be:a1:9f:79:35:3a:
2e:ab:ec:4f:63:3e:1d:51:12:f6:2c:15:38:7f:49:14:01:f7:
d4:e4:4c:8a:d8:16:9d:3e:4b:d9:5e:a7:83:dc:13:1b:8d:f5:
c0:e5:9f:c8:a9:96:6e:bd:7c:b3:c4:6a:c1:dc:33:7a:f8:4c:
93:4b:50:ff:85:e5:c2:27:23:5c:f6:77:d8:26:73:49:07:c4:
1a:d8:c4:d1:75:b7:3f:b8:ef:5d:84:f3:22:85:a8:03:d8:d7:
4c:86:2d:77:12:21:57:ae:0b:e2:fb:46:35:3f:4c:84:7f:bb:
59:c4:c1:60
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgICAmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFCQ0UxMTAvBgNVBAUTKDMwMDc0MkU0QUQ1NDdBRTQ5REQ4MkM4MkY3RUNFQjA5
NUI5MDJBMjAwHhcNMjYxMDI5MDM1MTQwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWUyYzJjYy1iMzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwaAuCOZHJ4LWbrI+NQbYrBVYlJPD/T1R9p0THtCxnO7F6kVltPM9gTyDTOZx
nafUdwb/usygc/GqHWV20EXLxstR+7/GJkCe/TermFhDVwh0ZeLihgt9AGKHZgEf
Q610MfQeAO777aY2wMNv84rS9PUF6gEfphSe044uRy4jZKnbBFGWRQ6/8S5BAE3r
mHbLNW6jbY/K1nrScKVzFSH5FzYubzNVTVf/HTGZ4BaJCocaNBHhvhIzrZrch6Ea
htdfh6thixTqui9DhByih4mwo5P2dhVWqm00ldcnTBTAp29v7BAWnFuCApkM/NkO
KMokNubyWQutKF+eaS1STwe11QIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFMGuyR0C
t98/A5QvXXX3ljKpFzNGMB8GA1UdIwQYMBaAFDAHQuStVHrkndgsgvfs6wlbkCog
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUJDRS85MDA5OUM0MDU3
REQxMUVFQkFGRkU0MkRDNEY5QUUwMi9NQWRDNUsxVWV1U2QyQ3lDOS16ckNWdVFL
aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01BZEM1SzFVZXVTZDJDeUM5LXpyQ1Z1UUtpQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUFCQ0UvOTAwOTlDNDA1N0REMTFFRUJBRkZFNDJEQzRGOUFFMDIvMjI2MTNENDhB
QzczMTFFRThBOTdBODZGQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS
BAIAATAMAwQAK+/6AwQCch/QMA0EAgACMAcDBQAkBDYAMA0GCSqGSIb3DQEBCwUA
A4IBAQC/Ruv1D0oEKA9WFQu7EO2thdF6/ABLI8GigBxH/MrktYvagne044xUax0f
emx9ZqcR4oJ8srn01shteNgIPiRM2qektZRM+tcJZlWuBQovWm77gDAe8DkcDEt9
YanDSpwxPV6Uw+2gkvjNZXAaB/h+TQhGW34MujOwRWi84Jfg4N72IE2yZ65g+qW+
oZ95NTouq+xPYz4dURL2LBU4f0kUAffU5EyK2BadPkvZXqeD3BMbjfXA5Z/IqZZu
vXyzxGrB3DN6+EyTS1D/heXCJyNc9nfYJnNJB8Qa2MTRdbc/uO9dhPMihagD2NdM
hi13EiFXrgvi+0Y1P0yEf7tZxMFg
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:59:29 2026 by rpki-client