
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa
File: 38F85C12315611F0A6B1097AC4F9AE02.roa (raw, json)
Hash identifier: ghzafIg/0kjxRhwEEzQAR/u8pQaszS9QO+uG2myrS00=
Subject key identifier: 54:85:D4:D7:A8:77:60:55:D8:73:9B:93:C0:C8:62:A9:93:3E:B8:5E
Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial: 09A3
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa
Signing time: Sat 10 Oct 2026 22:44:07 +0000
ROA not before: Sat 10 Oct 2026 22:44:07 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 151373
IP address blocks: 163.53.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2467 (0x9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Validity
Not Before: Oct 10 22:44:07 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6acabfb7-61b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:db:89:e0:ad:99:d8:c2:c2:5d:90:bf:dc:47:
e6:a8:9f:e9:75:fe:77:5c:40:c0:3b:2c:27:da:1b:
3e:e6:de:d7:47:e3:00:f0:d0:f6:01:97:fe:78:a3:
43:4d:2d:41:e4:76:2e:4c:8f:3d:c3:ea:70:c4:27:
9e:24:24:cf:39:aa:e7:08:e7:d7:34:f4:48:e2:85:
4b:36:9e:f9:14:3b:4b:65:b5:fb:87:f0:c5:ad:73:
46:0b:de:95:e6:80:58:9f:bd:f6:35:a0:54:58:d8:
af:7a:34:6a:a7:28:a5:90:3a:e9:e6:56:f8:c8:f1:
7c:cf:41:c4:85:f1:22:00:6e:44:6a:fb:b0:44:91:
22:01:52:de:83:12:3e:80:a0:8e:16:75:95:38:e6:
e9:22:0d:79:13:01:1a:25:6d:b3:0d:04:01:0f:4b:
06:ab:9e:5a:c2:49:d0:43:5c:2d:f6:2c:ec:f1:f2:
25:71:b4:ac:82:04:b2:a0:7b:b0:3f:14:62:50:86:
fc:8d:b2:04:61:f6:42:77:6b:5a:d0:c7:9f:05:bc:
b8:86:40:31:66:9c:0e:f2:1e:4e:46:a2:18:33:50:
e5:7b:e5:c3:f1:49:5b:e1:19:49:09:ee:be:2f:f4:
b7:5d:09:43:28:7d:70:52:7f:f5:b5:98:39:8b:3a:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:85:D4:D7:A8:77:60:55:D8:73:9B:93:C0:C8:62:A9:93:3E:B8:5E
X509v3 Authority Key Identifier:
keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/38F85C12315611F0A6B1097AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
163.53.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d3:45:02:01:0e:13:16:9e:66:e2:b0:1a:70:e7:67:8c:d4:
c5:d6:ad:25:d5:71:27:35:6c:3f:cf:96:a6:99:78:8b:9e:f3:
ce:5b:28:a8:41:3d:c1:8a:0e:ff:ab:2d:32:e7:9a:6d:90:0a:
cf:e8:74:89:5a:f0:04:88:c5:34:77:cf:73:3e:4f:0d:26:48:
fe:c8:b2:da:87:72:06:1d:53:15:44:87:e1:ee:a9:25:da:b5:
2f:c7:5d:e8:3d:87:1d:d7:94:b9:4e:70:ea:6c:03:fc:0b:41:
8d:79:c2:d3:56:e5:8b:7b:08:e1:f1:3a:db:74:28:3d:ca:e9:
01:c0:f7:b4:7f:4c:dd:a7:53:c4:ca:72:91:e3:76:94:8d:42:
f7:1e:96:5b:7c:a8:1f:37:37:cc:79:5a:2b:68:f3:eb:99:8a:
83:4b:f4:da:98:ff:ef:2d:4b:56:af:fc:8b:13:41:59:d5:d9:
11:86:d8:39:1f:2f:33:a4:26:50:d8:a2:c6:ba:18:6a:68:26:
6d:bf:09:e5:23:f6:d2:ed:b4:99:4c:f6:08:56:3d:67:46:56:
96:47:bf:a3:1a:1e:1e:41:d2:fa:93:14:a4:81:9a:5a:a6:c3:
b9:4c:1c:f4:a7:b0:91:27:fd:59:0e:46:83:1c:61:80:90:ee:
4d:ce:d0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:18:31 2026 by rpki-client