
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa
File: E821F266B68411F18DFEAAE13C11F970.roa (raw, json)
Hash identifier: 3xucjeONyRZhZBoCVmTeWg8bAEUTlhhckWOpYl5wYT8=
Subject key identifier: 83:3D:C0:5F:49:32:F2:56:41:61:E3:10:85:5B:58:A7:1D:4B:65:FE
Certificate issuer: /CN=A911CCA8/serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97
Certificate serial: 0B
Authority key identifier: FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa
Signing time: Tue 06 Oct 2026 07:17:21 +0000
ROA not before: Tue 06 Oct 2026 07:17:21 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 139304
IP address blocks: 163.52.240.0/23 maxlen: 24
2001:df7:9340::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl
rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 07:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CCA8, serialNumber=FDC74A2A269F0FA9FC2A73256FAC9DBF81383A97
Validity
Not Before: Oct 6 07:17:21 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac4a081-c4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:59:5f:92:b2:f1:c5:56:5d:c6:84:4d:2c:34:
43:55:47:f5:f8:9b:02:5e:3b:2c:2b:bf:23:5f:62:
46:f8:17:03:67:b5:ef:70:16:40:22:f5:7a:1c:99:
11:a9:7e:b6:46:92:9f:51:3e:0e:cc:c3:5d:64:23:
73:70:2e:2a:94:d3:06:47:39:4c:1a:9a:db:5c:3a:
0c:ba:b5:96:db:d6:2a:16:99:2b:e5:6f:d7:88:01:
2c:0d:9f:b9:5c:9f:91:8e:ee:04:3c:76:10:c7:50:
90:74:5f:03:05:66:0d:97:8a:68:2d:84:85:fe:8d:
d9:76:0d:56:d2:a9:a2:b9:34:1a:2c:6f:9d:07:f7:
d3:5e:1b:d0:01:fe:75:2a:f3:3e:97:5f:c9:a2:07:
98:3f:3d:de:37:01:68:0b:77:00:0d:c5:f8:fd:ee:
22:5c:1f:4d:17:6a:93:1d:78:b4:9f:44:37:67:60:
65:29:fe:73:63:2a:ce:86:56:b4:22:b9:b8:29:ed:
87:42:bd:f0:23:97:0c:bb:3c:f0:4b:a5:bf:a2:40:
7b:7f:ca:d0:47:bd:2c:2a:8f:ce:be:24:ec:61:95:
ec:17:c6:a0:80:0e:1d:7d:d0:80:57:a8:1a:b7:b8:
7f:88:c0:89:c4:e9:0a:9b:a7:f3:38:95:34:b6:8c:
06:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3D:C0:5F:49:32:F2:56:41:61:E3:10:85:5B:58:A7:1D:4B:65:FE
X509v3 Authority Key Identifier:
keyid:FD:C7:4A:2A:26:9F:0F:A9:FC:2A:73:25:6F:AC:9D:BF:81:38:3A:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/_cdKKiafD6n8KnMlb6ydv4E4Opc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_cdKKiafD6n8KnMlb6ydv4E4Opc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CCA8/4EA1A93EB68311F190C2BF6A3C11F970/E821F266B68411F18DFEAAE13C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
163.52.240.0/23
IPv6:
2001:df7:9340::/48
Signature Algorithm: sha256WithRSAEncryption
ba:9e:13:bc:67:79:ab:cb:c9:3c:6e:4e:eb:53:27:3d:dd:3c:
5e:78:67:78:4d:ed:7f:89:2f:fe:f8:34:96:bc:75:26:b1:3b:
35:9c:fe:c2:f3:74:0f:50:cb:0e:96:36:25:67:1f:63:25:be:
86:d9:fd:54:db:a7:5b:a6:6d:b5:7b:53:6e:82:49:80:f0:f0:
ba:7e:66:d1:0d:74:a7:50:22:e4:4c:24:e1:5d:60:2f:16:b8:
bd:7f:47:25:3b:8c:af:61:b8:39:a8:64:8c:d0:34:e4:8e:4d:
48:c4:b0:95:d4:7b:3f:23:08:09:a8:9e:57:a1:2f:6b:d3:88:
78:a6:ea:de:47:8e:59:0a:73:55:59:e4:3d:ed:db:1b:0d:ed:
bd:cf:34:d0:6e:72:4f:35:84:11:37:b3:fa:e2:36:a5:98:a2:
14:0a:e0:0b:6d:dc:57:af:fc:fd:2e:50:25:bc:86:63:2c:e7:
3e:d7:16:ac:f7:65:99:25:2f:8e:2b:a0:df:a1:0c:18:80:dc:
40:b3:6c:c6:a3:3c:aa:43:96:d7:f8:99:c8:9c:61:ef:b3:4d:
11:d6:08:94:6b:75:88:8d:79:ba:37:d9:39:fb:03:bb:f2:cb:
a6:93:5b:2c:a5:2c:78:0b:84:d7:22:f9:40:31:70:59:1d:69:
4b:9f:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:55:28 2026 by rpki-client