
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa
File: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (raw, json)
Hash identifier: Ac7X99DxUp0Dn7A2xvd+MVtZjf1AVoPEeK//7YEAY68=
Subject key identifier: 5C:92:B4:BE:BB:61:7D:A5:35:72:4C:75:F1:7D:A3:FA:BB:60:53:DD
Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Certificate serial: 1D12
Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa
Signing time: Tue 18 Aug 2026 16:30:02 +0000
ROA not before: Tue 18 Aug 2026 16:30:02 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 134808
IP address blocks: 203.33.22.0/24 maxlen: 24
2001:df3:ba00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 16:07:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7442 (0x1d12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CAE9, serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A
Validity
Not Before: Aug 18 16:30:02 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a84888a-8699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:2a:a3:06:2f:d5:12:88:4a:08:cd:2c:6b:
2c:e4:d2:99:f7:98:aa:9c:33:37:d7:e1:f2:5b:c8:
7d:70:63:2c:7d:87:07:ed:00:18:45:42:0d:79:02:
55:e8:35:a3:4d:3b:4a:c9:55:78:e0:60:64:86:41:
f2:9b:95:8b:6c:1e:5f:cb:25:e5:74:8a:d7:7b:ab:
43:b5:f6:98:b4:9c:4b:01:9c:c8:db:ea:60:71:7a:
a9:0c:ee:bf:07:eb:7a:e1:d6:65:34:78:05:34:02:
ae:f9:9a:f0:54:2e:c0:10:fb:e8:17:5d:d8:49:af:
40:8a:34:42:36:81:d4:a3:88:eb:59:b3:18:5d:4b:
fd:c7:d9:2c:ff:af:a8:ac:3c:de:d6:6f:ce:51:1d:
67:e9:8c:bf:70:ba:5d:0e:52:32:8d:31:24:35:27:
55:ea:0c:d1:7b:9b:d0:73:49:68:8e:b8:df:55:f0:
e6:69:fe:4b:61:e0:31:7f:9f:cc:dd:0e:ef:d7:61:
f0:87:00:7a:02:84:74:21:2a:d6:c7:f7:73:e3:77:
9f:71:4e:14:03:c5:b8:e2:59:cf:e7:ed:a3:a6:29:
d4:f0:62:28:65:ef:8e:4d:ae:2c:ba:2b:c1:da:43:
88:35:0d:d9:2f:8a:56:e2:d8:46:7e:20:00:73:ca:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:92:B4:BE:BB:61:7D:A5:35:72:4C:75:F1:7D:A3:FA:BB:60:53:DD
X509v3 Authority Key Identifier:
keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.33.22.0/24
IPv6:
2001:df3:ba00::/48
Signature Algorithm: sha256WithRSAEncryption
13:44:da:93:92:04:67:b9:c5:1f:5b:1e:9f:e3:98:99:ca:05:
fb:58:8f:a1:7d:42:9c:da:56:97:79:49:ee:ef:49:e1:e2:5b:
79:e8:0f:e8:c9:dd:46:2f:2e:77:90:4c:79:90:a2:e7:30:63:
6c:b3:9e:72:de:cf:1f:14:1a:50:ad:1d:fb:3a:ab:09:0f:74:
53:af:5a:27:06:36:60:de:07:27:d9:3f:e2:72:7c:a1:d3:9d:
08:1e:b9:c7:99:43:a8:8f:7f:00:3d:6b:be:10:8f:7d:9d:77:
db:da:c0:1c:75:0a:89:f2:fa:ae:52:7e:b6:fb:00:fc:94:84:
6a:a6:70:86:31:82:c4:b7:c6:b6:bd:c1:92:4f:3a:a0:71:38:
70:c2:87:1d:3e:ff:56:98:0e:fe:97:f9:1b:1d:e4:92:53:8a:
bf:e2:d8:1c:d8:a1:2a:f1:64:90:ff:45:ee:26:76:7a:89:da:
cf:e4:9c:66:6b:8d:81:60:d8:00:4b:52:71:8a:da:60:f8:40:
ec:07:0d:8f:82:a7:dd:70:21:cd:f0:f7:4f:24:c9:7b:af:62:
34:83:d5:12:bf:4e:93:b1:d9:32:a5:34:5e:ff:b1:2a:da:c1:
56:b9:e4:f8:4c:32:c9:a8:ba:c9:f2:10:1b:08:9f:04:c2:16:
a2:73:6d:ca
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICHRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw
QjUxOEE0MEEwHhcNMjYwODE4MTYzMDAyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg0ODg4YS04Njk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmNMqowYv1RKISgjNLGss5NKZ95iqnDM31+HyW8h9cGMsfYcH7QAYRUINeQJV
6DWjTTtKyVV44GBkhkHym5WLbB5fyyXldIrXe6tDtfaYtJxLAZzI2+pgcXqpDO6/
B+t64dZlNHgFNAKu+ZrwVC7AEPvoF13YSa9AijRCNoHUo4jrWbMYXUv9x9ks/6+o
rDze1m/OUR1n6Yy/cLpdDlIyjTEkNSdV6gzRe5vQc0lojrjfVfDmaf5LYeAxf5/M
3Q7v12HwhwB6AoR0ISrWx/dz43efcU4UA8W44lnP5+2jpinU8GIoZe+OTa4suivB
2kOINQ3ZL4pW4thGfiAAc8qrHwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFyStL67
YX2lNXJMdfF9o/q7YFPdMB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx
QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0NBRTkvMDhEQTYwQzZGMUIyMTFFNjhFNzRBMjZDQzRGOUFFMDIvNDg2RjgxQ0U0
QjRCMTFFNzlGMkZGMzdCQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAyyEWMA8EAgACMAkDBwAgAQ3zugAwDQYJKoZIhvcNAQELBQADggEB
ABNE2pOSBGe5xR9bHp/jmJnKBftYj6F9QpzaVpd5Se7vSeHiW3noD+jJ3UYvLneQ
THmQoucwY2yznnLezx8UGlCtHfs6qwkPdFOvWicGNmDeByfZP+JyfKHTnQgeuceZ
Q6iPfwA9a74Qj32dd9vawBx1Cony+q5Sfrb7APyUhGqmcIYxgsS3xra9wZJPOqBx
OHDChx0+/1aYDv6X+Rsd5JJTir/i2BzYoSrxZJD/Re4mdnqJ2s/knGZrjYFg2ABL
UnGK2mD4QOwHDY+Cp91wIc3w908kyXuvYjSD1RK/TpOx2TKlNF7/sSrawVa55PhM
MsmousnyEBsInwTCFqJzbco=
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:18:48 2026 by rpki-client