
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3F2B28B4D94411E98E28CD85C4F9AE02.roa
File: 3F2B28B4D94411E98E28CD85C4F9AE02.roa (raw, json)
Hash identifier: AZvWQK7f06xAUJY4dpO/43UlHLvvZaFe+yz/9QGpu78=
Subject key identifier: D4:30:73:2A:8C:8D:7A:8D:1C:FA:C9:C6:4B:B1:66:DB:9C:53:07:A6
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 2B2A
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3F2B28B4D94411E98E28CD85C4F9AE02.roa
Signing time: Fri 14 Aug 2026 16:23:25 +0000
ROA not before: Fri 14 Aug 2026 16:23:25 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 24241
IP address blocks: 202.57.108.0/24 maxlen: 24
202.57.117.0/24 maxlen: 24
202.57.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11050 (0x2b2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Aug 14 16:23:25 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7f40fd-6002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6a:6c:6f:53:9a:de:3e:72:37:54:9b:b8:bd:
ab:2e:47:ef:bc:8d:76:24:73:7a:f0:7c:b5:41:78:
c5:5d:af:ee:56:d8:57:ca:c9:0a:44:04:af:be:8a:
7a:a0:5c:a2:77:c8:8a:82:b8:88:b2:a3:45:9c:45:
04:d2:cb:d5:17:24:15:f2:61:a0:f1:72:2a:18:86:
d0:4b:cc:57:b9:23:3e:f2:c6:95:76:f2:65:5b:ab:
3e:75:c8:49:4d:95:a8:a1:65:d5:72:81:6d:41:59:
60:a9:25:b2:94:9e:d8:64:5d:4f:d9:2a:a6:1a:f1:
ca:84:c5:fc:80:ad:45:0c:72:21:2e:31:38:dd:d5:
a7:2c:2d:50:e6:ff:c0:a1:08:6b:b1:40:bc:40:5f:
23:89:a6:bd:1c:a7:ca:2e:3f:23:3d:84:3c:e9:67:
08:c1:12:4d:0b:8e:ab:e8:fe:84:fe:3a:12:1e:d0:
c9:9f:a9:88:aa:99:18:13:0c:a5:73:4b:fe:4f:84:
33:ba:d6:6d:77:d4:fe:e9:8e:b0:fe:a0:b5:95:df:
bf:2e:30:64:bf:3c:e5:07:bf:c2:b0:99:1e:b4:d9:
7d:73:05:81:3d:c8:23:a3:50:6d:ba:85:e2:cd:ef:
14:23:74:a7:b1:d9:40:5f:2d:9c:54:9d:6b:d8:35:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:30:73:2A:8C:8D:7A:8D:1C:FA:C9:C6:4B:B1:66:DB:9C:53:07:A6
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/3F2B28B4D94411E98E28CD85C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.57.108.0/24
202.57.117.0-202.57.118.255
Signature Algorithm: sha256WithRSAEncryption
46:1b:6f:c9:55:fe:f4:cf:60:88:31:db:35:1a:d6:f7:5d:39:
b4:f1:fb:d3:0a:ba:eb:23:cc:2f:33:79:2a:1e:62:3a:cc:50:
a5:f8:e7:5d:93:aa:92:6c:5c:34:ca:63:04:e4:03:9a:b3:7b:
c6:8e:93:6f:d1:1e:4f:77:dd:f7:c3:42:a2:18:e3:57:f6:1e:
3b:53:bd:7f:b3:1d:99:0b:39:2b:df:df:52:3f:b4:8f:fb:d9:
70:35:fe:41:22:79:21:b4:94:58:42:de:0b:fe:56:83:92:7b:
48:c0:ef:ec:a2:d7:15:b4:f6:3e:dd:9e:de:e5:be:7e:a6:2d:
09:d6:b1:dc:2b:10:77:29:9c:b4:b7:b4:fb:fe:a4:72:06:59:
c9:d0:5b:4e:5e:79:b4:83:da:79:ce:0e:8c:ed:b0:73:2e:5e:
af:2d:aa:2d:dc:75:75:03:bf:92:0f:cd:97:f9:cc:a2:7b:55:
4e:01:5b:5f:ee:d1:e2:e2:2b:ee:14:eb:d4:ce:42:e4:7d:c5:
8a:3c:7d:ff:bc:2f:ff:45:67:1b:cb:e8:9a:73:b0:02:6d:9c:
83:f6:5b:40:3b:59:24:7b:2e:8a:9e:11:65:16:53:8d:62:8e:
92:86:09:25:08:0e:9b:e4:74:88:8c:00:c7:34:9f:9f:89:c8:
3c:58:5e:e1
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICKyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF
MDgxRjFBRjgwHhcNMjYwODE0MTYyMzI1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdmNDBmZC02MDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyWpsb1Oa3j5yN1SbuL2rLkfvvI12JHN68Hy1QXjFXa/uVthXyskKRASvvop6
oFyid8iKgriIsqNFnEUE0svVFyQV8mGg8XIqGIbQS8xXuSM+8saVdvJlW6s+dchJ
TZWooWXVcoFtQVlgqSWylJ7YZF1P2SqmGvHKhMX8gK1FDHIhLjE43dWnLC1Q5v/A
oQhrsUC8QF8jiaa9HKfKLj8jPYQ86WcIwRJNC46r6P6E/joSHtDJn6mIqpkYEwyl
c0v+T4QzutZtd9T+6Y6w/qC1ld+/LjBkvzzlB7/CsJketNl9cwWBPcgjo1BtuoXi
ze8UI3SnsdlAXy2cVJ1r2DVfMQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFNQwcyqM
jXqNHPrJxkuxZtucUwemMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG
QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvM0YyQjI4QjRE
OTQ0MTFFOThFMjhDRDg1QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQAyjlsMAwDBADKOXUDBADKOXYwDQYJKoZIhvcNAQELBQADggEBAEYb
b8lV/vTPYIgx2zUa1vddObTx+9MKuusjzC8zeSoeYjrMUKX4512TqpJsXDTKYwTk
A5qze8aOk2/RHk933ffDQqIY41f2HjtTvX+zHZkLOSvf31I/tI/72XA1/kEieSG0
lFhC3gv+VoOSe0jA7+yi1xW09j7dnt7lvn6mLQnWsdwrEHcpnLS3tPv+pHIGWcnQ
W05eebSD2nnODoztsHMuXq8tqi3cdXUDv5IPzZf5zKJ7VU4BW1/u0eLiK+4U69TO
QuR9xYo8ff+8L/9FZxvL6JpzsAJtnIP2W0A7WSR7LoqeEWUWU41ijpKGCSUIDpvk
dIiMAMc0n5+JyDxYXuE=
-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:05 2026 by rpki-client