
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/EE1EA292EA6A11E98F16FE30C4F9AE02.roa
File: EE1EA292EA6A11E98F16FE30C4F9AE02.roa (raw, json)
Hash identifier: +AnMnxmKTZyscWe5AeUEPNU2Nvb8Uu/NJlADVWANwr4=
Subject key identifier: D9:3A:DE:FB:29:C3:B6:DE:8F:4C:C1:71:32:3C:12:95:3F:E6:1B:9F
Certificate issuer: /CN=A911BC62/serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Certificate serial: 0E7A
Authority key identifier: 2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/EE1EA292EA6A11E98F16FE30C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:26:24 +0000
ROA not before: Thu 04 Sep 2025 15:53:04 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 45356
IP address blocks: 194.140.200.0/21 maxlen: 24
212.104.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 15:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3706 (0xe7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BC62, serialNumber=2B4F323C58A776B4E75386DEE83722E0456232C6
Validity
Not Before: Sep 4 15:53:04 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a42260-cb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:92:84:98:5e:82:37:10:53:32:88:a8:23:
ea:45:d6:44:b4:99:8f:5f:7e:2e:83:41:75:df:80:
5c:b3:d2:97:37:32:1a:8a:48:bb:0b:e3:12:1d:0e:
38:27:93:38:6d:73:2f:81:b0:fa:89:fe:aa:0d:28:
ac:ed:8b:19:f3:09:7e:ed:81:98:6e:e4:1a:3f:b7:
4a:74:7a:f1:6e:f8:6d:20:90:77:71:8e:55:e7:e0:
6b:44:aa:40:e6:de:f3:c6:44:ba:23:48:27:1a:9c:
c0:2d:56:d5:72:c0:18:9d:32:ef:67:13:2d:9c:04:
1c:65:84:22:a6:6d:48:59:2e:22:3b:34:37:dd:04:
db:07:c2:b4:43:29:bb:8d:a1:1d:a5:7f:09:2e:80:
40:c6:34:5b:dd:ff:9e:21:5a:2f:d0:08:82:59:4a:
d4:ed:61:ec:31:b1:ff:e8:be:b5:08:ce:b0:4d:8a:
04:67:ef:92:2e:b5:94:fe:7a:36:b2:08:c1:f4:e7:
c1:ec:9b:7a:0d:cb:10:6b:8d:da:1b:44:3d:6c:26:
43:a2:14:b0:5e:88:f3:b2:24:5c:7d:39:2d:b0:ec:
78:a7:f8:76:f1:54:0f:5b:e8:9e:32:8e:42:f2:90:
fb:8a:4c:3d:c4:2b:6c:74:8d:53:30:57:b9:87:0f:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3A:DE:FB:29:C3:B6:DE:8F:4C:C1:71:32:3C:12:95:3F:E6:1B:9F
X509v3 Authority Key Identifier:
keyid:2B:4F:32:3C:58:A7:76:B4:E7:53:86:DE:E8:37:22:E0:45:62:32:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/K08yPFindrTnU4be6Dci4EViMsY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/K08yPFindrTnU4be6Dci4EViMsY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BC62/EE95FD42B76611E986C0E514C4F9AE02/EE1EA292EA6A11E98F16FE30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
194.140.200.0/21
212.104.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:c7:24:f5:7d:28:69:38:47:da:34:f5:b8:6c:e2:ab:f6:9d:
95:64:56:56:7a:44:59:95:18:66:d2:5c:62:b5:44:da:7b:c4:
d7:11:c6:1d:0a:2b:c1:5a:45:34:57:be:88:63:12:c7:ea:4e:
32:ca:37:ac:b8:cc:4b:3d:90:37:50:3e:a3:a7:91:a3:96:34:
49:b7:29:89:3c:ef:17:09:a0:a8:18:be:65:39:4b:08:46:97:
e9:e6:98:8a:dd:73:fe:50:5f:7f:0d:d0:c8:74:9a:e7:31:e7:
d9:86:c0:29:70:a9:83:d9:be:3d:58:06:af:6f:a2:52:03:d7:
0a:51:88:cb:50:9a:c5:f8:94:02:b6:98:ce:ee:fc:8c:aa:b3:
73:2a:6e:49:3a:7f:cd:34:53:2c:36:6b:d5:f3:34:8c:74:e5:
d2:ee:61:43:82:5d:2b:39:20:d6:e2:65:b8:b3:7b:f3:13:05:
d6:54:29:47:8c:70:b7:e9:cf:34:d6:d3:09:4e:27:22:a0:aa:
c5:2e:82:e4:c7:0c:48:51:77:2f:5d:66:8a:2e:58:f4:83:c7:
eb:8e:90:54:e9:80:cd:10:c7:37:13:64:51:0f:5a:c2:4d:c3:
b2:fd:9f:be:49:9d:a9:42:e2:85:39:01:56:e6:a1:9a:bb:ec:
db:cc:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:23 2026 by rpki-client