
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/773251504B5D11F1927AF905AF833773.roa
File: 773251504B5D11F1927AF905AF833773.roa (raw, json)
Hash identifier: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=
Subject key identifier: 68:DC:11:67:9D:6A:85:EE:A9:B9:55:9B:81:C3:42:1B:F4:7D:5C:C0
Certificate issuer: /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Certificate serial: 02
Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/773251504B5D11F1927AF905AF833773.roa
Signing time: Sat 09 May 2026 04:13:43 +0000
ROA not before: Sat 09 May 2026 04:13:43 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 133139
IP address blocks: 43.251.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1
Validity
Not Before: May 9 04:13:43 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=69feb477-9d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:20:30:d4:50:91:31:8e:d6:a2:7d:6b:f4:
00:b6:8c:a5:4d:99:41:57:91:fc:c7:9d:61:83:44:
0e:e0:34:08:a7:47:1e:cb:a6:f8:63:d6:06:83:1b:
50:21:07:fb:63:b4:ad:fd:cb:d3:0c:76:45:43:d7:
bb:68:95:5b:5f:41:73:69:bb:3f:00:b8:ef:22:48:
1a:fe:1b:86:71:c9:a1:e1:b7:3a:40:d3:d2:45:c3:
ac:0e:fb:a8:8a:e5:82:40:57:62:e0:59:68:c9:d4:
49:b7:a4:06:4e:18:cb:10:fb:32:c4:9d:b0:d9:be:
cc:d8:5b:ac:86:02:12:5d:fe:68:4e:97:f0:41:ba:
bb:c5:17:20:64:8d:2d:0f:03:a6:6c:d8:cc:29:b7:
73:9a:b8:3e:fd:d2:53:fd:46:42:20:07:9c:72:93:
84:15:67:9d:d2:18:8e:51:d5:74:ae:65:90:01:ea:
45:0d:52:31:8e:0b:fb:24:43:fa:54:25:2c:46:be:
d5:00:d7:7f:30:82:75:ae:74:49:b3:35:0e:c6:49:
63:92:44:78:b0:7f:19:6b:04:a0:4a:df:c1:97:06:
f6:fa:c6:56:bd:c3:68:c8:ca:34:3c:04:39:f1:b5:
8a:5a:35:92:ae:cf:6d:38:33:b0:6e:25:6a:e5:bf:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DC:11:67:9D:6A:85:EE:A9:B9:55:9B:81:C3:42:1B:F4:7D:5C:C0
X509v3 Authority Key Identifier:
keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/773251504B5D11F1927AF905AF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.130.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:42:69:e3:01:9b:a6:19:6f:9b:40:70:13:d0:bc:da:95:a9:
29:c4:92:9d:d7:2a:71:ba:08:c0:d0:07:8b:cc:a8:9c:17:38:
53:29:8d:e9:9f:d3:23:49:c1:d5:97:31:d6:5f:e2:fe:f8:72:
cc:98:0e:3c:c0:58:81:5f:d0:62:82:0c:ab:64:25:5a:64:91:
3b:b4:42:08:62:b5:b0:f1:b8:00:9d:f3:9a:c9:c7:98:e6:f0:
4a:86:be:f7:f3:de:f2:dd:09:b2:b6:80:90:51:41:c0:4b:3d:
43:20:cb:90:8e:d0:d7:f7:52:16:16:0f:21:8c:45:91:dd:21:
4a:32:3d:3e:6b:e1:e3:cc:9a:74:b0:bc:26:b7:c6:2f:fe:d8:
e1:49:20:e1:d5:49:16:6c:69:c1:d7:3d:12:77:0d:74:cb:c1:
3e:6b:c5:eb:7b:fe:12:42:5c:ab:0c:4a:72:a6:7f:aa:88:c9:
7a:fd:f5:8a:4c:84:95:bb:37:68:21:d4:e6:0a:f8:af:81:63:
10:b0:b7:72:4f:84:76:c9:de:af:c0:42:3b:78:bb:5c:80:07:
5d:fe:db:c9:66:d7:33:74:a4:90:5f:94:89:11:7c:00:d2:e5:
78:69:59:bf:be:1f:c0:60:56:bf:3c:94:19:6b:98:6d:d6:b1:
2d:9c:82:ef
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QzRCQzExMC8GA1UEBRMoQTlEN0QzMzMxNjZEQTkyNjFCRTdBODM2NjMxODBGM0JG
MEVDOTBBMTAeFw0yNjA1MDkwNDEzNDNaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5ZmViNDc3LTlkNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHXiAw1FCRMY7Won1r9AC2jKVNmUFXkfzHnWGDRA7gNAinRx7Lpvhj1gaDG1Ah
B/tjtK39y9MMdkVD17tolVtfQXNpuz8AuO8iSBr+G4ZxyaHhtzpA09JFw6wO+6iK
5YJAV2LgWWjJ1Em3pAZOGMsQ+zLEnbDZvszYW6yGAhJd/mhOl/BBurvFFyBkjS0P
A6Zs2Mwpt3OauD790lP9RkIgB5xyk4QVZ53SGI5R1XSuZZAB6kUNUjGOC/skQ/pU
JSxGvtUA138wgnWudEmzNQ7GSWOSRHiwfxlrBKBK38GXBvb6xla9w2jIyjQ8BDnx
tYpaNZKuz204M7BuJWrlvwE5AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUaNwRZ51q
he6puVWbgcNCG/R9XMAwHwYDVR0jBBgwFoAUqdfTMxZtqSYb56g2YxgPO/DskKEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDNEJDLzBGQTBFRDgwNEI1
RDExRjE4OEYyNjY2RUFFODMzNzczL3FkZlRNeFp0cVNZYjU2ZzJZeGdQT19Ec2tL
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcWRmVE14WnRxU1liNTZnMll4Z1BPX0Rza0tFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzRCQy8wRkEwRUQ4MDRCNUQxMUYxODhGMjY2NkVBRTgzMzc3My83NzMyNTE1MDRC
NUQxMUYxOTI3QUY5MDVBRjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAEr+4IwDQYJKoZIhvcNAQELBQADggEBAG5CaeMBm6YZb5tAcBPQvNqV
qSnEkp3XKnG6CMDQB4vMqJwXOFMpjemf0yNJwdWXMdZf4v74csyYDjzAWIFf0GKC
DKtkJVpkkTu0QghitbDxuACd85rJx5jm8EqGvvfz3vLdCbK2gJBRQcBLPUMgy5CO
0Nf3UhYWDyGMRZHdIUoyPT5r4ePMmnSwvCa3xi/+2OFJIOHVSRZsacHXPRJ3DXTL
wT5rxet7/hJCXKsMSnKmf6qIyXr99YpMhJW7N2gh1OYK+K+BYxCwt3JPhHbJ3q/A
Qjt4u1yAB13+28lm1zN0pJBflIkRfADS5XhpWb++H8BgVr88lBlrmG3WsS2cgu8=
-----END CERTIFICATE-----
Generated at Wed May 13 12:44:02 2026 by rpki-client