
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
File: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (raw, json)
Hash identifier: pkyGN44AS4SLdJe1nEC0cgptqJqFo9Jz+8yVjeVwyog=
Subject key identifier: DD:FC:73:A7:A5:2B:A7:60:4D:AB:9D:C6:8C:B9:3D:87:B4:EB:04:76
Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Certificate serial: 01D4
Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:18:21 +0000
ROA not before: Sat 17 Jan 2026 02:22:20 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 138015
IP address blocks: 203.57.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF
Validity
Not Before: Jan 17 02:22:20 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69a5aa3d-3ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:e0:53:b3:ca:e6:b3:e9:5c:2b:32:70:2d:
da:e2:ec:58:74:40:fd:fa:65:c4:40:de:3e:ca:bd:
9d:d4:89:11:9c:06:bf:56:3f:89:62:15:62:06:32:
cf:b0:1a:68:3d:dd:fb:13:96:42:4d:10:e5:f4:b2:
eb:13:1d:07:42:eb:98:3d:0b:f1:34:67:4e:b0:de:
4e:95:3c:fb:b2:71:81:45:f9:ff:31:8e:70:75:39:
9f:3b:70:82:7b:6b:ac:52:40:84:d4:2d:e8:56:71:
df:47:15:15:1c:9c:1e:7d:2d:e7:ef:e8:bd:9a:cf:
b1:7f:21:ee:66:d7:cc:11:bf:b2:73:8b:52:28:ad:
94:15:8e:4c:e0:81:54:8b:d6:7c:22:5f:8e:5d:95:
5e:e2:08:d5:6c:d9:de:fe:db:21:7f:70:3a:35:20:
cd:3f:d8:88:9e:a8:c7:cb:9e:38:3f:87:cc:7b:aa:
e6:f7:57:a5:fa:a2:29:d6:0f:7d:2a:a0:b2:3d:87:
dc:69:fd:83:71:b8:52:ff:b3:9c:7a:c9:6b:6b:52:
39:02:f3:87:fa:c8:88:90:b5:e4:b4:e7:97:77:71:
f7:98:e9:25:cd:6a:de:51:0b:ba:66:be:58:13:87:
6b:27:04:e1:28:01:88:70:30:ad:a3:cd:0b:2e:ed:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FC:73:A7:A5:2B:A7:60:4D:AB:9D:C6:8C:B9:3D:87:B4:EB:04:76
X509v3 Authority Key Identifier:
keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.57.29.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d8:59:c8:2f:54:5d:06:15:2d:dd:a6:70:73:22:c8:34:fe:
34:5a:20:88:f1:ee:fe:54:02:1f:25:c5:7b:ef:b9:b2:51:12:
3a:1a:df:47:9f:ff:d7:77:2e:21:4f:82:c7:3f:00:51:c1:6b:
10:8a:5d:70:4c:60:93:62:16:57:87:60:68:11:a7:ee:2d:e3:
08:65:53:f2:63:44:21:79:9c:62:d8:ea:18:82:6a:98:95:16:
a7:3d:05:95:b8:14:d2:6e:ca:d3:6d:fd:d0:61:35:4d:dc:64:
89:50:6c:34:2d:17:a9:cb:6b:75:5a:dc:61:4b:9f:8b:1d:7b:
94:96:4c:bf:49:4b:90:e6:73:8c:8c:4c:83:36:a0:1b:24:32:
b6:75:07:68:07:5b:98:a0:01:70:c5:16:f0:0d:b0:eb:4f:29:
ac:bf:53:db:09:98:4c:0a:48:46:8f:53:b4:32:2c:46:a9:e3:
41:ea:fa:dc:e4:03:55:bd:48:f1:fe:fc:f5:b6:64:7a:5f:de:
b4:d7:0a:6d:49:89:2d:ea:8f:b1:bb:90:e9:92:de:39:15:68:
3f:b4:ad:bc:2b:58:68:0a:0b:3b:07:85:b6:1b:eb:3d:95:44:
91:40:ba:66:e9:76:a8:a5:ae:25:b5:bd:06:bf:2c:f3:a1:db:
c0:e4:3d:2b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM5RTgxMTAvBgNVBAUTKDg1Mjk5RjBEQjE0QzhGMEE1M0QyNDQ2RUZEQjBDQzA1
OUMxNTI0QkYwHhcNMjYwMTE3MDIyMjIwWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YWEzZC0zZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5ngU7PK5rPpXCsycC3a4uxYdED9+mXEQN4+yr2d1IkRnAa/Vj+JYhViBjLP
sBpoPd37E5ZCTRDl9LLrEx0HQuuYPQvxNGdOsN5OlTz7snGBRfn/MY5wdTmfO3CC
e2usUkCE1C3oVnHfRxUVHJwefS3n7+i9ms+xfyHuZtfMEb+yc4tSKK2UFY5M4IFU
i9Z8Il+OXZVe4gjVbNne/tshf3A6NSDNP9iInqjHy544P4fMe6rm91el+qIp1g99
KqCyPYfcaf2DcbhS/7Oceslra1I5AvOH+siIkLXktOeXd3H3mOklzWreUQu6Zr5Y
E4drJwThKAGIcDCto80LLu0QlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFN38c6el
K6dgTaudxoy5PYe06wR2MB8GA1UdIwQYMBaAFIUpnw2xTI8KU9JEbv2wzAWcFSS/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzlFOC9GREY2NzMwNjU4
RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3cFQwa1J1X2JETUJad1ZK
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM5RTgvRkRGNjczMDY1OEZEMTFFRTlEMkQyMzc2QzRGOUFFMDIvRTM5RjRFRDY1
QzI0MTFFRUI1NEM0RjQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyzkdMA0GCSqGSIb3DQEBCwUAA4IBAQAF2FnIL1RdBhUt3aZwcyLI
NP40WiCI8e7+VAIfJcV777myURI6Gt9Hn//Xdy4hT4LHPwBRwWsQil1wTGCTYhZX
h2BoEafuLeMIZVPyY0QheZxi2OoYgmqYlRanPQWVuBTSbsrTbf3QYTVN3GSJUGw0
LRepy2t1WtxhS5+LHXuUlky/SUuQ5nOMjEyDNqAbJDK2dQdoB1uYoAFwxRbwDbDr
Tymsv1PbCZhMCkhGj1O0MixGqeNB6vrc5ANVvUjx/vz1tmR6X9601wptSYkt6o+x
u5Dpkt45FWg/tK28K1hoCgs7B4W2G+s9lUSRQLpm6Xaopa4ltb0GvyzzodvA5D0r
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:38 2026 by rpki-client