
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/65A78BCE535F11EE9BC85F83C4F9AE02.roa
File: 65A78BCE535F11EE9BC85F83C4F9AE02.roa (raw, json)
Hash identifier: d51m3hjXY2TezXxt2Mgw2qLO9oFLWxyGtgPvE/O7bjk=
Subject key identifier: E6:F8:8B:9C:FA:C3:C2:F2:2F:02:66:73:BA:C5:CE:EB:AB:5D:DC:09
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0DB8
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/65A78BCE535F11EE9BC85F83C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:42:08 +0000
ROA not before: Sun 02 Nov 2025 19:08:08 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4202202062
IP address blocks: 49.236.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3512 (0xdb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Nov 2 19:08:08 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a48880-0ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:64:8d:2c:1a:78:a5:fb:0c:e2:16:f7:0e:
1d:78:b1:0a:44:df:7d:5c:d3:e1:11:61:bb:01:c0:
28:fb:8d:7b:27:88:23:6c:a5:f1:f8:1e:ae:be:89:
d2:c1:63:1b:ea:a6:2c:41:53:49:cb:ee:27:4a:f1:
9f:8e:85:50:07:51:8f:2f:03:62:6d:fe:48:ea:4e:
39:28:62:cd:b3:1e:2b:5d:8a:ac:8b:96:d5:c2:16:
1d:e2:ea:b7:6e:af:a3:4d:29:db:a3:5a:6c:9d:40:
62:92:6a:b5:2a:fe:3b:22:4f:97:04:89:8b:e5:7c:
a1:e5:d8:0d:2e:d1:70:5b:07:0e:fd:dd:f6:90:f5:
03:87:d8:63:a8:df:be:4c:2a:2b:34:a5:b8:44:81:
d5:22:a6:c0:68:05:b9:aa:48:7e:07:fa:97:66:d0:
48:f5:38:e0:20:67:88:68:91:9d:be:80:b4:93:c6:
93:5b:e9:fb:ff:65:90:b0:16:9e:ca:34:a2:d1:de:
d3:e8:8c:9c:20:1d:3c:3b:88:4d:7e:43:af:8d:d0:
1a:6b:87:f8:27:a1:56:31:17:58:dd:f3:64:23:7b:
f8:e2:44:5f:06:61:9f:3b:d3:a7:6d:7d:fe:45:40:
2c:bc:d1:d4:25:2e:d5:17:74:01:5e:4e:6a:46:1e:
fe:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F8:8B:9C:FA:C3:C2:F2:2F:02:66:73:BA:C5:CE:EB:AB:5D:DC:09
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/65A78BCE535F11EE9BC85F83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.236.204.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:70:67:db:69:ee:a3:c9:53:57:d5:85:c2:46:8e:20:44:88:
21:19:43:91:63:a5:f4:d1:d0:26:ef:64:24:7f:42:04:54:9c:
ea:35:b7:ba:1e:4a:fe:8c:3f:6a:62:d3:1d:38:df:cd:dc:fb:
9e:87:f3:9c:5f:68:84:70:2d:1d:40:fa:10:18:4b:cf:0c:d0:
99:9c:7f:5d:f3:79:32:45:b5:e4:9b:81:a2:e0:19:5d:68:35:
7b:f2:c2:71:9e:3f:08:9d:80:f1:34:7d:6d:49:aa:df:21:4d:
75:aa:6a:3d:23:2d:1f:8a:8b:7f:3d:19:54:6c:87:06:79:72:
20:04:6b:4d:a6:8d:a7:ea:26:cf:09:47:c2:a7:58:cf:12:cc:
07:8d:34:c3:b3:00:e1:d1:80:e3:89:c3:00:53:8f:2a:ee:27:
2f:7a:22:fc:d5:d7:f0:f2:ff:97:fa:b0:54:53:69:af:74:ac:
80:09:b6:2a:a8:6a:91:cf:59:25:03:d0:2f:8f:7f:0e:d9:b3:
54:90:38:bf:ca:f9:80:57:8a:02:d6:31:c7:94:fd:c3:4b:6f:
ef:97:85:0b:37:d3:a2:26:97:78:e3:a6:81:61:5f:51:d6:0e:
41:80:be:7b:40:f4:c7:99:4d:b2:4e:dd:a5:76:9d:f9:e0:64:
2d:1b:d0:7c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF
Q0QxRDczQjYwHhcNMjUxMTAyMTkwODA4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODg4MC0wZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnL1kjSwaeKX7DOIW9w4deLEKRN99XNPhEWG7AcAo+417J4gjbKXx+B6uvonS
wWMb6qYsQVNJy+4nSvGfjoVQB1GPLwNibf5I6k45KGLNsx4rXYqsi5bVwhYd4uq3
bq+jTSnbo1psnUBikmq1Kv47Ik+XBImL5Xyh5dgNLtFwWwcO/d32kPUDh9hjqN++
TCorNKW4RIHVIqbAaAW5qkh+B/qXZtBI9TjgIGeIaJGdvoC0k8aTW+n7/2WQsBae
yjSi0d7T6IycIB08O4hNfkOvjdAaa4f4J6FWMRdY3fNkI3v44kRfBmGfO9OnbX3+
RUAsvNHUJS7VF3QBXk5qRh7+wwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOb4i5z6
w8LyLwJmc7rFzuurXdwJMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1
RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj
N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNjVBNzhCQ0U1
MzVGMTFFRTlCQzg1RjgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMezMMA0GCSqGSIb3DQEBCwUAA4IBAQCLcGfbae6jyVNX1YXCRo4g
RIghGUORY6X00dAm72Qkf0IEVJzqNbe6Hkr+jD9qYtMdON/N3Pueh/OcX2iEcC0d
QPoQGEvPDNCZnH9d83kyRbXkm4Gi4BldaDV78sJxnj8InYDxNH1tSarfIU11qmo9
Iy0fiot/PRlUbIcGeXIgBGtNpo2n6ibPCUfCp1jPEswHjTTDswDh0YDjicMAU48q
7icveiL81dfw8v+X+rBUU2mvdKyACbYqqGqRz1klA9Avj38O2bNUkDi/yvmAV4oC
1jHHlP3DS2/vl4ULN9OiJpd446aBYV9R1g5BgL57QPTHmU2yTt2ldp354GQtG9B8
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:51 2026 by rpki-client