
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/8EE78F481D1A11F19DA5ED77103D8C67.roa
File: 8EE78F481D1A11F19DA5ED77103D8C67.roa (raw, json)
Hash identifier: FtCatlAW9Re17rwqCuc7Yn9ywx696GppCQCdjrmZAlM=
Subject key identifier: 1E:36:8C:C1:63:75:70:42:6B:C9:CD:33:B1:89:88:59:14:4A:0D:BE
Certificate issuer: /CN=A911CC61/serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D
Certificate serial: 3A
Authority key identifier: 04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/8EE78F481D1A11F19DA5ED77103D8C67.roa
Signing time: Wed 11 Mar 2026 07:18:53 +0000
ROA not before: Wed 11 Mar 2026 07:18:53 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 13335
IP address blocks: 43.226.16.0/22 maxlen: 24
103.45.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl
rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CC61, serialNumber=0474937E79A9D673353EABD82C4B8424B6C6830D
Validity
Not Before: Mar 11 07:18:53 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=69b1175d-0114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:be:07:81:8c:f5:40:ef:63:97:76:5f:1c:b9:
84:4f:b1:2a:3b:4b:63:6b:8c:13:fa:13:dc:93:d1:
cb:89:d2:b2:8e:96:90:bf:4d:d4:a5:25:e9:46:d2:
94:e0:4f:41:0f:a3:78:7e:a3:3e:c0:39:7a:b8:05:
cc:e9:1e:d5:08:79:35:e6:56:60:e4:39:89:54:74:
c2:88:df:62:ef:48:74:01:39:21:9a:af:27:f8:2c:
41:90:a9:6c:f9:85:84:66:2e:dd:3f:f1:cb:07:8d:
0d:8b:f2:d6:7c:04:79:eb:36:cb:0d:fc:7d:97:2d:
f9:cd:b2:3e:4d:f5:37:62:11:cb:ae:de:95:bb:ae:
8b:56:c8:bd:b6:d6:a6:cc:cc:a4:0b:c6:33:c6:0c:
30:89:ed:0c:c3:dc:49:8e:9b:7a:ee:66:c0:e7:27:
1a:5b:74:ae:a4:84:b1:4f:d0:50:55:76:75:a4:77:
c4:0a:e8:c0:93:27:30:75:1d:5e:64:c2:af:bc:ab:
30:2c:85:0f:7e:e1:cf:1d:29:a0:7f:40:48:bb:0e:
52:34:9e:04:9d:09:32:9f:cb:91:37:aa:3b:dc:0c:
ba:06:5d:54:41:43:d8:fb:a0:fb:50:27:6b:54:5f:
16:23:90:69:ac:0b:06:4b:c3:72:92:d3:f1:3f:01:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:8C:C1:63:75:70:42:6B:C9:CD:33:B1:89:88:59:14:4A:0D:BE
X509v3 Authority Key Identifier:
keyid:04:74:93:7E:79:A9:D6:73:35:3E:AB:D8:2C:4B:84:24:B6:C6:83:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/BHSTfnmp1nM1PqvYLEuEJLbGgw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHSTfnmp1nM1PqvYLEuEJLbGgw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC61/331D1418DA3E11F08FD1E8388ED3641D/8EE78F481D1A11F19DA5ED77103D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
43.226.16.0/22
103.45.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:9a:c4:09:57:71:a8:45:79:0d:a3:08:46:a5:bb:f2:30:8e:
22:4f:16:77:32:37:f1:61:22:07:f8:3e:dd:fc:96:ce:38:97:
97:c7:d0:33:23:72:c8:d7:34:dd:0e:8f:37:37:9b:28:61:50:
9c:f0:df:e2:2d:93:ba:2b:db:e8:03:e8:a8:03:b9:91:8d:51:
8e:52:cf:1f:8b:13:80:16:c3:b2:de:9a:37:76:4d:fd:36:c8:
4d:5e:22:7c:73:02:8c:47:db:74:bb:03:0d:d2:10:e6:d3:a0:
e2:29:28:98:be:be:89:91:e8:88:7c:cd:b8:f5:6c:0a:67:f1:
4e:3c:58:9d:c1:54:4b:0c:99:dd:cd:e4:cb:a8:1c:33:b6:b4:
fa:37:0b:12:1f:21:0f:a8:2b:62:cb:02:77:cd:a8:be:cb:5e:
12:69:93:0d:0b:15:cc:76:01:e2:fe:dc:9f:6b:81:52:e6:62:
7c:8d:e6:d8:de:ff:01:17:ca:75:af:86:01:2f:31:7d:5b:0f:
d1:55:dd:85:a9:e6:0b:33:00:e3:1e:54:33:38:f0:0c:6d:f8:
df:49:57:cf:28:83:4f:a3:48:6d:dd:5e:e4:2e:c9:37:23:8d:
18:8c:3d:7c:b7:29:17:36:9a:59:10:28:73:d1:85:c8:77:ac:
0f:c4:45:a4
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Q0M2MTExMC8GA1UEBRMoMDQ3NDkzN0U3OUE5RDY3MzM1M0VBQkQ4MkM0Qjg0MjRC
NkM2ODMwRDAeFw0yNjAzMTEwNzE4NTNaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YjExNzVkLTAxMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDevgeBjPVA72OXdl8cuYRPsSo7S2NrjBP6E9yT0cuJ0rKOlpC/TdSlJelG0pTg
T0EPo3h+oz7AOXq4BczpHtUIeTXmVmDkOYlUdMKI32LvSHQBOSGaryf4LEGQqWz5
hYRmLt0/8csHjQ2L8tZ8BHnrNssN/H2XLfnNsj5N9TdiEcuu3pW7rotWyL221qbM
zKQLxjPGDDCJ7QzD3EmOm3ruZsDnJxpbdK6khLFP0FBVdnWkd8QK6MCTJzB1HV5k
wq+8qzAshQ9+4c8dKaB/QEi7DlI0ngSdCTKfy5E3qjvcDLoGXVRBQ9j7oPtQJ2tU
XxYjkGmsCwZLw3KS0/E/ARyxAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUHjaMwWN1
cEJryc0zsYmIWRRKDb4wHwYDVR0jBBgwFoAUBHSTfnmp1nM1PqvYLEuEJLbGgw0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQzYxLzMzMUQxNDE4REEz
RTExRjA4RkQxRTgzODhFRDM2NDFEL0JIU1Rmbm1wMW5NMVBxdllMRXVFSkxiR2d3
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQkhTVGZubXAxbk0xUHF2WUxFdUVKTGJHZ3cwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Q0M2MS8zMzFEMTQxOERBM0UxMUYwOEZEMUU4Mzg4RUQzNjQxRC84RUU3OEY0ODFE
MUExMUYxOURBNUVENzcxMDNEOEM2Ny5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBAIr4hADBAJnLUAwDQYJKoZIhvcNAQELBQADggEBAF+axAlXcahFeQ2j
CEalu/IwjiJPFncyN/FhIgf4Pt38ls44l5fH0DMjcsjXNN0Ojzc3myhhUJzw3+It
k7or2+gD6KgDuZGNUY5Szx+LE4AWw7Lemjd2Tf02yE1eInxzAoxH23S7Aw3SEObT
oOIpKJi+vomR6Ih8zbj1bApn8U48WJ3BVEsMmd3N5MuoHDO2tPo3CxIfIQ+oK2LL
AnfNqL7LXhJpkw0LFcx2AeL+3J9rgVLmYnyN5tje/wEXynWvhgEvMX1bD9FV3YWp
5gszAOMeVDM48Axt+N9JV88og0+jSG3dXuQuyTcjjRiMPXy3KRc2mlkQKHPRhch3
rA/ERaQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:31 2026 by rpki-client