
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/3D5EC616694B11EFABF9221EC4F9AE02.roa
File: 3D5EC616694B11EFABF9221EC4F9AE02.roa (raw, json)
Hash identifier: E4M2glENp14yC8XqERK+K5RnK+5kQXHvoIyYZ3+OkHg=
Subject key identifier: 4B:E0:FC:15:7D:69:23:54:78:62:43:19:BC:5E:E1:C9:5F:5E:85:D2
Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial: 027C
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/3D5EC616694B11EFABF9221EC4F9AE02.roa
Signing time: Fri 01 May 2026 02:34:20 +0000
ROA not before: Fri 01 May 2026 02:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151477
IP address blocks: 103.112.43.0/24 maxlen: 24
2001:df2:1d40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 636 (0x27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Validity
Not Before: May 1 02:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f4112c-6fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:44:30:8e:e1:7a:6c:2b:b6:65:b4:f0:f1:
83:ef:f7:9b:75:ae:d5:55:c8:dd:8e:b3:de:e6:24:
61:c0:98:af:6d:1a:fb:e7:ab:e0:0a:b3:e0:3a:58:
45:79:0f:d1:27:d3:8b:dc:f5:4d:24:2f:75:35:62:
1e:73:45:0c:79:e8:ca:9e:dd:c8:40:f6:d7:a2:72:
70:4c:e0:31:13:15:b3:44:cf:47:bf:49:95:fd:2b:
d4:73:7b:fd:4e:1a:9e:cf:58:cf:49:4a:48:22:fe:
14:76:56:c0:65:0f:da:13:25:2b:22:72:52:35:49:
8e:94:b7:2f:31:42:cb:d8:30:c3:1b:94:f2:4d:9e:
c7:0e:d4:14:4a:09:f9:f0:67:f2:62:b8:ea:6b:ba:
81:4c:36:55:cb:6b:fc:a7:8a:bf:84:ad:39:fe:58:
f6:3d:46:c1:e8:d8:01:a9:c2:53:4d:64:3f:03:43:
8d:1b:b0:d5:58:e0:9b:12:57:b3:4d:04:d5:d0:94:
b4:0a:a1:bb:db:b5:0a:39:a5:51:9a:9b:e3:95:f8:
eb:79:fa:98:59:bf:ab:28:02:9e:f6:4c:38:0d:a6:
49:44:9a:30:bb:b5:d2:b2:05:03:11:59:6e:b2:f3:
53:1e:b5:d5:af:ed:45:f5:fe:21:86:06:83:70:1f:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:FC:15:7D:69:23:54:78:62:43:19:BC:5E:E1:C9:5F:5E:85:D2
X509v3 Authority Key Identifier:
keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/3D5EC616694B11EFABF9221EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.112.43.0/24
IPv6:
2001:df2:1d40::/48
Signature Algorithm: sha256WithRSAEncryption
0b:cc:3f:8a:f8:58:80:b8:78:3d:d7:98:d6:59:7e:4c:35:a2:
84:f7:43:4c:b2:90:67:59:2c:02:e9:bb:c6:b7:36:29:ff:b2:
c7:36:7f:03:27:9d:54:c8:00:fc:af:96:ee:5a:6d:98:0f:79:
23:b3:48:e7:01:88:ca:85:c7:7a:6b:17:e3:2c:c2:67:46:9c:
ad:9b:00:d6:41:62:4a:11:83:6f:e8:7e:9c:c7:f9:03:00:3c:
d8:ab:81:34:fb:49:3d:9c:30:78:f9:eb:76:c4:d4:fb:4a:83:
f2:cf:dd:9a:ea:42:8d:e8:b5:d6:78:c3:2b:71:61:32:53:e5:
6d:bb:90:c8:9f:a7:4f:d5:57:41:58:60:d3:50:af:f0:bd:59:
fa:26:f3:2f:c1:95:39:d1:54:6a:0d:90:b6:90:fb:f6:46:1a:
c9:6d:6c:47:d9:41:ab:e0:10:59:ed:dd:0f:ac:3e:e3:88:86:
2b:b0:80:fd:22:fb:c3:f5:44:f3:c5:c8:89:95:1f:9c:2b:9f:
16:2f:ac:a3:d0:fc:14:2f:5f:62:8b:9e:ed:5e:f3:60:fb:18:
c3:4c:13:82:96:3a:3f:9b:1e:c4:61:3b:89:47:46:29:69:7b:
8e:33:5f:c1:2a:42:79:3a:0b:72:fe:54:86:26:93:12:66:65:
b5:95:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:09 2026 by rpki-client