
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/2789337224DD11F19E4B5BF6AD833773.roa
File: 2789337224DD11F19E4B5BF6AD833773.roa (raw, json)
Hash identifier: 5cgEm0SMJYslABU40A6AOjXeN/3Pw0Ma8SyFdQMbJEs=
Subject key identifier: 14:D7:EF:CE:91:47:DD:46:64:21:F1:B4:55:51:9C:0B:77:46:72:D5
Certificate issuer: /CN=A911EA03/serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Certificate serial: 04
Authority key identifier: FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/2789337224DD11F19E4B5BF6AD833773.roa
Signing time: Sat 21 Mar 2026 04:20:10 +0000
ROA not before: Sat 21 Mar 2026 04:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133139
IP address blocks: 195.142.156.0/22 maxlen: 24
195.142.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA03, serialNumber=FDDD336723E4FF286DE956235F4CBB9E5BC8B47B
Validity
Not Before: Mar 21 04:20:10 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69be1c79-fde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:3a:54:fd:f5:90:ee:57:70:de:aa:5f:59:
9e:06:2e:af:50:0b:38:dd:19:80:30:fa:dc:6c:73:
9c:d1:c4:7d:2d:45:3a:7a:f0:74:58:75:0d:b4:c5:
fc:2c:d8:bc:e0:7f:81:8e:90:3a:38:2c:63:0e:67:
0f:c2:cd:0d:58:d5:a5:7a:42:9d:f8:e5:80:83:47:
27:a3:e3:e8:12:dc:d4:dd:c3:d7:50:af:32:e8:64:
57:50:57:c1:be:d9:44:9c:ce:5f:08:26:83:95:1f:
65:f9:42:df:1f:d8:5e:54:61:57:e9:4b:10:d6:a5:
47:26:de:fd:fc:b3:9b:f7:5a:27:9a:21:29:45:78:
b5:4b:c6:3c:0c:8f:5c:27:c0:23:73:91:e4:13:7b:
41:2d:8b:91:29:84:be:08:e1:1f:f9:22:bb:7d:2e:
91:d3:92:3f:00:a6:ac:82:47:4d:ab:58:25:91:f7:
fe:a2:02:fc:33:1f:7d:de:51:5d:1f:8a:0e:79:6c:
12:fa:2a:17:3a:2e:bb:cb:f1:29:2e:8d:fa:c3:fd:
57:d6:9b:fc:4a:73:44:fd:8f:34:f2:b0:3f:ed:dd:
3b:c1:f5:ec:ed:52:47:82:83:0d:d9:af:4b:49:3d:
95:13:a2:dc:53:3f:8e:0e:c0:51:2f:2e:bc:5c:ff:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:EF:CE:91:47:DD:46:64:21:F1:B4:55:51:9C:0B:77:46:72:D5
X509v3 Authority Key Identifier:
keyid:FD:DD:33:67:23:E4:FF:28:6D:E9:56:23:5F:4C:BB:9E:5B:C8:B4:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/_d0zZyPk_yht6VYjX0y7nlvItHs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_d0zZyPk_yht6VYjX0y7nlvItHs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/CBDFF6AA24DC11F1AAF5B34AAD833773/2789337224DD11F19E4B5BF6AD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
195.142.156.0/22
195.142.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:6b:09:3d:45:7b:e4:70:f2:c2:26:60:2c:6b:9a:9f:51:22:
0c:35:20:b0:50:00:35:a5:4c:94:ee:2a:9f:8a:c4:ef:22:73:
89:5d:c5:62:da:5c:ef:5f:70:a8:e9:33:ab:a1:28:9c:1d:7a:
3e:1a:3a:04:7b:af:9f:f6:af:5f:c2:2c:06:e5:86:a1:4a:0f:
9a:34:16:56:4a:7a:27:82:81:f8:c2:b2:d0:16:74:e8:ca:97:
c4:15:98:33:31:3c:57:f5:fc:8c:f9:1d:f3:c2:73:ae:15:bd:
7f:e0:f8:e1:ba:24:31:f6:60:f7:9d:dd:91:07:1f:c0:2f:f8:
aa:e1:30:5e:bf:2e:b3:18:45:61:aa:87:71:8b:6d:eb:0b:b2:
fb:ca:c6:0a:53:a3:49:1c:e9:be:d9:50:f3:69:50:0a:de:86:
52:08:1b:48:2f:2d:6c:63:e2:c0:d3:10:37:48:4b:9f:f2:15:
9d:01:a9:6e:fa:23:9e:60:72:7d:e7:18:a2:2c:c5:cb:84:17:
d1:9a:eb:cd:cb:73:d6:ba:d5:75:39:84:f2:d0:0f:37:0b:70:
b4:f6:5e:ac:47:9d:d2:da:e3:f6:ea:a4:e9:d5:f9:7b:d0:de:
e6:82:df:59:66:28:6b:99:bc:49:24:35:06:8b:96:8a:1e:ec:
dc:b4:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:24:29 2026 by rpki-client