
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa
File: 311C494286CC11F09348D16BC4F9AE02.roa (raw, json)
Hash identifier: c5z8GmrR8gTadfODZE+aXaQsjeSugCDsmlzjHXLsAp4=
Subject key identifier: 5A:08:5B:6E:69:8B:F8:2B:CE:C1:FC:8D:76:5E:FA:E2:44:CC:57:2E
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 096F
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa
Signing time: Fri 01 May 2026 06:19:17 +0000
ROA not before: Fri 01 May 2026 06:19:17 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 152584
IP address blocks: 126.209.15.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.51.0/24 maxlen: 24
126.209.60.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
126.209.80.0/24 maxlen: 24
126.209.81.0/24 maxlen: 24
126.209.85.0/24 maxlen: 24
126.209.86.0/24 maxlen: 24
126.209.96.0/21 maxlen: 24
126.209.116.0/22 maxlen: 24
126.209.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2415 (0x96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: May 1 06:19:17 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69f445e5-0174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:4f:0e:a4:49:8a:28:4c:5c:89:5d:7f:e8:
99:ff:6f:fd:5b:a6:00:48:a6:50:65:4b:ff:e6:7a:
2c:87:3c:64:c3:ab:76:ee:f6:04:c5:2e:4c:2a:69:
5f:9f:65:af:f7:43:20:78:95:00:d9:0f:bd:5f:5e:
83:37:53:ab:7f:17:3e:7c:0e:76:70:b4:ca:66:bf:
5d:3b:03:73:c2:90:f3:47:49:93:7f:7c:16:35:34:
36:ec:aa:02:12:b0:52:9d:f1:43:54:68:32:3a:08:
7b:7c:59:d5:84:75:aa:1f:ae:5a:51:22:19:30:2a:
8b:71:cb:91:41:6c:17:d5:bd:e1:08:95:87:1a:42:
1e:52:5a:3a:8a:3c:5d:b5:c8:47:44:a5:47:22:6a:
a2:4a:e5:1b:54:8d:87:0e:5e:b8:ae:6e:de:b0:67:
c3:a4:d5:bb:f3:de:4a:39:0d:6b:fd:74:94:d9:cd:
8f:d4:31:0a:5a:a1:9e:84:2c:be:4c:93:6d:94:3e:
54:ac:54:c1:2c:56:09:e1:03:0a:62:01:99:c6:30:
4b:d6:bc:d9:38:ac:99:1e:c6:e6:f2:3a:f8:ee:ba:
02:43:2f:f5:9f:37:50:fb:22:a6:27:cc:60:d4:46:
df:98:8a:bd:91:11:23:fb:80:91:4d:2e:99:25:98:
e1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:08:5B:6E:69:8B:F8:2B:CE:C1:FC:8D:76:5E:FA:E2:44:CC:57:2E
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/311C494286CC11F09348D16BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
126.209.15.0/24
126.209.33.0/24
126.209.37.0-126.209.38.255
126.209.40.0/24
126.209.51.0/24
126.209.60.0/24
126.209.63.0/24
126.209.80.0/23
126.209.85.0-126.209.86.255
126.209.96.0/21
126.209.116.0-126.209.123.255
Signature Algorithm: sha256WithRSAEncryption
54:9e:16:df:ed:d1:67:3f:d1:cd:f3:34:51:b7:0e:9c:83:ed:
38:a2:f0:5f:30:ab:2c:80:01:7d:66:e9:81:89:53:ef:dc:07:
61:8f:e6:34:67:d9:84:71:d3:ca:15:60:d3:be:7e:de:9f:82:
1b:fd:3b:13:cf:d1:17:56:62:e2:03:28:9c:4e:bc:26:a9:a3:
9b:70:b6:ae:6a:28:70:86:a9:e0:fd:18:bf:e6:dd:4c:c0:cf:
44:4f:ca:56:7b:66:e0:be:ce:e1:98:c1:04:8b:33:6a:9a:27:
46:b0:2a:28:87:f0:4b:5d:48:94:2c:6c:be:4c:e7:78:8f:3c:
7e:94:90:26:39:1f:73:94:69:75:2e:db:fb:d8:13:3f:ac:03:
a0:c5:22:c0:6d:05:f7:75:a2:bc:af:04:84:20:33:40:1d:42:
7b:1a:d4:85:b6:28:23:2d:42:cf:07:a8:18:a0:a6:91:4c:c5:
b5:40:6b:e2:b3:c4:e9:10:da:d0:a2:9d:61:dd:3c:77:73:63:
12:cb:56:58:e3:03:d7:8a:90:b4:12:42:be:4d:73:ee:81:e7:
c1:b7:b7:30:f2:1b:d4:f9:a2:88:60:6d:be:4d:11:46:5b:9b:
66:99:2d:ae:f6:26:1d:83:9c:19:5c:b9:67:3b:fd:f5:d6:f8:
2f:1b:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:28 2026 by rpki-client