
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa
File: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (raw, json)
Hash identifier: jvZ/ModfbQ+nJiqi0y0StRHq9ETC/wMHvIwaRLSskes=
Subject key identifier: 73:6E:D6:2D:B7:9A:CE:DA:8B:D3:3E:5E:96:13:57:E9:43:C4:27:BF
Certificate issuer: /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Certificate serial: 018C
Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa
Signing time: Mon 27 Apr 2026 04:37:58 +0000
ROA not before: Mon 27 Apr 2026 04:37:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152661
IP address blocks: 203.28.104.0/23 maxlen: 23
203.28.104.0/24 maxlen: 24
203.28.105.0/24 maxlen: 24
2401:8d60::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 04:28:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 396 (0x18c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Validity
Not Before: Apr 27 04:37:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69eee826-fa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:48:73:a3:17:7f:02:82:fe:e5:9a:8a:e3:
18:32:22:6a:f0:5a:df:a8:e8:17:c8:02:08:ab:37:
9d:8c:09:c1:d0:c9:8c:d5:ae:6c:2c:38:e0:87:d9:
7e:17:19:58:98:40:88:81:73:46:0a:c5:d1:34:35:
8f:66:bd:59:e6:8f:05:37:10:10:ac:d9:74:b2:a7:
e9:84:ca:8a:77:37:ad:b2:5c:73:5e:cf:9f:7b:42:
94:2c:4d:35:a4:4e:86:92:34:86:72:26:c0:21:d9:
2d:76:22:25:b5:a9:5e:01:82:6f:a5:94:34:d8:60:
b7:16:f2:05:fd:96:27:11:39:cf:0b:a7:32:35:2e:
48:8a:fa:3b:f0:6e:f7:78:18:6b:07:81:b9:86:69:
54:b5:c6:01:65:38:b6:0b:0c:9e:28:3f:d4:4d:a0:
93:83:cd:06:24:13:8d:2c:08:b0:20:f2:75:89:7a:
93:d2:a1:37:c4:1b:56:c0:12:9a:9e:51:26:8f:15:
7c:a3:e9:67:13:b5:78:a6:98:aa:b4:4b:f3:1b:f6:
6a:e3:08:70:8e:8a:e4:df:b1:af:ed:94:f8:d7:5d:
c1:15:3f:dc:5b:ed:a6:93:d9:18:78:93:fa:4f:bd:
07:44:e9:42:83:e1:18:43:49:c9:fa:2f:79:27:3d:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6E:D6:2D:B7:9A:CE:DA:8B:D3:3E:5E:96:13:57:E9:43:C4:27:BF
X509v3 Authority Key Identifier:
keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.28.104.0/23
IPv6:
2401:8d60::/32
Signature Algorithm: sha256WithRSAEncryption
12:33:0c:0e:f7:b4:e6:06:43:9f:cd:5d:ea:e7:2b:c7:52:78:
c8:fc:f8:be:c9:97:74:dd:c5:38:32:54:2a:f2:ab:d1:dc:1b:
dc:b8:04:06:d2:1b:b9:e2:b1:5f:aa:01:17:34:93:b3:b7:1a:
d3:77:42:d6:bd:c9:6c:fa:c5:f0:2b:57:9e:f5:7b:a2:64:3c:
3b:c6:5e:a3:2f:bd:b1:6d:83:93:c7:3b:77:8e:5a:55:05:42:
14:6c:0c:7f:f9:01:e0:45:78:7c:7e:17:c7:56:b6:ac:1b:73:
00:15:5b:31:67:ac:df:07:a5:f8:24:64:32:41:19:86:f9:7c:
04:fe:77:85:87:d9:39:2b:5f:db:af:18:5e:a2:d7:ec:2f:78:
66:b2:0e:ed:a0:d2:31:eb:60:3f:e1:92:c4:7e:31:2d:01:95:
d3:68:d6:de:6b:f4:c2:e8:f9:f3:bb:58:7c:07:57:42:18:43:
5a:e3:27:66:83:a1:99:a9:cb:b9:6d:b2:f4:06:a4:f3:6c:a5:
ac:79:92:db:74:87:72:64:78:13:7c:aa:66:1b:f7:de:74:7f:
10:5d:cb:e3:65:05:e4:d5:b0:42:0c:60:4d:5c:3f:f6:42:11:
6d:4c:9f:8b:33:6f:1e:4b:3b:e2:bc:0d:a7:64:8a:53:38:6f:
95:d8:3b:86
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGMUQxMTAvBgNVBAUTKDhGRTVBN0M5OThGQjhCNzhBQzMzMUVBRTgzQkMxNzg2
MjNFRTNDOUUwHhcNMjYwNDI3MDQzNzU4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWVlZTgyNi1mYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYhIc6MXfwKC/uWaiuMYMiJq8FrfqOgXyAIIqzedjAnB0MmM1a5sLDjgh9l+
FxlYmECIgXNGCsXRNDWPZr1Z5o8FNxAQrNl0sqfphMqKdzetslxzXs+fe0KULE01
pE6GkjSGcibAIdktdiIltaleAYJvpZQ02GC3FvIF/ZYnETnPC6cyNS5Iivo78G73
eBhrB4G5hmlUtcYBZTi2CwyeKD/UTaCTg80GJBONLAiwIPJ1iXqT0qE3xBtWwBKa
nlEmjxV8o+lnE7V4ppiqtEvzG/Zq4whwjork37Gv7ZT4113BFT/cW+2mk9kYeJP6
T70HROlCg+EYQ0nJ+i95Jz0UcwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFHNu1i23
ms7ai9M+XpYTV+lDxCe/MB8GA1UdIwQYMBaAFI/lp8mY+4t4rDMeroO8F4Yj7jye
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUYxRC9CQTlDRDhBQ0VD
RTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kzaXNNeDZ1Zzd3WGhpUHVQ
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2otV255Wmo3aTNpc014NnVnN3dYaGlQdVBKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0VGMUQvQkE5Q0Q4QUNFQ0U2MTFFRUFBRTlFODFFQzRGOUFFMDIvMUFFN0VENDZF
Q0U3MTFFRUIxMkY5QTFGQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQByxxoMA0EAgACMAcDBQAkAY1gMA0GCSqGSIb3DQEBCwUAA4IBAQAS
MwwO97TmBkOfzV3q5yvHUnjI/Pi+yZd03cU4MlQq8qvR3BvcuAQG0hu54rFfqgEX
NJOztxrTd0LWvcls+sXwK1ee9XuiZDw7xl6jL72xbYOTxzt3jlpVBUIUbAx/+QHg
RXh8fhfHVrasG3MAFVsxZ6zfB6X4JGQyQRmG+XwE/neFh9k5K1/brxheotfsL3hm
sg7toNIx62A/4ZLEfjEtAZXTaNbea/TC6Pnzu1h8B1dCGENa4ydmg6GZqcu5bbL0
BqTzbKWseZLbdIdyZHgTfKpmG/fedH8QXcvjZQXk1bBCDGBNXD/2QhFtTJ+LM28e
SzvivA2nZIpTOG+V2DuG
-----END CERTIFICATE-----
Generated at Wed May 13 07:39:39 2026 by rpki-client