
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/D11E6E8224CB11F1A3AB4FF6A7833773.roa
File: D11E6E8224CB11F1A3AB4FF6A7833773.roa (raw, json)
Hash identifier: ESg2/JNWaPvl2+QI9K7lpOZN9DG7MX36qoMAIcifoHc=
Subject key identifier: C3:6B:D6:8E:FB:38:C8:0B:CA:A4:FB:C6:DF:28:2A:98:1A:87:C5:04
Certificate issuer: /CN=A914D3D0/serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
Certificate serial: 02
Authority key identifier: 4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/D11E6E8224CB11F1A3AB4FF6A7833773.roa
Signing time: Sat 21 Mar 2026 02:15:23 +0000
ROA not before: Sat 21 Mar 2026 02:15:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153760
IP address blocks: 163.223.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl
rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D3D0, serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
Validity
Not Before: Mar 21 02:15:23 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69bdff3b-7956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:dc:b2:26:d7:02:39:43:17:08:74:bb:f3:
87:23:6a:7e:ef:99:47:71:61:38:c9:3c:0f:1d:9c:
15:3c:18:f3:29:18:0a:69:65:31:14:63:9c:77:23:
aa:da:4a:0c:35:52:6a:72:a6:86:22:28:55:bd:98:
50:89:3a:2e:ba:2d:15:00:52:f3:04:fd:63:98:88:
11:82:9c:84:82:35:b6:b0:e6:b9:7b:96:9d:85:9a:
3b:18:c5:f9:e1:63:13:e6:fc:dc:d6:db:64:b3:52:
d4:b2:ce:a8:ea:f1:df:05:f6:b4:e8:ee:5a:ab:e4:
16:38:f4:f1:b6:75:10:33:0f:64:4f:d5:ef:72:57:
f8:44:11:17:5e:fc:37:02:b6:0b:20:cc:c9:9b:3d:
e3:06:10:18:9c:54:4f:9c:da:2a:54:00:5b:ea:36:
50:e1:a2:2d:b4:ca:59:24:6a:19:f1:8a:b2:03:03:
37:c7:bb:bb:59:b6:ff:b6:c9:6f:ff:c5:c4:09:5a:
fd:e2:92:ff:5c:83:ca:12:e5:04:b1:03:45:45:94:
10:99:27:46:76:c5:5a:30:3b:ae:58:6a:90:2d:6d:
a2:a9:ee:98:16:9b:e7:b0:06:55:1a:e6:0e:c5:99:
4b:36:fa:98:97:df:81:cc:f5:42:66:c7:e6:0b:44:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6B:D6:8E:FB:38:C8:0B:CA:A4:FB:C6:DF:28:2A:98:1A:87:C5:04
X509v3 Authority Key Identifier:
keyid:4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/D11E6E8224CB11F1A3AB4FF6A7833773.roa
sbgp-ipAddrBlock: critical
IPv4:
163.223.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7e:54:19:c5:45:18:a5:99:f0:8b:f9:a3:d4:8f:70:62:7a:
fa:50:6d:31:b6:cf:3c:3b:87:63:86:4d:7b:8f:46:04:98:d9:
97:0f:b5:3b:46:1c:1b:67:88:95:fd:b7:20:d0:71:2e:5f:42:
ab:95:cc:2f:78:40:9c:3a:68:59:ca:0e:d2:7a:10:e2:da:80:
c8:16:90:98:36:69:d9:91:e0:9d:fc:00:a7:0b:90:8d:6b:b8:
04:1a:ed:fa:2c:35:30:82:7a:79:1d:e7:f2:42:55:32:dd:44:
ce:61:39:06:b5:89:72:97:2b:68:7d:fd:d7:7c:75:76:6c:31:
17:e6:a9:51:d1:8f:8a:a2:1c:fc:65:97:2a:d6:82:d6:a3:0c:
fd:59:14:6d:90:55:b8:73:ef:4b:29:d8:d1:f2:98:59:bc:12:
54:c6:38:4a:54:a7:91:25:3f:0f:2b:8e:bf:9f:b1:f4:cd:e5:
d1:0c:fb:58:1a:a5:74:69:3b:87:36:ae:59:26:4a:a9:15:5d:
6f:df:d6:a7:79:28:a1:22:a5:7c:a1:d5:c3:88:90:2f:0d:f8:
fe:3f:bc:51:f9:85:fa:b8:c6:36:ef:b9:96:a0:bb:fa:d5:68:
20:77:2a:a2:cb:d1:1d:fc:e0:2e:5c:17:19:0f:1f:e4:74:10:
0e:b9:2a:f5
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RDNEMDExMC8GA1UEBRMoNEEyNDVCRjBGRTc1REFBMTExNEFCQzUwRTZCOTlFRDQz
NkMzMkM2OTAeFw0yNjAzMjEwMjE1MjNaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YmRmZjNiLTc5NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdutyyJtcCOUMXCHS784cjan7vmUdxYTjJPA8dnBU8GPMpGAppZTEUY5x3I6ra
Sgw1UmpypoYiKFW9mFCJOi66LRUAUvME/WOYiBGCnISCNbaw5rl7lp2FmjsYxfnh
YxPm/NzW22SzUtSyzqjq8d8F9rTo7lqr5BY49PG2dRAzD2RP1e9yV/hEERde/DcC
tgsgzMmbPeMGEBicVE+c2ipUAFvqNlDhoi20ylkkahnxirIDAzfHu7tZtv+2yW//
xcQJWv3ikv9cg8oS5QSxA0VFlBCZJ0Z2xVowO65YapAtbaKp7pgWm+ewBlUa5g7F
mUs2+piX34HM9UJmx+YLRMsZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUw2vWjvs4
yAvKpPvG3ygqmBqHxQQwHwYDVR0jBBgwFoAUSiRb8P512qERSrxQ5rme1DbDLGkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREM0QwL0I2NzJFRkEyMjRD
ODExRjFBMzdGQjdBN0E2ODMzNzczL1NpUmI4UDUxMnFFUlNyeFE1cm1lMURiRExH
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU2lSYjhQNTEycUVSU3J4UTVybWUxRGJETEdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RDNEMC9CNjcyRUZBMjI0QzgxMUYxQTM3RkI3QTdBNjgzMzc3My9EMTFFNkU4MjI0
Q0IxMUYxQTNBQjRGRjZBNzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACj3/YwDQYJKoZIhvcNAQELBQADggEBAAx+VBnFRRilmfCL+aPUj3Bi
evpQbTG2zzw7h2OGTXuPRgSY2ZcPtTtGHBtniJX9tyDQcS5fQquVzC94QJw6aFnK
DtJ6EOLagMgWkJg2admR4J38AKcLkI1ruAQa7fosNTCCenkd5/JCVTLdRM5hOQa1
iXKXK2h9/dd8dXZsMRfmqVHRj4qiHPxllyrWgtajDP1ZFG2QVbhz70sp2NHymFm8
ElTGOEpUp5ElPw8rjr+fsfTN5dEM+1gapXRpO4c2rlkmSqkVXW/f1qd5KKEipXyh
1cOIkC8N+P4/vFH5hfq4xjbvuZagu/rVaCB3KqLL0R384C5cFxkPH+R0EA65KvU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:07:17 2026 by rpki-client