
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8646EEA0235611F194C606A0B0833773.roa
File: 8646EEA0235611F194C606A0B0833773.roa (raw, json)
Hash identifier: WhlkgFXJ7X2ne0SsO9MOKp1WTdS8rOEIUrIbVF3F9Hg=
Subject key identifier: B6:E3:D8:7A:CD:6A:57:DE:A1:8D:04:B2:3A:0B:15:DC:32:95:43:D9
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3ADB
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8646EEA0235611F194C606A0B0833773.roa
Signing time: Thu 19 Mar 2026 05:43:15 +0000
ROA not before: Thu 19 Mar 2026 05:43:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141031
IP address blocks: 111.88.0.0/24 maxlen: 24
111.88.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15067 (0x3adb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Mar 19 05:43:15 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69bb8cf3-47b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:3d:15:01:c9:f2:fe:eb:bd:d8:ad:8a:59:
56:fd:35:bd:1d:ac:93:2d:9a:8a:99:40:90:bf:32:
0e:41:28:2c:44:26:95:0e:34:6f:31:5b:1f:2f:6b:
d5:80:25:ef:ae:5b:23:c3:02:7b:86:6f:c4:a8:20:
68:cc:df:9c:d8:7f:34:36:01:d9:8f:c2:0f:4e:45:
de:78:38:e2:20:51:73:f2:6e:6b:fe:0d:a1:1c:a4:
4d:09:a2:09:cd:d8:09:ee:58:65:6a:56:45:bb:fc:
39:17:61:62:26:ac:c8:11:b0:ba:ec:8b:bc:6d:6c:
9b:c4:f9:a6:28:f7:27:d5:91:93:2d:cf:9c:38:fe:
a3:0e:29:c1:4a:fa:82:ae:c7:5a:2b:08:1d:c3:3a:
bb:8b:92:08:27:b6:57:41:92:0d:5e:2c:44:d6:94:
ba:a5:72:4d:55:b6:e3:15:ba:b7:38:b6:1b:ba:a7:
11:1f:fd:01:36:4c:61:74:f2:0b:01:df:84:10:a9:
55:0c:39:c2:3c:68:9d:49:68:ec:8c:3c:0b:ed:80:
e2:30:ca:74:ff:6d:6c:03:6a:ea:44:dd:cf:0e:e1:
b8:68:43:60:3c:90:a0:bd:a1:ce:90:c6:67:52:cd:
01:4e:27:5e:ec:00:7a:a5:c0:94:b7:6c:79:a6:40:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:D8:7A:CD:6A:57:DE:A1:8D:04:B2:3A:0B:15:DC:32:95:43:D9
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8646EEA0235611F194C606A0B0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
111.88.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:d6:15:d5:c1:43:92:c4:f5:e6:59:6a:6f:bd:8f:84:b0:ff:
16:b7:c9:af:9e:f0:fc:6b:ef:d0:35:e6:91:41:a4:d5:57:93:
b3:7c:6f:e4:0e:18:89:4c:80:4c:6f:ca:4b:4e:38:71:51:76:
36:72:d4:1a:34:26:d4:fc:02:3f:20:e7:84:79:0c:78:29:64:
b6:7c:21:1a:cc:31:f0:09:1c:9b:b0:99:e8:9f:b9:08:cb:cd:
28:7d:96:05:ac:6d:17:69:e9:68:26:2e:0e:b7:a6:15:e0:28:
23:df:34:75:6d:01:04:93:8a:d6:bc:f7:3c:05:3f:7f:69:2d:
b1:f5:9e:cc:47:48:4f:84:da:b6:12:65:67:17:52:38:c3:68:
13:5a:ce:f7:35:22:84:9a:6d:3f:61:c7:16:bc:78:6d:e4:95:
31:cf:71:29:a0:2f:30:ff:e6:dd:e7:68:ef:ee:ad:30:ff:79:
0a:c0:92:f0:d0:9e:ca:11:66:de:fd:86:88:79:df:13:93:11:
60:a6:63:33:2d:bb:03:d2:26:ac:7a:3f:80:b6:69:a8:4b:8a:
3a:e9:ca:6e:1c:37:0e:78:67:5c:65:61:48:7a:57:cc:00:6b:
0a:4e:ed:4a:13:d7:88:5f:65:88:43:38:4c:c1:20:a0:7b:e4:
5f:bd:e0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:06:11 2026 by rpki-client