
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa
File: F17169E244A311E9AEF6F25AC4F9AE02.roa (raw, json)
Hash identifier: H6EDGgrRbesY/HC/4QOk7KDGC4ogtYE/w/DKgTKt0yw=
Subject key identifier: FF:71:EB:03:41:9D:34:97:77:E4:E1:33:72:0A:08:F8:DF:E8:BC:3F
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 2886
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa
Signing time: Fri 24 Jul 2026 03:03:37 +0000
ROA not before: Tue 26 May 2026 16:22:25 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 45622
IP address blocks: 111.68.56.0/24 maxlen: 24
114.108.205.0/24 maxlen: 24
114.108.216.0/24 maxlen: 24
114.108.236.0/24 maxlen: 24
182.18.200.0/24 maxlen: 24
182.18.201.0/24 maxlen: 24
182.18.238.0/24 maxlen: 24
182.18.246.0/24 maxlen: 24
182.18.247.0/24 maxlen: 24
182.18.248.0/24 maxlen: 24
182.18.249.0/24 maxlen: 24
182.18.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 07:22:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10374 (0x2886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: May 26 16:22:25 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a62d609-626c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:9d:72:4b:09:3b:bd:d8:bf:5c:68:a4:88:
7a:df:1b:fb:d1:93:67:61:21:6e:85:45:37:ed:66:
61:36:ea:4f:b6:52:12:b8:52:09:34:8e:6a:ea:b1:
74:c0:36:ad:14:9e:60:af:06:0e:95:b1:59:b4:53:
80:5a:63:2e:3a:fe:5c:74:b5:8e:4e:da:ce:25:2d:
af:3d:39:3d:03:82:93:51:50:be:5a:02:c7:84:6b:
59:81:3c:b7:86:c4:87:cb:1f:dc:5e:3d:f5:52:63:
8e:3d:16:85:12:53:5c:ee:fe:40:62:e7:ee:1e:48:
a6:47:6a:c1:b4:3e:67:e6:75:c0:c2:7a:ef:0d:d5:
50:81:72:a0:7f:b8:b4:ec:80:08:35:48:e4:62:bb:
9d:e5:6b:c0:ae:6d:ba:8b:13:f7:d8:cb:da:ff:f0:
96:c2:61:f3:22:c1:75:90:13:ad:c6:a8:03:5e:8c:
68:35:1c:73:1f:a6:97:55:c4:d2:1c:74:ff:77:21:
8d:76:1b:4e:da:3f:66:64:f5:83:9c:83:ce:fa:51:
a4:d8:bb:1c:43:33:e6:99:6d:af:da:4a:30:16:ce:
2d:2f:13:7e:5a:a0:1e:91:ed:39:b5:88:57:33:87:
fe:5a:0a:6a:2a:1f:75:e3:cf:94:18:81:be:c2:12:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:71:EB:03:41:9D:34:97:77:E4:E1:33:72:0A:08:F8:DF:E8:BC:3F
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/F17169E244A311E9AEF6F25AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
111.68.56.0/24
114.108.205.0/24
114.108.216.0/24
114.108.236.0/24
182.18.200.0/23
182.18.238.0/24
182.18.246.0-182.18.250.255
Signature Algorithm: sha256WithRSAEncryption
78:9b:ca:1b:e5:bc:ad:67:42:41:0f:63:f4:7f:e7:4e:77:c6:
0f:9f:14:2f:f8:43:5c:44:37:d5:f8:a5:58:b7:1a:97:db:77:
94:38:46:67:76:b4:52:ed:bb:ae:5a:25:d0:e5:5f:2f:e4:12:
b3:7b:c1:d8:4f:60:03:b9:7f:f4:26:b7:80:98:f2:34:5b:e2:
28:42:b2:12:9b:a1:ef:85:d5:cb:a5:4d:fa:89:c0:34:d4:99:
10:72:43:83:6a:42:08:6b:50:55:3c:f4:5c:7b:aa:f3:10:c1:
ec:75:e4:36:e2:27:f2:55:9f:66:cf:25:16:01:84:e9:ff:4a:
e4:95:2a:29:c2:68:d3:a9:16:32:54:88:13:fc:4b:6f:9f:3f:
51:01:ae:52:3f:6d:a2:30:2f:3f:95:4e:22:31:a9:e3:1f:52:
ea:0a:ac:5d:1e:7a:c4:48:8e:d4:e6:4f:4c:f3:34:e3:bc:6c:
91:9e:79:e8:a8:b7:10:e7:65:96:f3:f1:b2:22:32:53:83:05:
c4:4a:91:3c:9d:56:f8:b0:65:0b:e3:3c:2d:82:28:c0:f1:f5:
54:b2:bb:d6:c3:36:a9:42:6d:d9:dd:b7:95:2b:d8:82:eb:95:
76:dd:e1:f4:a8:4b:15:4c:1e:d1:05:f1:01:a0:50:b7:92:55:
84:05:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:20:29 2026 by rpki-client