
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/66EE9D94152511ECAD055780C4F9AE02.roa
File: 66EE9D94152511ECAD055780C4F9AE02.roa (raw, json)
Hash identifier: tHkWBsWt7zg/nHnhpSyeoXJLDbxfBsQ1sUqpG3dRgvY=
Subject key identifier: A0:4D:9B:E9:4D:84:2C:1B:2F:57:55:ED:E4:EC:F0:7E:7C:5C:04:CE
Certificate issuer: /CN=A9131A2D/serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
Certificate serial: 08BD
Authority key identifier: 1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/66EE9D94152511ECAD055780C4F9AE02.roa
Signing time: Tue 14 Jul 2026 21:21:49 +0000
ROA not before: Tue 14 Jul 2026 21:21:49 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 17888
IP address blocks: 202.83.192.0/19 maxlen: 19
202.83.192.0/20 maxlen: 20
202.83.192.0/24 maxlen: 24
202.83.194.0/24 maxlen: 24
202.83.195.0/24 maxlen: 24
202.83.196.0/24 maxlen: 24
202.83.203.0/24 maxlen: 24
202.83.204.0/24 maxlen: 24
202.83.205.0/24 maxlen: 24
202.83.206.0/24 maxlen: 24
202.83.208.0/24 maxlen: 24
202.83.209.0/24 maxlen: 24
202.83.210.0/24 maxlen: 24
202.83.211.0/24 maxlen: 24
202.83.214.0/24 maxlen: 24
202.83.216.0/24 maxlen: 24
202.83.220.0/24 maxlen: 24
202.83.222.0/24 maxlen: 24
2400:f000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl
rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237 (0x8bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A2D, serialNumber=1D04AC5D03D8EF6AC431DE1A7AAE7B687681B636
Validity
Not Before: Jul 14 21:21:49 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a56a86d-1ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:b7:ea:35:2c:15:53:05:07:13:7e:d4:21:
4d:56:c0:4f:87:62:6c:80:90:e0:19:42:d6:eb:42:
32:84:5f:59:9f:9e:a8:c2:9f:34:72:24:12:3a:0c:
fb:8f:8f:11:17:77:d6:28:d5:06:a1:67:88:0b:60:
4f:ab:99:7a:e2:a6:14:89:d3:fe:95:0f:b2:e7:49:
50:f0:47:6d:26:36:72:92:01:83:83:80:4d:6b:92:
27:d9:9f:bf:b7:9b:23:06:28:d9:eb:10:6c:e4:20:
27:6c:b3:b8:a1:8e:97:64:5b:ca:64:43:a7:8e:2b:
92:fa:a3:f2:8e:fe:f0:e5:65:85:20:74:fb:9a:fa:
fd:cf:69:6e:f1:e7:45:7c:40:36:bb:37:e0:cb:b1:
63:f3:23:0c:9e:18:9f:43:f3:3d:a1:a2:b3:4b:15:
86:39:3c:45:ca:53:cb:08:b0:d8:20:72:b4:0c:9f:
7f:cc:17:cb:24:46:02:36:8c:30:58:03:a3:79:a5:
2a:84:e2:f7:bb:2e:f8:fe:9b:10:cc:bf:5b:fd:81:
25:1c:0a:ff:1c:08:99:b5:10:37:cd:62:fc:4d:a3:
3b:f1:d0:d6:db:94:fc:21:c0:ea:50:ae:d5:64:30:
f8:6b:36:48:69:65:ae:9c:f5:3a:c5:d2:56:40:30:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:9B:E9:4D:84:2C:1B:2F:57:55:ED:E4:EC:F0:7E:7C:5C:04:CE
X509v3 Authority Key Identifier:
keyid:1D:04:AC:5D:03:D8:EF:6A:C4:31:DE:1A:7A:AE:7B:68:76:81:B6:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/HQSsXQPY72rEMd4aeq57aHaBtjY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQSsXQPY72rEMd4aeq57aHaBtjY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A2D/DA46609AF7C311EA9B2EF785C4F9AE02/66EE9D94152511ECAD055780C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.83.192.0/19
IPv6:
2400:f000::/32
Signature Algorithm: sha256WithRSAEncryption
29:c0:ec:e3:35:8c:37:b5:bb:3e:6b:47:9b:e1:88:c6:27:89:
7b:e9:47:d6:ee:d2:bb:0e:f4:1f:77:c9:d9:a6:e3:ca:88:56:
5b:9a:0d:10:84:cc:00:04:51:fb:1e:04:b8:aa:20:a5:1c:9d:
b8:d8:74:d9:4d:0d:34:d4:69:df:21:47:ff:62:5d:3e:b8:74:
de:88:89:ca:ec:7d:c0:22:4c:14:21:cf:2c:18:c0:7f:05:be:
58:fb:c9:e1:12:10:4c:d7:3b:7f:8d:3b:00:81:0d:1f:35:0b:
6f:3e:ea:61:3d:99:bd:04:5e:b5:63:4a:0c:77:0d:0e:f3:2a:
e7:64:15:71:b3:a3:b9:7b:10:79:46:1d:ca:a9:e0:bd:e1:20:
e8:f5:18:b3:7a:1c:e8:d6:1b:90:81:e2:9a:19:0b:90:e3:a2:
eb:0d:a4:08:7a:e3:22:0c:fa:1b:40:23:21:56:8b:88:88:fd:
80:26:24:e7:05:d1:03:c1:19:6f:d6:d0:f1:dd:29:c0:4a:ad:
03:5d:1e:c2:16:6e:8b:15:64:67:b8:3d:2d:1a:cd:dd:48:4e:
f0:aa:5f:85:2b:06:1e:36:1c:87:dc:7c:0b:1f:cc:19:d9:bb:
1c:e7:7b:88:69:02:59:5b:27:31:fd:24:16:2c:73:e0:24:20:
4a:f6:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:30 2026 by rpki-client