
$ rpki-client -vvf rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/77F3A8B44D1A11F1A20E0EADB9833773.roa
File: 77F3A8B44D1A11F1A20E0EADB9833773.roa (raw, json)
Hash identifier: njgB4GyznC4WbAXjnMUKLhBAaTqFgRbORUoYNqNFmn0=
Subject key identifier: 8C:D6:16:15:8B:11:09:98:D5:9B:EE:1B:5B:CC:C8:29:CF:40:3E:C0
Certificate issuer: /CN=A9147067/serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
Certificate serial: 02
Authority key identifier: 97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/77F3A8B44D1A11F1A20E0EADB9833773.roa
Signing time: Mon 11 May 2026 09:19:10 +0000
ROA not before: Mon 11 May 2026 09:19:10 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 45758
IP address blocks: 202.44.64.0/24 maxlen: 24
202.44.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl
rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 09:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147067, serialNumber=9798FAD0A02544EEF7362A58B71AF36681498EB1
Validity
Not Before: May 11 09:19:10 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a019f0e-cb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:75:2c:65:eb:66:32:4c:e6:0a:64:39:c1:f7:
77:3e:1b:60:d1:d1:0e:75:a7:75:98:60:e3:da:14:
82:ff:db:44:8d:55:f1:93:1a:7f:80:96:c7:12:31:
46:de:37:56:aa:42:d2:8d:05:6d:88:53:9a:be:24:
b9:4b:7f:08:af:b3:66:2d:5c:45:11:8e:17:56:08:
65:25:bf:45:51:6e:f7:7c:a9:1c:e1:a6:79:9e:e3:
1c:cb:b0:1b:b4:a8:77:86:40:80:06:32:c2:c9:dd:
72:51:13:39:06:4a:d7:6b:64:d1:85:ae:0b:39:64:
f2:cb:ed:2f:05:fb:27:3e:bc:a6:0d:30:c2:b1:aa:
da:a8:02:d2:e4:12:ce:7c:c7:72:ef:d9:36:0e:76:
63:3b:03:68:eb:1c:46:35:4a:1b:17:27:8f:af:ea:
a0:1b:c8:87:bd:6b:8a:81:b1:17:cb:56:ad:82:99:
9d:d5:69:31:7f:95:a2:0d:ae:ed:b0:2a:ae:cc:96:
72:0f:04:e5:4b:72:ca:e6:b3:2e:ec:b1:12:38:87:
16:69:94:7c:d9:13:6f:29:2d:90:0a:4d:32:ff:5c:
6e:0c:a4:30:f8:e5:82:c4:11:e7:ff:f0:2f:b3:5e:
52:1c:9b:cd:db:e4:b1:ac:dd:e9:e5:e8:84:85:12:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D6:16:15:8B:11:09:98:D5:9B:EE:1B:5B:CC:C8:29:CF:40:3E:C0
X509v3 Authority Key Identifier:
keyid:97:98:FA:D0:A0:25:44:EE:F7:36:2A:58:B7:1A:F3:66:81:49:8E:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/l5j60KAlRO73NipYtxrzZoFJjrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5j60KAlRO73NipYtxrzZoFJjrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147067/E3610E1C4D1911F1A8D9B186B9833773/77F3A8B44D1A11F1A20E0EADB9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
202.44.64.0/23
Signature Algorithm: sha256WithRSAEncryption
62:fc:cd:23:89:6e:96:79:0f:37:04:9f:68:7e:ad:24:11:92:
44:59:b9:35:76:b6:cd:19:2e:9c:b4:9f:2a:55:7e:87:07:44:
cb:c9:40:73:b2:4d:a1:52:a8:d6:f4:72:a8:ca:65:58:a3:bc:
0e:d3:cc:01:0a:ce:73:d9:4f:a1:ae:2a:07:9b:36:42:63:e8:
fc:2a:a0:10:5c:95:6d:86:60:13:90:a3:da:44:3d:77:37:0d:
50:2d:44:92:42:a7:8e:cf:55:2c:33:af:17:5b:18:d8:26:ef:
15:81:2e:20:6f:9d:77:76:50:4a:b0:12:a4:94:33:47:31:5a:
c9:ac:eb:d9:3b:f3:94:ff:5f:99:0d:41:34:9c:c0:11:c8:48:
cc:98:70:fa:e8:cc:f1:79:08:ee:15:37:2e:2b:ab:71:f9:0b:
8f:16:2f:0e:0a:b8:16:ad:5c:4f:b6:ce:2a:5e:3c:e3:03:1b:
f8:68:48:af:f3:3e:aa:b7:41:a7:39:d2:90:1e:6f:d8:68:5b:
9b:08:05:d4:96:0e:99:e4:b2:ef:a3:45:be:08:8c:e3:03:b4:
a9:a4:cb:40:2a:b6:af:46:2a:a0:02:91:f3:b1:e2:09:db:37:
f4:9c:8b:3c:ec:c0:ea:3a:e5:21:2b:68:02:f6:42:5b:02:80:
e6:43:b2:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 14:47:23 2026 by rpki-client