
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa
File: 2B340AEAC1CB11EF9CFC9509C4F9AE02.roa (raw, json)
Hash identifier: iLGMG59aI5S5bAd3js+MklsjrDboNtyYlDECw/2ZcTo=
Subject key identifier: 80:95:D1:EA:01:FE:74:D7:75:D6:26:27:F6:DE:8C:56:27:26:D9:83
Certificate issuer: /CN=A9163358/serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Certificate serial: 0174
Authority key identifier: 7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa
Signing time: Fri 09 Oct 2026 05:55:13 +0000
ROA not before: Fri 09 Oct 2026 05:55:13 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 17541
IP address blocks: 202.44.56.0/24 maxlen: 24
202.44.57.0/24 maxlen: 24
202.44.58.0/24 maxlen: 24
202.44.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 05:55:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 372 (0x174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163358, serialNumber=7FBFCF196BFD2EF070625BEEC426E860688AC2F1
Validity
Not Before: Oct 9 05:55:13 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac881c1-fc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:1a:25:f9:a2:b2:22:c3:81:d0:ba:e2:a9:
bd:7b:ca:71:cb:04:15:24:13:4f:bc:50:5d:a9:80:
7f:7a:3c:a5:20:48:8d:8f:9e:e6:5e:f4:0b:bf:07:
dc:13:2a:e5:48:32:fb:95:c1:46:11:37:49:e8:0b:
db:43:6d:3e:1e:3c:46:ca:c5:e3:d4:e7:7e:c3:22:
3b:07:47:a0:4e:3a:f0:cf:f9:3a:a3:6f:0e:19:a4:
7d:aa:a8:2c:f6:e4:a4:8e:15:80:b7:34:ce:8e:a8:
ce:68:d0:6c:ba:19:b7:71:ee:31:a5:98:43:c2:b5:
8e:93:b8:ff:45:20:f2:a8:49:74:aa:34:d6:85:16:
4c:b9:4f:34:e1:54:9b:e2:e9:07:9c:f5:a1:6f:b4:
30:db:d8:0c:c5:59:6d:1e:5d:b2:6b:a5:63:c0:5d:
f6:e6:fc:22:b3:87:2e:9c:8c:89:13:d9:79:ec:cf:
d0:7f:27:5a:48:7e:6f:5d:03:38:bc:4e:0a:96:e1:
fe:49:ef:30:71:33:cf:45:2c:a3:04:fa:d8:e8:b6:
5d:38:4e:d7:80:53:bb:e6:df:17:85:33:a5:52:47:
78:2c:cd:55:8c:f4:6e:6e:01:f5:31:ab:3c:e2:c2:
a9:75:29:f4:1d:da:dd:7a:94:e8:f0:7a:4f:66:57:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:D1:EA:01:FE:74:D7:75:D6:26:27:F6:DE:8C:56:27:26:D9:83
X509v3 Authority Key Identifier:
keyid:7F:BF:CF:19:6B:FD:2E:F0:70:62:5B:EE:C4:26:E8:60:68:8A:C2:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/f7_PGWv9LvBwYlvuxCboYGiKwvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f7_PGWv9LvBwYlvuxCboYGiKwvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163358/7D40647EC1CA11EFA3F24A87C4F9AE02/2B340AEAC1CB11EF9CFC9509C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.44.56.0/22
Signature Algorithm: sha256WithRSAEncryption
54:0c:89:94:96:28:09:bd:78:17:99:98:29:7c:90:02:f5:5b:
51:7a:72:e5:c4:4a:95:30:19:f5:7f:83:ec:35:7a:4a:e8:53:
19:d1:86:13:dc:da:a4:4e:ce:a9:35:0f:a2:db:5a:b1:bf:12:
17:5c:f9:3b:1c:7d:0f:6f:b5:7e:a9:c3:f8:0c:99:51:25:aa:
f4:5b:7e:4f:10:a2:74:58:51:b2:07:57:0d:8a:f2:83:1f:a1:
2d:31:82:62:95:e2:cb:9f:a0:90:6c:c5:9f:55:37:f3:8c:5d:
57:6a:c1:43:d6:1a:32:62:c1:7c:77:a6:34:07:4d:69:07:6f:
d2:0f:cc:5f:35:a1:e4:20:e4:63:34:5d:cd:68:cb:64:79:c2:
bf:69:e2:95:90:3c:e5:fb:cc:3c:9b:d7:17:66:00:ef:0f:c9:
b8:0b:88:04:00:aa:f6:77:02:cd:8e:b0:8b:7e:5d:1f:87:12:
15:47:93:81:67:fb:ed:12:b6:48:e1:1d:cf:e7:0a:68:85:b2:
33:25:69:53:a1:40:e9:c6:4a:3d:3d:09:26:60:1a:1f:55:d3:
f1:42:a8:e8:4c:1c:80:8e:2e:95:ee:66:1d:77:61:53:bd:65:
0d:27:36:48:e8:20:12:a3:72:77:d7:14:ad:a3:fc:05:89:50:
1d:3a:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:45:33 2026 by rpki-client