
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/4E5CB05248C611F18AC335C9C1833773.roa
File: 4E5CB05248C611F18AC335C9C1833773.roa (raw, json)
Hash identifier: jeXZcU3+gUnWlt6iUsXAboEMyl0tXGa6+HtLhsAvKdU=
Subject key identifier: A7:FD:BF:80:70:F5:8A:2A:0E:13:E1:F1:30:CA:42:68:88:5F:3A:10
Certificate issuer: /CN=A9165DEE/serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Certificate serial: 0B97
Authority key identifier: 11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/4E5CB05248C611F18AC335C9C1833773.roa
Signing time: Tue 05 May 2026 21:06:38 +0000
ROA not before: Tue 05 May 2026 21:06:38 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 27.111.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2967 (0xb97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165DEE, serialNumber=11DF6CE4DAB9684EDF6CF5E03DFDEC86F15CD7BE
Validity
Not Before: May 5 21:06:38 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69fa5bde-c18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:dc:8e:96:dc:b7:69:47:04:32:8e:f7:ef:
64:f4:b9:06:ef:58:30:c0:49:af:65:c2:d3:f3:d2:
aa:b2:bb:ea:8c:57:cc:b3:ec:82:52:f6:e2:38:a1:
81:a9:9d:cb:a8:01:e2:18:56:50:84:d2:ac:fd:a9:
4a:b6:84:7f:7e:f6:0c:d1:db:63:68:ef:70:a8:b7:
41:48:bb:3d:c9:0e:3d:63:f2:39:14:5d:b9:b8:d0:
39:79:e2:90:8d:cb:5f:90:4d:85:37:c9:fd:c5:55:
18:6e:e8:6c:ee:72:80:da:05:01:09:40:77:7c:b3:
56:47:eb:c5:91:67:7c:1b:81:5f:ab:4e:ba:c4:fa:
25:9f:6c:cd:f3:10:9c:1a:79:28:b8:f4:88:fc:25:
a8:57:20:7e:da:68:75:a1:5f:a7:97:c7:c4:52:5f:
eb:cd:c2:9f:17:2e:7f:57:34:a6:19:97:71:a6:e9:
d3:a6:c8:1f:41:2e:c3:c6:6b:6d:fe:1f:72:85:59:
33:f3:f5:96:ef:fe:68:d3:69:34:25:6d:1e:73:0e:
fe:0d:43:08:d7:c3:af:0e:c3:7c:cb:22:31:67:9c:
c6:6a:33:13:bb:73:fb:dc:6a:1d:1a:58:66:61:f8:
dc:25:62:ab:7f:d9:29:6f:f0:59:d7:01:29:5f:44:
83:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:BF:80:70:F5:8A:2A:0E:13:E1:F1:30:CA:42:68:88:5F:3A:10
X509v3 Authority Key Identifier:
keyid:11:DF:6C:E4:DA:B9:68:4E:DF:6C:F5:E0:3D:FD:EC:86:F1:5C:D7:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/Ed9s5Nq5aE7fbPXgPf3shvFc174.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ed9s5Nq5aE7fbPXgPf3shvFc174.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DEE/ADD65E284B9011EA95BEA639C4F9AE02/4E5CB05248C611F18AC335C9C1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
27.111.15.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:78:b5:e2:99:d4:36:97:06:01:2b:b1:45:60:1d:08:2b:68:
67:cc:42:49:d9:4f:b0:1f:4f:6a:2b:cc:bc:73:d7:e8:6e:f4:
2d:9d:4e:a8:ad:92:6d:02:14:c0:9c:3c:61:c0:9e:b4:a9:83:
50:1c:ac:6d:e9:9f:12:b1:f3:9b:44:27:88:eb:43:c9:9e:06:
31:e9:69:20:91:f7:f5:2d:4e:31:f9:8e:9e:61:a8:1c:a9:0e:
98:6c:af:71:52:95:2d:26:9a:cf:44:ff:8e:da:b2:59:f8:aa:
0f:16:26:c5:38:6e:16:59:b8:37:df:a1:b7:ba:98:2c:b3:40:
cb:cd:37:6f:f0:bd:18:c1:27:97:75:f4:e8:3e:b3:ae:8a:1a:
a0:cb:6e:bd:ec:1a:3c:6a:33:00:f0:8b:d6:d5:91:8b:f3:10:
ff:87:f1:69:83:22:da:7c:58:a0:e6:b3:92:4e:70:2e:5d:1c:
5d:b9:5a:3c:35:f3:34:db:16:2c:e7:1a:0b:35:d2:61:e8:6a:
b5:16:ee:d2:86:00:9d:17:60:21:28:60:45:5b:9f:15:e3:f8:
df:35:50:09:3b:02:95:74:b0:d4:de:b9:62:f8:a2:b9:7a:b4:
d8:7f:76:04:fa:84:fd:44:76:66:07:14:8f:ed:88:57:5a:60:
06:09:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:53:57 2026 by rpki-client