
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E1F3085E777E11EFB3F75352C4F9AE02.roa
File: E1F3085E777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier: MlWkxf4J765duArgDZ2QKyAt6xI228MKLb5L4iTwob0=
Subject key identifier: F8:72:FD:BB:74:74:20:4C:BB:4F:36:1A:5F:1C:59:55:DE:95:7C:0C
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 018F
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E1F3085E777E11EFB3F75352C4F9AE02.roa
Signing time: Tue 07 Jul 2026 06:32:14 +0000
ROA not before: Tue 07 Jul 2026 06:32:14 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135530
IP address blocks: 45.254.36.0/23 maxlen: 23
45.254.36.0/24 maxlen: 24
45.254.37.0/24 maxlen: 24
45.254.38.0/24 maxlen: 24
45.254.39.0/24 maxlen: 24
2405:a280:33::/48 maxlen: 48
2405:a280:34::/48 maxlen: 48
2405:a280:35::/48 maxlen: 48
2405:a280:42::/48 maxlen: 48
2405:a280:43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Jul 7 06:32:14 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4c9d6e-a6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:fe:a3:49:45:84:98:82:10:42:d3:f0:af:
67:79:2a:e2:30:17:89:50:04:18:74:d3:1a:12:ad:
c4:a3:cd:ef:78:58:95:46:3c:b7:c7:68:08:53:be:
a9:0d:c4:68:f1:8a:43:72:82:b2:46:0b:a8:61:80:
43:d6:9f:36:3c:40:b4:50:0c:d4:14:39:12:1a:5a:
a7:8b:65:ba:42:03:7e:e9:62:ab:03:b2:d8:78:a2:
4a:24:6b:96:69:19:62:44:88:85:d9:b5:11:24:5d:
63:9e:8b:1f:77:53:57:84:e0:17:6c:90:76:3c:c9:
01:8d:2f:05:86:33:39:98:f4:fa:2a:c5:10:22:e5:
0f:18:2c:23:b2:c4:3d:ae:86:7b:d7:dd:0a:b1:18:
37:0b:5f:3c:eb:41:11:81:fa:2d:41:36:df:15:ab:
03:f8:e7:41:e5:3b:b2:18:66:d4:83:c7:ab:b4:eb:
65:26:2b:ea:c0:10:6e:13:33:f7:36:f9:be:e6:9f:
45:71:a0:cf:de:3b:e1:24:71:a4:ff:a5:6b:d2:78:
dd:66:28:62:c5:30:89:73:b8:0d:9f:2f:ca:69:63:
0a:19:6f:3a:f1:6a:d0:cc:2f:35:87:7c:56:8e:de:
87:c8:a9:e7:18:6f:09:b7:86:7f:a3:2e:91:0a:a8:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:72:FD:BB:74:74:20:4C:BB:4F:36:1A:5F:1C:59:55:DE:95:7C:0C
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E1F3085E777E11EFB3F75352C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.254.36.0/22
IPv6:
2405:a280:33::-2405:a280:35:ffff:ffff:ffff:ffff:ffff
2405:a280:42::/47
Signature Algorithm: sha256WithRSAEncryption
9b:fd:94:9b:8f:fd:60:9f:28:dd:4d:01:41:8b:1a:62:79:0c:
ce:df:02:e4:78:44:3a:22:1d:72:51:22:1b:60:18:72:23:79:
54:63:61:af:b7:8a:90:b1:47:33:88:c2:95:df:2a:3a:a7:ab:
8a:bc:1c:2d:4f:5c:da:82:d4:50:07:23:75:8b:31:e3:af:9c:
5d:95:aa:6b:51:17:da:2d:ba:42:96:1b:ad:20:4e:c9:cf:0c:
69:8d:8e:87:8b:aa:f9:a1:66:2e:1e:93:41:99:3c:d1:d4:9e:
0f:e5:99:ba:c4:b3:a6:b7:44:b8:53:c3:23:93:cb:8c:20:01:
08:36:4b:bc:9c:16:01:bb:3c:52:86:bf:e9:51:aa:1d:f2:2c:
b6:b9:30:80:7f:7c:86:70:f6:32:b6:42:bd:01:d8:5c:3f:b8:
3e:93:ff:fc:8c:43:d1:ee:70:3f:fb:c7:10:0b:b6:2d:45:9e:
1a:cb:4d:f7:9a:93:df:6f:2a:1e:cc:3c:7d:61:c8:cf:49:f4:
33:c7:07:3b:53:59:0c:34:95:c0:21:55:cf:00:4b:3e:4b:12:
61:4a:7e:55:26:38:ee:7d:21:93:7d:e7:5e:92:0b:d7:b2:9d:
62:fe:94:55:3d:da:5e:43:48:db:eb:be:ea:82:9d:a6:f9:d1:
be:40:82:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:40:17 2026 by rpki-client