
$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
File: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier: 50bHfxKSpda4xd/0+Y70XiROBlQW8ceJ16h3JpGhCFI=
Subject key identifier: 85:17:69:FC:8E:A5:52:DE:8E:FB:30:7E:45:B3:76:46:D1:DB:8E:BD
Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial: 0194
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
Signing time: Tue 07 Jul 2026 06:32:23 +0000
ROA not before: Tue 07 Jul 2026 06:32:23 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 63997
IP address blocks: 45.254.38.0/24 maxlen: 24
2405:a280:33::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Validity
Not Before: Jul 7 06:32:23 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4c9d77-ecd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:69:3d:2f:2f:ba:be:c6:10:91:b5:33:11:
6d:e4:27:eb:5d:41:ea:c2:2d:7a:c0:84:af:25:bb:
d4:83:4f:7e:54:ac:ea:fa:5a:0e:89:e0:be:4f:1d:
3d:7b:b9:2b:03:12:97:34:3f:2d:64:b0:71:8c:14:
48:53:f2:6b:c6:1b:09:cb:87:c0:46:d9:87:fc:34:
58:86:70:6d:4e:f2:1b:10:f0:5a:f2:c7:c5:f4:0c:
9c:12:77:f7:7f:2f:21:17:ea:6d:db:31:51:3f:3e:
05:85:30:01:d9:c9:9d:ed:07:ef:8a:25:90:82:d4:
f8:41:f0:ab:7f:78:62:5f:94:13:75:68:a6:26:20:
ea:aa:08:dd:dd:de:a8:3c:5e:f7:25:71:df:e1:16:
27:2c:4f:cd:f3:db:2f:97:b9:8c:26:e9:9b:06:cc:
ba:79:0f:d4:c7:51:79:bb:c8:ce:6f:f4:73:ee:63:
d3:5c:df:0a:d8:1b:64:5b:d7:1c:9f:34:fc:14:ee:
cd:56:62:8e:ec:58:fe:b6:7a:2d:57:2b:7e:b1:e4:
17:48:97:98:a2:d4:53:cd:13:9b:b6:c2:43:6e:fd:
f5:8e:54:43:92:eb:0a:c7:f7:29:ee:b7:6e:98:7b:
f7:9f:ed:70:64:52:a7:31:38:98:fd:94:c4:cf:ff:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:69:FC:8E:A5:52:DE:8E:FB:30:7E:45:B3:76:46:D1:DB:8E:BD
X509v3 Authority Key Identifier:
keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3C4A4EE777E11EFB3F75352C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.254.38.0/24
IPv6:
2405:a280:33::/48
Signature Algorithm: sha256WithRSAEncryption
79:87:8a:e4:b0:85:51:79:71:cb:68:5f:ab:19:39:95:7b:80:
29:06:07:5a:f9:56:7e:2d:ed:ee:95:fb:c8:9c:b7:9c:e0:0a:
f5:58:2b:46:60:5b:e6:c1:2f:71:b5:5a:e3:f5:ea:c4:a9:07:
07:fe:56:d9:a0:7e:37:ad:ea:e4:d4:91:b4:a2:20:e1:1a:61:
11:e3:84:44:55:3a:50:10:a6:3a:8c:86:4f:60:e5:3b:80:3d:
76:ba:88:16:8d:85:55:86:a2:df:01:2c:dc:ff:15:25:26:4f:
ab:11:64:10:12:88:37:46:00:ad:0e:01:46:8f:14:31:9b:0e:
4f:a0:e4:61:23:4a:06:74:4c:a8:98:eb:09:80:ca:25:78:7b:
38:2c:fe:e4:86:ba:16:e1:18:41:eb:85:c2:a8:00:3c:3d:5f:
90:ae:dd:46:84:c1:a5:06:35:2f:a2:bb:16:98:83:fe:f6:11:
8c:bf:fb:0f:e0:a6:01:02:ed:98:4f:35:f9:89:a8:1f:ca:3e:
a9:c9:cf:10:7b:c6:ad:a6:31:db:fe:3a:2d:ed:6f:96:f1:0e:
7b:4c:06:40:5b:c2:c3:7e:0b:d1:17:c8:4a:c3:b6:56:7f:1d:
41:e3:21:64:f4:40:17:bc:48:78:8e:2e:be:76:ac:70:ec:b8:
c7:4a:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:31:28 2026 by rpki-client