
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1998442A6A6911F18287CF148C47A888.roa
File: 1998442A6A6911F18287CF148C47A888.roa (raw, json)
Hash identifier: M/p8XcwCACjksBG0lPH9EKkwR4b9TAusIscrzIwTeTY=
Subject key identifier: FA:46:F7:A1:30:42:81:8C:9F:53:4D:0E:77:97:2A:A2:DD:70:84:8F
Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial: 3583
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1998442A6A6911F18287CF148C47A888.roa
Signing time: Mon 06 Jul 2026 20:07:03 +0000
ROA not before: Mon 06 Jul 2026 20:07:03 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 26337
IP address blocks: 45.113.120.0/22 maxlen: 24
103.53.40.0/22 maxlen: 24
111.118.212.0/22 maxlen: 24
119.18.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13699 (0x3583)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Validity
Not Before: Jul 6 20:07:03 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a4c0ae7-4fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:af:9d:fe:73:7a:e2:f2:d0:36:14:d0:c2:
43:26:1b:d8:cc:d2:a9:45:85:06:06:5d:00:fe:26:
99:66:47:b4:04:d4:a2:5a:a3:22:33:4d:51:72:37:
72:e5:d9:da:6d:3d:8e:da:75:92:84:b4:49:ee:52:
a6:91:e6:5c:e0:de:9c:c9:e4:7a:7e:54:1b:f1:88:
74:7b:27:55:2a:34:12:1f:09:2d:ec:b7:61:8f:8d:
63:f8:c4:50:94:2d:13:2d:3e:30:b6:d4:58:08:a5:
78:90:d5:0f:7b:a4:1f:a5:e0:09:61:3e:36:59:80:
c4:6b:59:7d:f8:8e:29:69:85:ff:50:f0:eb:78:fc:
63:28:94:61:83:a8:dd:94:1c:64:f0:15:a2:e5:be:
4c:c7:1f:f0:70:c6:2a:58:9d:93:f1:61:1d:e8:a0:
49:79:b4:78:ce:f7:db:e6:d0:3b:66:27:a4:1f:c7:
bb:a8:93:29:18:27:c5:47:dd:71:5c:ec:e0:d6:da:
b8:29:1a:5e:5c:3b:e6:c0:8d:31:e0:f3:3d:d7:cc:
48:08:cd:80:fb:ea:f2:88:c8:35:c7:77:8d:e4:3a:
72:dc:52:4e:9b:5e:c2:94:d2:b5:58:cd:7b:a1:a7:
36:13:90:2c:a2:b1:c6:5a:17:af:ee:c6:e8:e1:e7:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:46:F7:A1:30:42:81:8C:9F:53:4D:0E:77:97:2A:A2:DD:70:84:8F
X509v3 Authority Key Identifier:
keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1998442A6A6911F18287CF148C47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
45.113.120.0/22
103.53.40.0/22
111.118.212.0/22
119.18.48.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:38:88:c7:d8:3d:14:e3:43:74:f4:c9:2c:bf:6e:f8:88:5e:
5a:9a:87:2f:f2:ba:f5:df:68:ef:54:4c:9f:16:71:3e:25:f4:
26:a4:4e:40:05:b4:b9:4b:8d:d9:4d:f3:ac:fd:63:58:f3:b9:
12:0e:fc:49:b6:98:70:b7:be:b9:d2:79:19:4c:d3:ac:8d:84:
e6:f9:7e:90:38:4e:53:f4:11:3c:67:c0:93:22:1e:b5:47:a0:
31:ae:f9:0d:bd:00:89:b1:07:5e:2f:ba:fe:d3:9e:eb:79:1a:
80:57:3f:27:ea:9a:04:82:a5:b8:f6:ca:61:db:24:6d:92:65:
84:20:e1:80:bb:46:9d:1d:81:a8:82:98:ff:bd:cc:84:bc:6e:
b1:af:e5:ee:43:fc:af:07:77:82:e9:a8:62:95:67:3d:7a:91:
5f:4b:c1:97:28:a0:56:18:5a:da:8c:43:b1:54:96:f5:8e:2a:
f7:77:8c:36:af:fc:5c:ad:ee:71:93:43:0f:0d:3c:7e:41:4b:
77:b1:c8:00:32:73:80:67:8e:e7:18:b2:e2:69:1b:83:f6:ea:
62:83:7d:34:64:f8:35:f3:99:00:f9:f0:68:2e:f7:84:32:17:
0e:d5:06:e8:a3:2f:3b:ba:9a:31:b5:cd:f8:27:50:c2:5f:93:
20:8b:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:13:52 2026 by rpki-client