
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1A1E4A7A6A6911F18287CF148C47A888.roa
File: 1A1E4A7A6A6911F18287CF148C47A888.roa (raw, json)
Hash identifier: PFvhmpVV6scs/whQYid+4y3ffoZY6BXEcRXZF/STKOc=
Subject key identifier: 27:3D:D0:86:8E:41:20:28:77:B2:77:76:6E:31:90:BC:6D:A8:BB:ED
Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Certificate serial: 3584
Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1A1E4A7A6A6911F18287CF148C47A888.roa
Signing time: Mon 06 Jul 2026 20:07:05 +0000
ROA not before: Mon 06 Jul 2026 20:07:05 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 31898
IP address blocks: 45.113.120.0/22 maxlen: 24
103.53.40.0/22 maxlen: 24
111.118.212.0/22 maxlen: 24
119.18.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13700 (0x3584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171753, serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631
Validity
Not Before: Jul 6 20:07:05 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a4c0ae9-d084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:4e:8e:ef:50:7c:be:59:7d:b8:fe:7b:77:
9f:41:0a:4f:25:d4:b1:ec:6b:cd:fe:09:46:46:ff:
4f:d0:53:96:c5:f8:45:25:f9:4e:ec:6c:66:6f:cf:
5f:c3:f6:17:da:4f:51:39:ef:cd:f4:91:a1:50:d6:
06:75:2d:68:c0:1c:64:d1:b8:3b:cd:bc:30:d8:86:
1e:a3:79:a1:c7:94:d5:54:62:c4:1e:d8:87:0e:10:
4f:26:9b:e7:e9:88:29:29:1b:af:15:3f:55:ee:f4:
3f:5d:e8:52:1b:5e:0f:ab:25:35:c9:52:40:ab:8b:
83:ae:b9:47:87:37:5e:3b:eb:de:63:27:c1:37:35:
e1:bc:2a:2a:51:48:09:67:58:2e:d2:74:15:88:b3:
de:15:98:ee:7e:67:3f:6e:b2:6b:dc:8d:05:41:a1:
23:d7:d2:80:68:c9:c2:24:55:92:49:e8:d2:76:b1:
b8:cf:a7:68:ce:0c:57:ca:8e:f6:6d:d6:a8:3a:35:
33:d6:69:e2:ae:33:d5:63:9f:40:96:17:0d:9d:16:
db:75:e3:db:5c:38:0d:12:63:90:19:ff:07:01:0d:
f5:f3:66:c1:a5:7a:51:81:43:f4:d2:1a:4d:30:77:
18:67:1e:a1:0e:d4:c0:87:39:4f:6e:36:6c:8e:18:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3D:D0:86:8E:41:20:28:77:B2:77:76:6E:31:90:BC:6D:A8:BB:ED
X509v3 Authority Key Identifier:
keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/1A1E4A7A6A6911F18287CF148C47A888.roa
sbgp-ipAddrBlock: critical
IPv4:
45.113.120.0/22
103.53.40.0/22
111.118.212.0/22
119.18.48.0/20
Signature Algorithm: sha256WithRSAEncryption
67:39:ed:57:a1:e4:ab:bd:4a:ad:f0:c7:50:31:53:6b:27:ad:
1f:73:76:fb:1b:bf:92:6e:9f:90:c2:c9:5d:56:f3:33:20:92:
1b:aa:09:10:d6:09:b3:72:7f:5a:de:21:de:05:52:d3:4d:23:
48:d3:83:57:df:f9:f2:97:d9:fb:92:ad:c5:2f:0f:f1:e0:2d:
8b:09:4d:2d:23:e7:53:0f:34:6f:aa:65:54:d4:a2:aa:26:0b:
be:da:c6:de:01:41:96:9f:02:08:2a:e8:2b:7e:9e:f3:f0:95:
2f:7b:3a:95:76:04:40:9d:7a:aa:6c:8d:e1:38:70:c2:5f:2e:
3f:55:5e:3f:4c:64:9b:fe:d6:0c:26:6c:94:7b:ea:3b:23:fc:
ba:dc:d7:dc:ae:e1:0b:2b:d7:ef:db:71:6b:3d:e9:8d:32:89:
66:82:82:ba:07:ba:6e:b6:bc:28:07:0d:9c:af:78:7d:c2:03:
6f:14:f4:bb:75:9f:af:da:75:37:ce:6f:90:a4:ef:f4:6b:5b:
5b:cf:2e:0d:44:61:57:48:ff:ec:a0:44:02:ac:58:20:72:a5:
1e:1b:b2:b6:a0:c2:52:25:0b:d0:24:df:5a:c9:9f:19:19:d9:
bd:88:67:4a:36:e7:6f:64:18:bc:43:0a:4d:88:d1:d6:16:b0:
0c:ab:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:48 2026 by rpki-client