
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
File: 7AC60C48CEB611ED8850A727C4F9AE02.roa (raw, json)
Hash identifier: cOb4Hj5wDMMg0QT8c/7i7PT+f+u1UkrU+2xOyTjo/5M=
Subject key identifier: C9:7A:1F:D7:D9:82:0B:3B:16:27:21:55:EB:45:9A:6E:BE:EE:CE:F2
Certificate issuer: /CN=A9173CE6/serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Certificate serial: 0747
Authority key identifier: 33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:48:09 +0000
ROA not before: Fri 04 Jul 2025 23:03:42 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 38465
IP address blocks: 210.215.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 21:37:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1863 (0x747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=33195F96C46D4D285D5BDE4B0B030E38314E8FCB
Validity
Not Before: Jul 4 23:03:42 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a47bd9-e18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:01:c5:01:b3:21:d7:df:b3:18:53:42:7f:
cb:0d:83:3a:9d:9e:06:3e:f1:b8:3d:f9:8c:52:ec:
73:f9:78:e8:0b:b6:bb:09:53:25:11:cb:5b:9f:5f:
cd:89:cd:79:42:61:6c:9d:d3:83:3b:08:f9:da:8f:
5e:26:33:26:d9:49:68:93:c3:3e:12:4b:5f:f4:53:
da:10:07:4f:14:91:84:7d:ad:ba:d9:22:0d:ad:f5:
f6:b6:27:be:18:55:ac:a3:bc:c5:d0:a8:44:45:50:
75:fa:32:76:98:f2:4c:2d:96:b8:e5:2a:80:04:82:
a7:e1:15:e9:bb:57:8c:f0:2a:2c:1a:30:81:c9:f1:
6c:5b:8c:67:a4:f9:01:27:10:9c:97:ea:00:1d:50:
57:02:b7:4f:71:07:bc:0f:af:20:56:08:41:6a:45:
97:bc:64:59:08:a4:59:d5:d9:cc:e0:94:c4:41:74:
04:16:05:32:cf:26:9a:2a:09:6e:fe:66:ee:f1:d2:
04:06:0a:0c:2d:bd:cb:4a:44:e8:27:9e:f6:ab:1a:
1e:d7:d7:e0:e7:a3:d9:ae:2d:52:d7:52:26:32:36:
df:42:d2:8c:f5:d8:7e:de:16:fd:8f:31:c4:b0:4d:
21:56:2e:85:76:32:58:09:93:67:86:4f:12:08:3e:
4d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:1F:D7:D9:82:0B:3B:16:27:21:55:EB:45:9A:6E:BE:EE:CE:F2
X509v3 Authority Key Identifier:
keyid:33:19:5F:96:C4:6D:4D:28:5D:5B:DE:4B:0B:03:0E:38:31:4E:8F:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/MxlflsRtTShdW95LCwMOODFOj8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxlflsRtTShdW95LCwMOODFOj8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/0E8E27807BD011EB85A66980C4F9AE02/7AC60C48CEB611ED8850A727C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.215.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:cb:ff:4f:9a:d2:40:37:5c:f0:d7:cf:bd:41:2a:4c:5c:3d:
4b:62:26:20:72:d4:57:42:97:34:24:05:7d:e1:eb:7e:16:8a:
28:1e:c3:d8:fc:b9:b9:c6:c1:fb:2a:9e:35:80:2f:78:3d:93:
d3:4f:d4:04:62:76:ea:ed:99:9e:d7:7f:20:03:23:07:ad:9d:
f5:70:23:12:de:f9:2f:6c:a7:ea:da:16:1b:09:19:fb:bb:3a:
4f:fb:14:68:8a:d6:54:40:6b:c9:e3:39:e2:58:f2:64:99:df:
b6:92:98:f7:71:92:ff:d3:5d:12:66:f4:03:57:02:08:6b:59:
fb:0e:f0:49:76:24:f9:31:fb:68:cc:33:90:79:94:3b:73:79:
8a:1e:16:b1:29:7e:6f:90:e5:0b:ca:4d:4f:30:21:04:03:d0:
e0:21:ef:5f:be:1e:80:6a:9b:2e:db:52:da:97:c5:e4:3b:d5:
1d:17:f0:07:e4:9a:9f:22:16:8a:7a:8b:a0:be:51:8b:90:73:
8b:b9:70:ca:f7:69:d0:77:70:57:ff:d4:e4:67:0d:a3:f4:44:
e1:a2:9d:a1:de:9c:c1:ed:2a:ef:ac:52:14:0a:00:ce:61:07:
d0:62:84:47:82:5c:cf:f1:87:e1:d7:86:13:23:09:8d:c2:f9:
ec:2a:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:59 2026 by rpki-client