
$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/565FCA9C234511F18CA006D5AA833773.roa
File: 565FCA9C234511F18CA006D5AA833773.roa (raw, json)
Hash identifier: aTOHnH+PIlXLEz/PlKchWGBMGrG5zU//1ailyZ4pOQ8=
Subject key identifier: E4:7B:56:CC:84:47:38:8A:D2:F8:6B:95:5B:EC:AA:58:26:C5:E9:82
Certificate issuer: /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial: 08DE
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/565FCA9C234511F18CA006D5AA833773.roa
Signing time: Thu 19 Mar 2026 03:40:13 +0000
ROA not before: Thu 19 Mar 2026 03:40:13 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 146943
IP address blocks: 123.253.8.0/24 maxlen: 24
123.253.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:12:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Validity
Not Before: Mar 19 03:40:13 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69bb701d-3cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:4c:f3:73:df:bb:33:65:25:22:c7:ec:bd:
7b:c0:e3:c4:ff:30:18:14:d6:7b:00:1e:12:97:d2:
8e:6a:a2:f8:f9:6f:a5:29:c9:a0:d6:81:33:7d:68:
44:e9:1f:c5:95:cc:7a:27:02:e1:29:f4:85:b1:40:
9a:b8:d8:74:80:ab:99:b4:27:19:00:21:7f:64:a0:
55:c6:9d:50:83:76:5e:6b:41:7f:ee:e1:46:cb:27:
93:dc:d5:27:7d:7e:7e:36:d2:3a:5d:46:88:71:f8:
8e:2d:50:b0:83:fd:c6:71:2b:99:74:6e:22:8c:3c:
59:05:7a:54:01:90:f8:c8:19:09:34:d1:9d:41:d0:
50:f5:21:b6:dd:20:e5:82:16:dc:a2:4f:32:84:d6:
09:04:b2:53:a3:5f:9c:12:fd:6d:b2:0f:17:42:24:
9a:42:fa:6a:45:53:62:4d:9c:ea:64:1c:9b:c1:e1:
90:7d:59:cc:4c:a3:30:6c:f4:88:f8:9c:38:29:55:
23:40:83:e6:35:ed:64:2a:c6:56:82:6a:97:72:75:
0b:04:b8:0c:b9:3c:fe:a8:f2:06:f4:e1:69:88:15:
c3:87:df:47:8e:62:1e:b3:23:fa:a2:89:a7:e3:dd:
43:bd:c8:ee:81:32:a8:1c:e2:27:cf:5f:cf:9e:16:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7B:56:CC:84:47:38:8A:D2:F8:6B:95:5B:EC:AA:58:26:C5:E9:82
X509v3 Authority Key Identifier:
keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/565FCA9C234511F18CA006D5AA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.8.0/24
123.253.10.0/24
Signature Algorithm: sha256WithRSAEncryption
df:59:1e:39:85:26:3f:cf:88:34:1c:bf:72:70:29:23:64:96:
25:72:1f:37:91:a4:8b:ed:80:77:91:d1:c2:7f:22:bf:8e:47:
18:6c:6c:ea:3a:58:61:d0:01:63:ca:84:37:01:04:49:08:20:
28:5c:01:ac:3a:37:fb:88:b6:1e:a7:81:dc:ec:b5:48:2f:79:
96:01:db:ab:bd:29:8a:43:6e:a1:b9:3e:60:68:6a:08:fb:6f:
5b:af:d4:7f:41:85:90:5c:bf:3e:a6:07:ac:32:cc:69:17:35:
2f:bb:12:40:c2:b5:5e:2c:00:ca:82:b0:6d:d6:da:7d:87:9c:
76:03:9c:c9:bd:87:1c:a2:2f:c6:3a:08:7a:b6:bb:27:aa:32:
4e:e3:a9:80:cc:5d:0f:63:a2:df:8d:6b:a9:ad:05:f7:51:c4:
d3:19:5e:c1:ed:c8:bd:2d:11:1c:89:5e:6c:4f:8d:2a:89:9b:
33:ca:c1:60:4b:9f:a5:db:db:eb:7b:22:a3:f9:59:62:f0:08:
8a:04:28:96:07:02:39:52:bb:d8:4d:e6:c5:47:b2:90:2a:52:
f9:3d:e5:b2:5c:dd:21:55:2c:fe:87:a5:a4:19:1f:c6:b6:a6:
4a:7e:de:a1:c3:11:42:5a:36:a1:12:06:3c:e4:84:63:f8:c7:
ce:0a:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:24:50 2026 by rpki-client