
$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/565FCA9C234511F18CA006D5AA833773.roa
File: 565FCA9C234511F18CA006D5AA833773.roa (raw, json)
Hash identifier: 1Co0DwGRkJO6Yek4CAQ0ViAUKHv09XdVxodpx+nReSQ=
Subject key identifier: 6B:66:B4:7B:49:C7:E1:43:03:3E:92:42:63:36:15:2F:89:14:51:8A
Certificate issuer: /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial: 08FD
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/565FCA9C234511F18CA006D5AA833773.roa
Signing time: Wed 06 May 2026 20:25:32 +0000
ROA not before: Wed 06 May 2026 20:25:32 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 146943
IP address blocks: 123.253.8.0/24 maxlen: 24
123.253.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Validity
Not Before: May 6 20:25:32 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69fba3bc-9b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:f8:6e:06:62:f2:5d:ca:c2:7e:9a:2f:f7:
2f:76:7f:dd:10:4c:86:a1:47:e3:d1:1b:06:01:05:
69:38:13:64:d8:2f:97:94:5b:11:db:a3:1c:38:76:
dd:8d:35:55:93:f3:97:87:6b:8f:3a:d8:2b:45:45:
e5:41:f0:d3:5a:14:5f:45:07:b8:24:06:44:e8:7c:
8e:c7:ae:1d:f4:cd:fe:74:08:9a:ea:59:bd:a8:cb:
85:4f:96:59:fa:5b:07:82:20:a1:df:ef:87:83:17:
90:ad:fc:66:54:17:b4:a1:66:e1:a0:9d:30:5b:5e:
2d:d7:47:e7:32:46:25:48:31:d3:90:a5:bb:7c:ea:
e5:7f:5b:57:8b:a6:b5:e9:2b:be:4c:17:40:92:af:
9f:2b:27:c0:04:30:bd:c8:0f:1a:e8:99:df:2e:99:
3d:74:50:55:2f:55:34:68:42:af:5c:d6:ab:ce:f4:
97:78:7e:b6:c3:92:4c:14:e3:37:54:e9:51:9d:f0:
a5:75:67:b0:04:42:1f:7f:c2:24:e3:88:6b:cc:60:
95:f6:8a:4d:0e:aa:2b:a7:c8:df:16:cb:24:8e:99:
24:e8:12:54:bf:30:4f:f5:75:75:44:a1:20:19:6f:
c8:60:83:29:4c:87:6b:7f:5f:6f:c8:15:1c:41:14:
9c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:B4:7B:49:C7:E1:43:03:3E:92:42:63:36:15:2F:89:14:51:8A
X509v3 Authority Key Identifier:
keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/565FCA9C234511F18CA006D5AA833773.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.8.0/24
123.253.10.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8d:38:a2:cf:30:92:98:a4:ef:61:68:a6:5e:14:3f:f0:1b:
bb:9b:f7:f4:52:26:5a:06:07:93:b9:e5:b8:b5:05:9a:50:43:
e4:5b:4b:80:74:d2:86:cb:5d:be:ac:03:9e:c2:54:ee:17:f9:
3d:74:0e:22:ad:eb:56:5b:82:25:ec:ef:e7:61:da:8b:c1:12:
24:de:b4:01:ea:53:00:90:73:9c:26:81:4b:61:93:ce:1a:fe:
61:d0:f0:2f:e5:7f:7c:66:82:25:10:89:6b:11:f5:03:03:ce:
7d:9e:ff:6c:79:be:c8:c1:ea:22:01:61:f8:ba:68:d2:09:ea:
8b:c9:08:62:99:de:1e:0c:45:3c:bd:a9:63:d0:b7:31:75:28:
19:1d:b1:bb:03:e4:b0:88:81:45:f1:33:2e:ef:4f:71:ee:41:
f9:15:33:90:57:b3:1b:3d:ec:e0:fe:e0:55:dd:c4:be:f8:44:
9d:73:a3:74:12:5a:6f:19:50:6d:c6:42:f7:45:fe:f7:aa:d1:
bf:e3:d7:75:74:90:cc:ea:36:ee:c9:25:c5:d5:21:aa:67:30:
62:db:3b:fe:62:66:f3:d4:77:6c:c7:5b:37:4a:60:01:97:84:
47:0e:55:6a:81:67:38:7b:b7:2c:4d:eb:19:8d:00:6d:17:bc:
92:49:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:30:16 2026 by rpki-client