
$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa
File: 6BAC9870794A11F1A904CD4C78A30FBC.roa (raw, json)
Hash identifier: L4KhaPWQcuozH+H8Uh8u+fwbs6T7fPYTjck/bnA9GqU=
Subject key identifier: AB:95:83:03:96:A2:B8:1F:AB:5D:41:F6:A4:BA:E0:78:1E:05:D2:59
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 02D8
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa
Signing time: Thu 23 Jul 2026 17:11:39 +0000
ROA not before: Thu 23 Jul 2026 17:11:39 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 46606
IP address blocks: 43.225.52.0/22 maxlen: 24
103.195.187.0/24 maxlen: 24
103.224.22.0/24 maxlen: 24
137.59.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Jul 23 17:11:39 2026 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=6a624b4b-30c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5c:56:bb:4a:d9:c3:70:d3:ea:38:7c:69:32:
32:ab:71:8b:54:3b:1d:0a:4c:b1:68:7c:d6:0b:b8:
cd:33:95:3c:57:3e:a7:4f:06:ac:83:fd:56:6f:b7:
ab:b2:f8:27:c7:42:fb:ba:0a:ad:bd:d7:3d:35:f7:
db:e5:1a:c6:2e:65:0e:57:19:a7:20:1e:5f:a8:b3:
5a:f1:15:de:8d:ba:41:36:27:39:a8:7b:b0:61:67:
c9:f6:05:ea:c8:6d:6d:d2:5c:5b:6e:fe:b0:b7:12:
60:01:8c:23:69:d1:b4:26:60:0f:4e:fe:40:fa:a0:
c8:0a:6c:af:e2:52:a0:de:dd:35:41:43:6f:93:47:
94:14:ab:cf:2f:6a:7b:ef:6a:10:93:27:dc:c4:96:
bd:85:ee:33:bb:a4:a3:ba:eb:69:ee:44:4a:ae:54:
ba:81:3f:2d:c7:30:46:3f:d9:49:cc:dd:32:78:88:
ee:8f:cd:a5:94:73:88:11:9b:ea:e6:60:c1:a0:2b:
09:42:b5:c6:61:6b:81:38:79:1b:23:b7:0f:5c:12:
91:43:cd:21:64:d8:2e:18:9b:1e:18:55:08:b9:5d:
b0:95:8f:1d:bd:bb:3c:e6:f9:ce:f3:f8:26:da:b8:
53:4d:d9:63:a0:cf:e5:c3:ae:76:fe:d5:4b:44:f1:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:83:03:96:A2:B8:1F:AB:5D:41:F6:A4:BA:E0:78:1E:05:D2:59
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/6BAC9870794A11F1A904CD4C78A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.52.0/22
103.195.187.0/24
103.224.22.0/24
137.59.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:17:bb:11:4c:45:85:af:cd:24:08:58:50:ca:17:9f:8c:d7:
11:4a:3b:aa:aa:9a:c4:56:91:26:15:1a:3c:2f:6f:46:91:a4:
f1:13:88:67:d9:d9:1b:62:b6:9a:b4:80:c2:ad:23:02:41:60:
f6:b1:47:02:5c:35:cd:81:99:a3:55:ca:78:75:fb:6e:6e:a6:
d3:1d:90:05:e2:38:cd:67:f2:a3:51:c0:c6:16:85:28:1c:eb:
a1:d5:93:05:29:e7:d5:96:88:80:b1:5c:ba:51:41:05:83:d9:
b2:44:f7:02:c4:d7:f5:8c:e5:41:10:5e:28:e8:11:b2:17:a5:
05:1d:1c:86:e5:2e:d6:80:e7:b7:02:1e:51:ff:e8:71:a1:c4:
86:70:99:ad:14:cc:69:d2:85:e7:b4:2e:cb:00:e9:79:a3:00:
98:a4:53:2e:de:f4:5f:df:85:06:01:65:1b:a5:e2:37:09:76:
62:27:39:a4:99:27:02:c2:fa:de:31:68:e1:96:c9:6e:c8:8b:
44:63:a8:43:e6:13:8a:b7:92:05:35:70:3a:2f:52:e9:d1:e3:
71:b1:7f:b8:5b:61:f9:69:0f:9f:5e:70:79:7c:c8:4a:0b:7d:
bb:62:79:d4:4b:2c:00:b1:d0:5c:e1:46:ec:22:6d:cd:c6:05:
97:67:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:14 2026 by rpki-client