
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/71685FB25F6411EFB16D4552C4F9AE02.roa
File: 71685FB25F6411EFB16D4552C4F9AE02.roa (raw, json)
Hash identifier: 1+rHD96cmTTrY5JYvLtnUFvcPBEAFnoYSShMEul4gsc=
Subject key identifier: 35:5D:07:F2:64:38:1C:37:77:F0:7D:FF:18:15:E0:EA:2D:C9:A7:CD
Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial: 0156
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/71685FB25F6411EFB16D4552C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:47:47 +0000
ROA not before: Thu 09 Oct 2025 06:34:32 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 14618
IP address blocks: 192.206.153.0/24 maxlen: 24
192.206.156.0/24 maxlen: 24
192.206.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Validity
Not Before: Oct 9 06:34:32 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a5a313-2045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:c8:dc:9a:cf:63:6b:a9:dc:f2:df:a8:f5:
03:42:a0:8f:e7:6e:72:4e:0a:ae:20:f8:25:c2:b8:
a9:f4:58:f9:8d:d4:47:48:fa:4b:bd:c6:78:65:21:
70:9b:61:81:00:fa:12:5d:96:0d:0c:02:1d:ac:2d:
87:37:d2:7d:ec:95:9e:c0:e5:a8:e1:58:d7:54:c7:
6a:5a:99:aa:e0:e2:c9:b2:a8:05:c8:e8:16:0d:38:
0c:04:7b:63:3b:05:ad:22:a6:fe:7b:72:58:3f:0a:
a3:2b:a1:99:d0:eb:93:cb:8d:ab:92:97:26:4d:e3:
62:d2:8e:21:fb:4c:9c:f0:93:b2:07:05:9f:5e:cf:
43:16:d0:51:e8:67:dc:ec:30:f9:16:96:ea:7d:b5:
60:f6:8d:d9:08:c3:75:75:ef:29:3b:79:a7:e9:9e:
d4:d5:68:20:8f:6d:80:f6:e4:e2:43:ee:c7:b8:43:
78:65:86:e6:b8:61:91:40:06:31:17:13:33:c8:3f:
00:79:98:87:0d:36:7c:53:f8:c1:34:19:9d:6b:1e:
17:6d:63:61:a7:4e:a2:1e:41:e8:b3:a6:35:1e:1b:
78:59:66:40:49:5e:e4:ff:e1:d0:4b:02:94:60:0c:
8c:2d:82:33:63:a3:3e:6b:07:84:e0:2e:d0:0a:76:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:07:F2:64:38:1C:37:77:F0:7D:FF:18:15:E0:EA:2D:C9:A7:CD
X509v3 Authority Key Identifier:
keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/71685FB25F6411EFB16D4552C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
192.206.153.0/24
192.206.156.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:4f:9c:e3:ae:af:c3:c3:f7:c8:4b:bd:78:73:47:8c:bb:8e:
4a:f0:1b:54:4d:86:ea:b5:38:af:e1:96:16:03:97:28:58:d1:
b2:02:89:2c:66:c6:10:3e:fb:3d:88:2c:a1:c1:94:30:3f:66:
10:1c:f8:a3:fe:b4:94:5f:76:85:e6:6c:5c:f8:d7:56:22:4b:
bc:5f:02:79:85:05:51:dc:0a:e2:b8:96:df:5d:35:16:38:f7:
db:33:3d:d5:e7:81:c7:46:64:0e:3f:02:77:54:30:2d:69:10:
4c:72:f7:b2:b2:71:70:02:e7:76:55:6e:22:f7:9f:b0:88:04:
bf:d5:88:1f:26:30:0f:49:1f:95:8a:39:b2:02:f6:0b:45:b1:
dc:c7:50:b4:fa:8a:49:72:c7:31:0d:e6:9a:58:3e:ba:6f:d5:
f3:6b:a3:86:96:cc:d3:1c:a7:d1:34:92:ba:c0:cf:85:fe:f3:
43:d8:de:e3:59:64:b3:78:e4:8a:d8:95:76:c4:5e:e8:74:95:
a7:a1:f0:05:ab:be:78:95:67:74:2b:85:1b:a8:4c:6f:65:ef:
b5:f4:bb:7b:d4:24:22:02:ca:87:4a:71:1c:1f:3b:fb:c0:59:
9d:de:03:56:28:01:eb:32:dc:ac:79:c4:50:f6:bd:64:10:3f:
f4:02:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:29:48 2026 by rpki-client