
$ rpki-client -vvf rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/825F950215E711F19073865B1E3D8C67.roa
File: 825F950215E711F19073865B1E3D8C67.roa (raw, json)
Hash identifier: J8Mnpyzksg65+vQBwlicjjccUPGZ76YL6/e6Ob/8mCE=
Subject key identifier: A0:2F:20:4A:31:4D:74:30:95:F2:63:9E:E9:C8:3B:77:9B:EF:DE:21
Certificate issuer: /CN=A917972C/serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
Certificate serial: 28
Authority key identifier: 86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/825F950215E711F19073865B1E3D8C67.roa
Signing time: Tue 05 May 2026 09:42:07 +0000
ROA not before: Tue 05 May 2026 09:42:07 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 55493
IP address blocks: 202.128.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl
rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:58:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917972C, serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
Validity
Not Before: May 5 09:42:07 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=69f9bb6f-6e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:89:68:50:39:3a:ec:b9:fa:0c:f1:ad:55:
5b:9e:d8:1c:b3:9c:d0:12:a1:b7:0d:b4:01:c0:ef:
93:99:54:2a:fa:46:50:f8:51:2a:0d:56:6e:70:72:
b2:af:80:24:ea:97:3c:ae:73:d6:40:b8:1b:46:d7:
9a:98:42:9c:de:92:46:d5:07:e8:ce:9c:74:bb:70:
d9:6f:85:9d:92:29:25:e6:e0:8b:63:46:cf:d9:fe:
3f:c1:c2:24:0b:27:f4:8c:85:16:87:82:62:6c:32:
f8:c5:2f:fa:bc:b3:ee:b4:c7:d0:2b:b9:d3:be:74:
64:7b:fc:72:0d:33:32:91:0a:b4:ad:7d:7a:44:fc:
01:3f:8b:1c:0d:94:1c:8c:04:92:bd:6f:52:b8:c4:
3c:07:c8:0d:c7:06:69:5e:3b:f7:e8:2e:cc:e0:60:
50:21:ca:4f:c6:ad:2b:22:59:b0:c4:87:e1:42:b4:
98:fa:0d:f6:ae:f3:55:e4:e5:52:1f:0b:60:69:61:
28:b4:b6:f3:07:1a:32:75:a5:9b:6e:2f:6e:83:59:
00:2d:1b:80:79:08:45:f0:9a:b2:9b:5e:0a:79:fb:
9d:a5:ec:fd:0d:3b:4f:80:be:28:11:18:fb:97:1e:
96:a7:7a:52:25:4c:4b:d9:a8:a4:e1:06:d0:f2:34:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:20:4A:31:4D:74:30:95:F2:63:9E:E9:C8:3B:77:9B:EF:DE:21
X509v3 Authority Key Identifier:
keyid:86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/825F950215E711F19073865B1E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
202.128.106.0/24
Signature Algorithm: sha256WithRSAEncryption
16:01:a9:23:f0:01:40:16:a2:db:f6:1b:62:0a:02:2e:4f:5f:
fa:ca:b3:f2:4d:86:e9:6b:4b:86:85:75:2e:94:7b:98:db:75:
1e:c6:0f:88:f9:0d:b4:05:02:f0:e7:16:a7:5e:fe:a5:13:f7:
73:3b:50:82:7d:a4:5d:31:db:a2:ff:90:e2:db:ba:68:31:b7:
43:80:c4:42:97:28:92:0d:e3:77:cf:ee:8a:df:0c:95:af:b9:
db:a1:9d:9f:47:7c:81:3c:0d:ee:53:8c:b1:26:89:7f:35:86:
5c:a2:ac:98:06:dc:00:71:55:d5:8b:e0:37:99:e6:89:9f:93:
59:4c:6d:30:82:4a:fd:28:08:05:35:15:93:ac:50:1b:5b:cf:
e2:f9:36:8b:41:e2:a6:00:73:cc:5c:d1:bc:90:53:9a:0c:2f:
45:55:48:44:82:e2:52:b5:81:0b:02:f1:3c:a6:44:d8:f1:8c:
95:3a:a6:92:79:4c:ea:14:c3:e1:20:30:e9:2c:ee:e4:c3:56:
f0:04:1d:3a:8c:eb:ff:9b:64:44:84:85:e9:6f:0f:b1:7e:dc:
7f:f4:8d:aa:82:95:72:d8:92:d2:ec:8e:ce:e7:91:23:bd:ef:
4f:c4:64:f5:0a:70:a0:0c:89:09:a4:0d:56:95:ef:2d:cc:d9:
88:12:4e:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 10:38:04 2026 by rpki-client