
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/CB53532C4A9711F184FA30B7B0833773.roa
File: CB53532C4A9711F184FA30B7B0833773.roa (raw, json)
Hash identifier: uy6KJdAywX4n9D6cDCPQCt+q5gOWffOcvS4zvWYkygY=
Subject key identifier: 14:1E:AA:9C:61:60:BE:D3:8D:AA:B7:13:4F:08:00:02:13:22:F9:1A
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 13
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/CB53532C4A9711F184FA30B7B0833773.roa
Signing time: Fri 08 May 2026 04:38:44 +0000
ROA not before: Fri 08 May 2026 04:38:44 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 153844
IP address blocks: 151.123.251.0/24 maxlen: 24
151.123.252.0/24 maxlen: 24
151.123.253.0/24 maxlen: 24
151.123.254.0/24 maxlen: 24
151.123.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 16:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19 (0x13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: May 8 04:38:44 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69fd68d4-3802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1d:88:8d:39:30:be:1a:11:19:38:9c:a3:53:
37:47:3f:b4:04:29:4e:95:ab:d3:63:cd:b7:8f:eb:
01:36:c5:92:72:98:ad:9a:f2:1b:28:46:a1:a8:10:
61:0a:8b:9b:5f:0d:bd:ce:b8:49:42:ca:a3:9f:d8:
fb:30:44:0f:99:7b:7c:cd:08:27:5f:b2:e6:d9:5b:
e7:2b:1a:43:19:76:e8:19:90:2f:cf:00:0c:d9:cd:
09:d3:03:b4:9a:70:d6:5d:6a:7a:85:e6:a4:a5:9a:
f5:b9:29:89:6c:b2:50:15:ce:fe:ec:98:6c:34:01:
e0:9c:8d:46:9c:35:07:54:52:7d:80:d6:37:30:8d:
41:bb:45:91:c8:c1:ba:f6:fb:f5:b6:cc:b3:31:94:
89:3b:1c:58:34:49:03:73:36:65:5f:5e:07:ba:73:
e4:b3:b5:cb:34:32:63:29:7a:20:5f:32:6a:90:47:
19:c5:fe:d1:d1:78:70:85:d2:62:79:bf:92:e2:98:
9f:bf:4a:09:70:ca:e7:28:a0:ea:d1:d3:29:95:c5:
8e:ec:89:30:5d:b7:d8:e7:bf:33:8b:04:0b:4b:5d:
36:ca:a8:c3:45:73:f6:91:5a:43:91:fc:43:62:b5:
c0:39:30:2b:6a:13:fc:18:5a:a2:5f:8e:b7:ba:f0:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1E:AA:9C:61:60:BE:D3:8D:AA:B7:13:4F:08:00:02:13:22:F9:1A
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/CB53532C4A9711F184FA30B7B0833773.roa
sbgp-ipAddrBlock: critical
IPv4:
151.123.251.0-151.123.255.255
Signature Algorithm: sha256WithRSAEncryption
61:77:c7:ed:45:06:63:00:d6:f2:93:ee:33:6a:8b:44:42:61:
2b:4a:0b:b1:85:6b:2f:bb:37:41:60:45:c9:20:a9:da:1b:91:
14:85:0a:72:7c:fa:10:9a:98:26:c0:04:a5:f2:25:ec:ba:58:
5b:2a:31:9d:8e:45:e8:00:2d:fa:14:e0:c6:94:08:33:da:d6:
57:13:a4:79:ba:48:4a:0a:96:d8:a0:0c:80:e5:bc:db:1f:16:
c6:39:4a:98:a0:a9:d7:ea:ed:ae:1a:56:7f:ab:7d:1e:5f:d7:
c4:be:f9:a6:30:f6:ab:49:c4:33:c4:de:7e:26:3a:fd:62:49:
54:6f:52:3a:3e:42:fa:09:37:b3:98:7d:75:14:1b:40:8c:f1:
73:5d:14:20:75:d2:5e:87:f7:92:e5:86:23:9c:6b:49:b4:8c:
71:01:63:ce:26:79:bc:b7:69:5b:29:9c:5e:d9:12:76:ff:18:
eb:03:af:6f:29:29:ab:7e:53:59:7e:34:84:45:f6:24:32:a1:
cc:a0:e9:df:74:6e:46:96:6b:59:38:7b:54:39:c1:7e:54:1b:
7a:53:f6:0e:98:bf:22:ed:88:68:55:f5:56:b3:44:c4:83:e7:
ef:45:8d:19:5b:fa:44:78:20:fe:cc:15:0d:89:28:75:69:26:
70:bc:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:42:30 2026 by rpki-client