
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa
File: D8375D30A69B11F1A29A77493411F970.roa (raw, json)
Hash identifier: Oq6EWPqn9hAjR/n1Fw9l1YNrmCrCY3C/1Z//Amm/UOA=
Subject key identifier: ED:03:92:C9:AA:C0:76:A0:49:E1:3A:CE:F3:15:2D:66:A6:8A:DA:CA
Certificate issuer: /CN=A917A84A/serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Certificate serial: 7A
Authority key identifier: 63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa
Signing time: Wed 30 Sep 2026 16:29:30 +0000
ROA not before: Wed 30 Sep 2026 16:29:30 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 141031
IP address blocks: 151.123.232.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 16:14:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A, serialNumber=637D56A75BB95BC5C9E6B089D934CB5E2FBD962D
Validity
Not Before: Sep 30 16:29:30 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd38ea-4181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:7e:7b:e4:27:57:2f:ba:64:8a:7b:8c:9a:
97:bd:70:d3:26:0c:f8:54:8a:72:16:6f:0d:b3:fa:
f1:97:92:34:d6:44:1e:c1:2e:a9:63:65:19:d4:e7:
b1:23:7f:b9:db:bf:29:3a:b2:66:19:b5:fd:8e:fd:
73:5a:b7:e7:0a:01:20:3f:c3:b3:28:15:68:b5:b1:
37:95:3e:33:25:3d:29:9f:5b:f5:00:89:dd:cc:18:
e4:19:db:9b:b2:f3:26:bf:33:d4:3e:ab:27:fd:b2:
37:7f:d0:df:59:40:b6:f3:cf:a2:05:2e:5a:9d:e0:
96:82:c3:ae:f0:a1:dd:26:54:80:36:59:5f:26:ae:
c1:12:7a:c6:51:29:7d:cf:a4:a7:bd:0a:13:e9:17:
86:3d:7c:42:20:51:40:37:1b:da:ed:34:cc:9f:d0:
ac:2f:4e:ae:c4:b4:ed:09:6e:2d:30:98:9e:7b:c9:
6b:8e:2f:d2:ae:c1:ff:8b:c7:27:f6:4e:85:3c:e2:
d6:82:26:eb:19:ee:91:41:39:a5:e4:c0:ef:c9:55:
c9:c1:d9:8c:76:dd:95:f8:25:3d:25:39:f9:21:56:
40:dd:9c:bb:d9:4c:66:7e:1d:a9:0f:ab:60:ab:d7:
2a:d4:9b:b6:74:03:12:e7:1c:58:34:c0:11:16:f4:
6c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:92:C9:AA:C0:76:A0:49:E1:3A:CE:F3:15:2D:66:A6:8A:DA:CA
X509v3 Authority Key Identifier:
keyid:63:7D:56:A7:5B:B9:5B:C5:C9:E6:B0:89:D9:34:CB:5E:2F:BD:96:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Y31Wp1u5W8XJ5rCJ2TTLXi-9li0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/77AC7BD234F711F1BB736CA77CEE528E/D8375D30A69B11F1A29A77493411F970.roa
sbgp-ipAddrBlock: critical
IPv4:
151.123.232.0/24
Signature Algorithm: sha256WithRSAEncryption
30:2f:f1:56:ea:77:6e:ba:7a:54:98:f5:a0:23:9b:92:d7:b2:
66:c0:ba:ee:22:c0:ef:e8:1c:0e:b1:85:21:82:52:93:e7:62:
4d:f1:11:b6:69:9a:3b:dc:89:0e:a1:5f:ee:98:bc:15:ee:4a:
a8:55:b6:80:f2:1c:51:36:ea:21:7a:3e:be:ea:99:ce:66:e4:
f2:56:5c:e8:9f:ad:31:08:ef:5b:68:35:fa:ff:1d:06:ba:24:
5c:c8:e6:b1:a5:1f:3b:52:af:fb:8b:3d:b0:34:a2:13:3f:5e:
55:65:b8:e8:27:2d:6b:74:24:b4:31:b3:26:ce:e4:d4:7e:c5:
07:49:8b:91:27:a0:e3:4d:3c:d9:cd:b5:67:db:2e:3a:ab:6b:
c6:11:47:8c:e6:52:f4:22:5e:54:cc:05:bd:7c:9e:dd:5e:ff:
f5:da:97:b1:cb:bb:25:3c:e9:13:1f:c7:89:22:8b:2f:e2:89:
13:82:69:ea:8e:04:32:1b:8e:8c:cd:14:99:8d:a7:ed:11:9a:
d8:45:3d:23:fa:09:e0:1f:eb:99:84:09:a0:d1:c0:35:a3:79:
97:c7:fb:3b:f5:74:03:eb:da:e7:93:38:d1:68:ec:1e:61:43:
10:ad:38:b9:ba:93:e9:1f:b0:25:00:29:c3:be:fc:46:bf:92:
ea:ee:5c:e9
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTg0QTExMC8GA1UEBRMoNjM3RDU2QTc1QkI5NUJDNUM5RTZCMDg5RDkzNENCNUUy
RkJEOTYyRDAeFw0yNjA5MzAxNjI5MzBaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYmQzOGVhLTQxODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIjH575CdXL7pkinuMmpe9cNMmDPhUinIWbw2z+vGXkjTWRB7BLqljZRnU57Ej
f7nbvyk6smYZtf2O/XNat+cKASA/w7MoFWi1sTeVPjMlPSmfW/UAid3MGOQZ25uy
8ya/M9Q+qyf9sjd/0N9ZQLbzz6IFLlqd4JaCw67wod0mVIA2WV8mrsESesZRKX3P
pKe9ChPpF4Y9fEIgUUA3G9rtNMyf0KwvTq7EtO0Jbi0wmJ57yWuOL9Kuwf+Lxyf2
ToU84taCJusZ7pFBOaXkwO/JVcnB2Yx23ZX4JT0lOfkhVkDdnLvZTGZ+HakPq2Cr
1yrUm7Z0AxLnHFg0wBEW9GyXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU7QOSyarA
dqBJ4TrO8xUtZqaK2sowHwYDVR0jBBgwFoAUY31Wp1u5W8XJ5rCJ2TTLXi+9li0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBODRBLzc3QUM3QkQyMzRG
NzExRjFCQjczNkNBNzdDRUU1MjhFL1kzMVdwMXU1VzhYSjVyQ0oyVFRMWGktOWxp
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvWTMxV3AxdTVXOFhKNXJDSjJUVExYaS05bGkwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTg0QS83N0FDN0JEMjM0RjcxMUYxQkI3MzZDQTc3Q0VFNTI4RS9EODM3NUQzMEE2
OUIxMUYxQTI5QTc3NDkzNDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACXe+gwDQYJKoZIhvcNAQELBQADggEBADAv8Vbqd266elSY9aAjm5LX
smbAuu4iwO/oHA6xhSGCUpPnYk3xEbZpmjvciQ6hX+6YvBXuSqhVtoDyHFE26iF6
Pr7qmc5m5PJWXOifrTEI71toNfr/HQa6JFzI5rGlHztSr/uLPbA0ohM/XlVluOgn
LWt0JLQxsybO5NR+xQdJi5EnoONNPNnNtWfbLjqra8YRR4zmUvQiXlTMBb18nt1e
//Xal7HLuyU86RMfx4kiiy/iiROCaeqOBDIbjozNFJmNp+0RmthFPSP6CeAf65mE
CaDRwDWjeZfH+zv1dAPr2ueTONFo7B5hQxCtOLm6k+kfsCUAKcO+/Ea/kuruXOk=
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:27:32 2026 by rpki-client