
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/0DEDF8C290E511EFBB48661DC4F9AE02.roa
File: 0DEDF8C290E511EFBB48661DC4F9AE02.roa (raw, json)
Hash identifier: 3kIF68zO8V/KZKS8dRul3MgYSoRJ3VG5qDumT+v5J+w=
Subject key identifier: C4:51:BC:B4:70:5C:64:87:6E:8A:81:73:DA:C7:7E:1D:28:C7:37:86
Certificate issuer: /CN=A917D778/serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B
Certificate serial: 0113
Authority key identifier: DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/0DEDF8C290E511EFBB48661DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 13:26:39 +0000
ROA not before: Sat 17 Jan 2026 05:23:44 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 152127
IP address blocks: 210.79.130.0/23 maxlen: 24
2401:5460::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl
rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D778, serialNumber=DDC5DB381FF1ECCA5B95A28514792DCDBA49182B
Validity
Not Before: Jan 17 05:23:44 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a43e8e-f6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:8b:37:de:a0:81:92:5c:ea:8e:a8:01:c5:
2a:68:6b:d1:f7:17:21:a9:e5:d3:c2:a3:e1:35:22:
8e:a8:27:78:e3:7e:0b:f2:b4:88:fe:f0:52:79:52:
68:ec:27:eb:bd:45:d2:d3:9b:02:78:ea:87:2c:de:
98:62:46:54:56:6c:70:3a:06:c8:c2:a8:1d:7f:6e:
83:6d:16:8d:22:2c:a1:60:a5:d5:98:6f:68:61:c5:
28:14:da:2f:06:d6:56:95:95:ef:d0:e4:6e:32:19:
36:ad:52:35:5d:11:fc:2d:51:90:3c:64:64:58:d3:
fa:f9:75:ce:ba:ed:e2:ca:ae:e1:9e:be:69:9a:db:
86:cc:bf:7b:e4:bd:9d:85:27:39:a1:8a:c4:5a:9b:
eb:30:77:51:39:f9:74:4f:6d:23:6c:98:a9:8d:60:
d1:9d:76:89:13:72:c2:9d:b9:58:49:59:66:49:15:
e3:de:51:77:c7:66:9b:8b:ec:e3:9b:69:51:2c:1a:
60:cc:3a:cb:67:f4:1c:da:4d:6b:ae:9c:98:3c:41:
f6:61:6b:1c:17:97:26:b6:0c:7a:fb:79:08:e5:a2:
31:4e:02:69:36:43:9b:87:39:67:c2:f8:c6:45:b6:
ea:57:32:d3:55:72:86:6d:a2:cf:89:43:31:46:02:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:BC:B4:70:5C:64:87:6E:8A:81:73:DA:C7:7E:1D:28:C7:37:86
X509v3 Authority Key Identifier:
keyid:DD:C5:DB:38:1F:F1:EC:CA:5B:95:A2:85:14:79:2D:CD:BA:49:18:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/3cXbOB_x7MpblaKFFHktzbpJGCs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3cXbOB_x7MpblaKFFHktzbpJGCs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D778/5B8D866890E211EF97612A46C4F9AE02/0DEDF8C290E511EFBB48661DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
210.79.130.0/23
IPv6:
2401:5460::/32
Signature Algorithm: sha256WithRSAEncryption
64:f8:b6:c9:77:1b:d8:66:9e:b8:84:56:9b:58:0b:c6:5e:a5:
0d:cb:e9:f9:4b:61:dd:a2:64:1a:f6:87:95:96:62:d8:47:9a:
e8:f4:d1:2d:e4:58:f4:aa:96:fb:03:b6:30:89:ab:2c:d2:2c:
b1:44:cb:cb:9d:40:8b:20:c0:68:34:73:52:ff:7b:af:7d:a1:
84:07:5f:f3:30:81:ae:a4:1a:46:61:d5:49:31:29:cd:90:c1:
47:c5:ad:29:b9:56:9d:7f:d7:57:4c:92:b1:4c:55:6c:b4:69:
b2:69:0f:c4:78:3e:1c:1c:c3:1a:f4:63:ba:c8:78:fe:e3:21:
c4:2d:99:3b:2d:27:14:6d:27:69:ae:70:1e:fe:46:2c:f2:b2:
78:bf:c0:ad:a8:95:d5:f2:91:f1:71:e5:80:42:da:f3:91:2f:
05:1a:76:91:f4:71:49:0d:12:61:3f:6c:7a:68:65:75:ca:52:
d1:51:8d:47:bd:58:17:9a:cf:99:b5:6b:42:bf:a5:da:3c:ea:
29:15:d4:74:85:3b:9d:89:ae:98:be:1d:0d:31:70:6b:9b:4e:
7d:41:ef:22:86:ee:a8:e7:26:bb:65:27:63:94:50:06:15:1a:
f4:0f:41:60:2d:66:65:01:93:bc:4e:79:9f:6c:8a:a4:11:90:
a6:87:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:48:52 2026 by rpki-client