
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa
File: 4793567206A211EEBDA4D34BC4F9AE02.roa (raw, json)
Hash identifier: ukqnSqd7gayKnPkEawgNIo7QZrjN7kVQADe1oZ3VanI=
Subject key identifier: 34:E6:72:82:F0:12:0E:CA:E8:C1:F3:ED:CC:72:5E:EA:86:A3:89:CD
Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Certificate serial: 0636
Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa
Signing time: Thu 30 Apr 2026 19:24:23 +0000
ROA not before: Thu 30 Apr 2026 19:24:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3258
IP address blocks: 85.113.70.0/24 maxlen: 24
91.199.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1590 (0x636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B
Validity
Not Before: Apr 30 19:24:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f3ac67-fb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:8a:3e:64:8f:52:50:94:62:bf:92:5b:06:
4c:04:5d:36:3d:55:c3:26:69:fb:1a:98:6e:f4:ed:
96:4a:8c:e2:2d:9b:2e:53:9f:d2:89:02:1a:72:f3:
a9:68:81:09:24:ec:5c:79:b6:15:fd:9c:54:db:2a:
4d:49:57:ce:ff:22:f5:2a:b4:27:1c:98:03:6c:ef:
26:d6:da:87:ee:7a:8d:40:af:8c:00:2d:62:6c:bb:
1f:7f:ed:65:e4:9d:e1:c4:c7:57:9c:1c:6f:dc:fd:
38:44:97:8c:9a:9c:d1:df:79:55:f7:8d:c8:70:38:
f2:d5:03:8d:c3:9a:4d:51:1a:8a:1f:1a:02:4c:95:
d6:39:45:90:60:2c:d7:fc:65:a8:08:c3:69:6b:5e:
ab:9b:da:91:6d:d8:79:19:a8:c1:14:bf:1d:8e:9c:
cc:79:61:24:9b:40:2a:86:51:e7:66:ac:89:bf:9a:
36:e6:b9:0b:3b:bb:fd:1e:f6:18:e5:3f:4d:60:cd:
0e:b1:6d:fb:03:90:c5:aa:da:b2:c1:9c:0f:8d:e9:
95:67:69:02:6f:80:45:10:cc:a1:0c:c8:e5:ce:f3:
ff:66:c7:cc:8d:f6:6b:ff:59:3a:17:bf:d7:03:9b:
8c:96:7d:d0:f3:e6:2b:d8:ee:bf:2f:2b:c3:c8:97:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E6:72:82:F0:12:0E:CA:E8:C1:F3:ED:CC:72:5E:EA:86:A3:89:CD
X509v3 Authority Key Identifier:
keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/4793567206A211EEBDA4D34BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
85.113.70.0/24
91.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:21:33:60:ba:77:ba:04:df:a9:09:f0:d9:9c:4e:39:60:1e:
60:21:cc:82:e8:d1:80:b8:7a:b0:71:f1:ab:4d:56:6a:72:dc:
b0:33:0b:fd:e9:db:9c:54:e2:57:ec:d7:46:31:62:2b:8f:3b:
05:27:06:a9:67:0e:0b:c0:8e:95:67:a4:34:5e:b8:0b:ed:3a:
2b:9f:37:43:8c:36:e4:c0:71:65:28:84:d4:fe:98:0d:68:4d:
97:30:1e:fa:32:62:06:7b:20:d2:cf:f9:c2:55:85:0d:3e:09:
2e:da:83:7b:f9:b2:c5:11:fb:c9:f5:73:4c:6b:13:a2:7a:0d:
a1:bd:84:71:0a:42:94:cc:bd:88:83:0b:46:03:e5:13:9a:59:
8f:e7:63:ac:15:43:86:20:49:19:6a:ab:4d:22:ae:ae:39:c1:
d0:cf:4e:d9:5b:c7:19:7d:f1:d8:3a:3f:21:c1:5f:35:d3:47:
07:9e:62:62:6c:6a:64:b9:42:9a:99:46:48:36:3b:75:32:0d:
a6:60:f7:2c:18:e0:0a:3f:cb:7d:29:8c:49:ac:dc:c7:72:ed:
85:39:74:45:5d:b8:e0:99:85:8d:ba:e5:a7:29:b2:d3:39:0c:
89:9e:b0:1f:19:ce:be:58:a4:51:22:ae:ef:bd:23:38:c8:ba:
59:4b:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:24:49 2026 by rpki-client