
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa
File: 11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa (raw, json)
Hash identifier: YIMgtn+dQ8yJTeLxcT1UUhFPvR85/hE3R6ckZdnpSnk=
Subject key identifier: 75:C1:8A:F1:A6:43:95:EF:7E:EF:A8:A4:03:AC:F5:D2:E2:17:C7:E4
Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA
Certificate serial: 0702
Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa
Signing time: Thu 30 Apr 2026 19:24:18 +0000
ROA not before: Thu 30 Apr 2026 19:24:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59253
IP address blocks: 69.161.221.0/24 maxlen: 24
209.17.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1794 (0x702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA
Validity
Not Before: Apr 30 19:24:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f3ac62-528d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:95:9c:24:98:74:e2:bc:a8:2e:d8:ab:00:
c1:e5:74:c9:49:91:6c:d4:d3:ad:0d:10:e2:51:ba:
85:cf:bf:9b:4e:36:83:49:60:73:0e:e8:07:8d:53:
ac:53:36:bb:bd:0f:db:1d:7e:a7:49:31:de:86:a7:
2a:2f:01:08:71:d4:74:28:96:36:ce:ff:de:8a:b3:
26:bb:6b:cf:8d:f0:0a:11:d5:1a:d2:90:76:49:56:
9e:53:54:13:02:13:2e:9e:a6:64:e2:18:dd:c5:7a:
8a:fc:eb:9a:fa:cf:91:33:87:71:3e:64:4a:9c:ee:
20:bd:4c:7f:07:27:24:1b:10:8d:81:88:e6:c9:b0:
6e:0d:f5:39:85:d9:6b:c5:b0:eb:7e:6b:e9:95:f9:
5d:ca:f7:76:21:6c:bb:67:8a:e1:a6:76:d5:9d:2f:
fd:76:d3:e9:1d:8e:54:21:77:61:9f:df:24:c3:e9:
38:e2:e0:c2:65:ee:97:3b:31:b4:8c:1f:33:bb:6b:
fa:98:a4:a7:71:ef:c2:42:14:f3:26:00:f2:ee:06:
e8:ea:22:94:a6:76:ef:46:16:3d:ed:b5:cc:fc:58:
70:fb:19:75:37:0d:62:94:b3:db:20:94:69:d5:b3:
4d:5e:0d:3b:e7:c8:29:a6:e8:20:b3:84:e4:8d:42:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:8A:F1:A6:43:95:EF:7E:EF:A8:A4:03:AC:F5:D2:E2:17:C7:E4
X509v3 Authority Key Identifier:
keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/11C0D5DA9B4011EB9C1BFC4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
69.161.221.0/24
209.17.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b3:d6:11:9a:2a:e3:61:ce:bc:4b:f6:26:1e:0f:f4:3c:47:
b7:8a:34:e6:c1:78:ff:d9:ad:1d:5d:bb:7f:97:5a:bd:e0:16:
15:f8:61:e5:4b:1c:ac:8e:52:bb:82:ef:b3:ed:f6:07:20:74:
be:b8:80:63:1b:8e:90:31:33:8f:d2:4d:9f:b9:9f:e2:74:b2:
42:85:b7:61:97:49:fc:21:28:83:eb:a5:a4:30:cc:f6:70:01:
d6:a7:0b:a0:a7:19:d0:7c:13:d4:59:a8:18:2b:88:f1:21:db:
38:e9:76:48:5a:97:78:c8:6b:0f:c0:c0:e8:b2:be:57:f1:1d:
55:b7:12:4a:2b:6d:99:b7:bd:ef:4f:24:12:10:27:cf:a5:b0:
e4:7e:06:f5:b4:d2:9e:5c:08:38:69:83:c9:3e:28:be:61:8c:
88:63:8e:a1:63:28:90:82:cf:92:f3:76:13:13:82:d3:1f:9d:
3a:ae:b4:50:d0:df:67:70:c1:7a:5c:15:f7:0e:0b:66:07:0e:
1a:d7:20:ae:12:2e:41:ec:4a:05:d6:85:74:d7:21:15:cd:fa:
a6:be:aa:6a:65:be:e1:1b:96:d8:73:9b:1d:95:8b:26:6d:4c:
3a:01:1f:79:2f:62:e2:0d:39:ad:78:ab:3c:0f:c6:fb:2d:2d:
75:5f:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:36 2026 by rpki-client