
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/495324CA39CB11EBB2F08020C4F9AE02.roa
File: 495324CA39CB11EBB2F08020C4F9AE02.roa (raw, json)
Hash identifier: DkdU/sit6KEl/7goo/JItkVs9gPbSPhLgwioVJX99NA=
Subject key identifier: 4B:4D:A6:9E:34:BC:95:D0:F3:08:EC:17:5E:CA:BC:9C:67:1E:1C:C3
Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F
Certificate serial: 0B63
Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/495324CA39CB11EBB2F08020C4F9AE02.roa
Signing time: Thu 30 Apr 2026 19:24:08 +0000
ROA not before: Thu 30 Apr 2026 19:24:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55720
IP address blocks: 203.25.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl
rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2915 (0xb63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E0A8, serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F
Validity
Not Before: Apr 30 19:24:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69f3ac58-03dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:89:00:ee:8d:94:1d:6b:e8:c5:a5:3d:48:
44:a2:7c:d6:f7:2f:2f:89:2f:90:38:2f:f1:10:39:
be:e2:c0:7f:f6:ac:69:53:c1:fa:d7:dc:43:7f:c6:
03:7a:06:17:94:2a:97:9f:5b:2e:d1:1d:0c:11:40:
78:23:ca:6c:f5:d4:e8:6f:60:82:4f:fd:d4:95:36:
97:c2:40:da:03:3b:cf:95:cc:e5:d9:91:e6:0b:71:
1b:e4:87:52:bb:88:d3:1c:7a:ed:e5:59:07:e7:86:
80:de:63:cb:1e:c5:af:98:4d:df:b0:b2:81:c7:29:
fe:0e:34:54:58:61:3a:90:60:69:bc:94:db:f5:36:
48:27:18:03:44:6f:b4:e8:7f:90:01:50:3b:09:16:
3c:89:e2:96:7c:11:23:2e:af:67:dd:28:e7:74:f0:
2d:10:83:47:d1:01:59:16:b0:3f:68:21:91:6b:8c:
c3:ad:a6:8b:45:67:2f:b0:6a:ff:24:07:b7:86:6b:
77:16:cb:8b:bd:8e:c3:a6:b1:43:b5:77:da:10:ed:
1a:5b:5e:0b:5f:0b:2c:57:64:72:28:8b:56:56:80:
93:00:27:10:de:3b:a4:3f:76:a0:21:2f:19:bc:0b:
d0:bd:99:86:67:bc:df:7a:2a:1d:40:67:da:86:38:
41:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:A6:9E:34:BC:95:D0:F3:08:EC:17:5E:CA:BC:9C:67:1E:1C:C3
X509v3 Authority Key Identifier:
keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/495324CA39CB11EBB2F08020C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.25.119.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f2:80:96:55:19:73:5e:ba:ed:c8:40:88:db:d8:95:c1:e3:
c1:c2:69:a8:83:1b:6e:40:50:45:96:49:16:11:4d:89:a5:08:
c2:5d:7c:17:7f:45:0f:98:05:81:d2:55:53:73:d9:3f:58:37:
4e:ca:51:a3:41:db:de:49:15:ef:a1:4f:4d:71:a0:92:9b:15:
13:48:86:73:f8:ce:e4:19:be:12:32:53:34:15:70:85:19:f7:
25:25:9b:27:2a:47:44:f9:89:f8:02:23:c9:05:e2:b8:e4:d9:
4b:a7:35:b0:e2:74:3f:0c:a5:73:c5:97:96:f1:fd:99:ed:a8:
75:b9:f8:28:4f:a1:3a:b5:43:eb:3f:16:4c:e0:9e:0d:19:da:
78:ad:36:5c:b1:b3:bf:ed:40:80:fa:a8:ba:73:04:f6:7f:3c:
4d:fd:39:9e:52:19:bb:ed:f4:e9:8e:c9:84:e6:b5:3c:ef:9f:
d5:a7:5d:91:00:0b:76:1a:f2:c0:94:c0:ba:f3:af:a3:2c:5a:
2e:b5:28:ba:4d:0e:39:6b:c9:32:16:c2:65:f1:3a:7e:7f:50:
bd:b1:e5:e3:3b:c5:76:17:2b:3c:b5:da:82:58:2e:97:da:4c:
ae:86:9e:22:5b:98:22:f0:7f:35:ae:fb:bd:c8:9d:1a:49:25:
d0:66:01:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:57 2026 by rpki-client