
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa
File: 3C74C0E0799D11EF9547461CC4F9AE02.roa (raw, json)
Hash identifier: 2lh0VekensC1iCGtapEG4/oWVTugB2CUNEuEgGTMM4E=
Subject key identifier: 03:94:65:73:D9:EA:4F:F1:90:80:6C:3E:CA:42:DC:D6:C7:74:21:5E
Certificate issuer: /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial: 0123
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa
Signing time: Mon 02 Mar 2026 15:12:42 +0000
ROA not before: Thu 23 Oct 2025 07:49:43 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 14618
IP address blocks: 202.50.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:59:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291 (0x123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Validity
Not Before: Oct 23 07:49:43 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a5a8ea-49a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:85:40:da:37:74:17:9f:37:e3:2f:c1:e5:
0d:f8:7b:44:44:bc:55:c4:c4:23:e8:f1:51:72:da:
9f:c1:d3:a3:8f:d3:42:e7:d7:ea:ae:bf:da:8e:30:
28:15:60:c2:33:50:3c:a0:84:7f:44:b5:20:22:cc:
00:de:53:43:75:ee:f3:2c:49:4a:d2:3d:fc:c1:29:
39:ad:e7:5d:32:3c:da:6a:c1:09:a9:db:09:6c:35:
82:7c:87:47:11:2d:38:6e:8f:74:22:66:0d:a6:43:
fb:5b:33:80:89:d7:6a:20:71:09:84:42:b1:5f:4f:
db:b5:dc:a0:ac:c7:10:d3:89:f6:69:ca:7e:c8:6d:
a9:7c:92:4f:54:23:d7:69:0d:05:59:c9:40:d1:05:
75:a7:93:61:65:ee:54:81:1e:38:cf:99:f0:e0:5c:
f1:c5:e3:7a:e6:aa:dc:f3:0f:2c:6e:27:db:84:b0:
73:d3:e0:15:89:4c:ea:96:8c:e0:e5:ef:80:77:b4:
1a:fa:13:aa:84:59:a7:66:f1:80:75:2d:6e:1a:57:
5d:48:9a:83:f3:21:55:62:c0:5a:e2:31:7b:6e:46:
3a:f6:b5:56:f8:c6:75:2c:72:8d:69:ce:65:66:ae:
c6:5b:fb:42:4f:1a:69:98:fa:92:1f:bd:d0:fe:0a:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:94:65:73:D9:EA:4F:F1:90:80:6C:3E:CA:42:DC:D6:C7:74:21:5E
X509v3 Authority Key Identifier:
keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/3C74C0E0799D11EF9547461CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.50.102.0/24
Signature Algorithm: sha256WithRSAEncryption
80:71:15:1c:8e:28:b1:33:cb:c7:5d:6f:12:68:2c:32:c8:5c:
f4:7a:34:cb:6c:54:0f:82:ab:ed:08:7f:99:bb:26:3a:7e:bd:
ed:15:1c:6d:fd:f4:4f:ef:f7:87:4f:d1:ab:30:b9:22:3c:33:
46:4b:a7:a1:11:51:71:82:05:70:ce:b4:56:a4:df:70:a2:f9:
ce:1f:0f:d8:54:e1:80:eb:70:b4:2f:29:a5:3b:05:70:bb:df:
a0:e1:ed:d2:88:d6:d0:c6:15:d2:6c:24:8b:c6:5e:6b:30:06:
a0:44:2d:9e:05:65:2d:06:d1:a6:31:0f:9b:55:66:03:32:e2:
34:98:f4:c5:f3:5d:00:e5:bb:87:ce:61:92:42:49:b6:8d:e5:
6a:03:ef:ad:3c:ad:4d:85:9e:f9:26:1f:4d:9d:b1:2a:dc:b2:
24:fc:b7:45:35:d8:54:78:32:15:c5:f4:32:79:27:04:42:e8:
15:3d:d6:ac:e5:af:80:6d:af:0f:e2:41:1f:99:b1:57:5d:e2:
f6:51:00:9a:82:db:7a:39:9a:d5:81:e7:1a:d0:2b:91:7c:3f:
52:7c:89:e4:6b:97:0d:12:9d:7e:75:c0:1e:54:29:ec:87:8c:
8e:2c:26:62:51:a1:67:96:e1:5e:d2:dc:f8:c7:8f:4d:30:b2:
24:70:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:26 2026 by rpki-client