
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/79FCD514862B11F19F545A5A85A30FBC.roa
File: 79FCD514862B11F19F545A5A85A30FBC.roa (raw, json)
Hash identifier: 0lUhr9E0+OD/ipp8YwvzpZUPTlZiljm7z4wnu4JJie8=
Subject key identifier: CA:38:C5:DC:AB:37:17:F5:5F:AA:69:F6:97:86:B6:8D:78:F6:E7:79
Certificate issuer: /CN=A9181C22/serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Certificate serial: 07
Authority key identifier: CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/79FCD514862B11F19F545A5A85A30FBC.roa
Signing time: Thu 23 Jul 2026 00:14:32 +0000
ROA not before: Thu 23 Jul 2026 00:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9268
IP address blocks: 203.17.73.0/24 maxlen: 24
203.18.19.0/24 maxlen: 24
203.26.36.0/24 maxlen: 24
203.57.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181C22, serialNumber=CA8CFE27D8227A31758DEBC3C8CFB49A68BD9C16
Validity
Not Before: Jul 23 00:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a615ce7-2732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:53:e0:7c:75:15:dc:cf:b1:9b:0a:fa:f1:19:
3b:e4:59:a6:5b:88:b2:1f:fd:56:92:4c:99:76:8b:
3c:c6:37:4e:30:52:83:e4:0b:21:27:ba:30:bf:6f:
d9:ff:f4:80:51:0f:7d:d7:bd:c7:7b:cc:d2:32:fc:
dd:33:9e:53:bf:b1:f4:39:31:9a:af:f6:64:d4:df:
ff:4c:8c:48:21:2f:a7:d1:63:e9:2f:fd:ed:49:50:
6a:0d:6b:6d:41:76:89:83:36:fe:5c:76:46:7a:c6:
e9:2d:d7:32:39:c0:1b:42:ef:10:7e:c5:0c:1c:b2:
0a:c8:4f:a5:3d:af:50:94:7c:4a:ba:57:f3:a8:5b:
97:56:26:24:ec:42:ed:65:b7:9d:93:db:3f:af:2c:
ff:2a:ee:2a:ed:6a:4e:ee:71:ed:88:7a:41:46:47:
c5:6f:e1:cb:a8:d4:f7:d4:2c:f6:49:b2:89:e7:33:
71:a6:2d:68:1f:11:48:d5:8b:f1:32:8b:54:7e:9e:
0b:91:d1:48:c2:d6:06:46:00:08:09:04:a3:91:f6:
eb:ab:c5:c9:f8:db:1d:82:f5:72:7e:4d:ec:3b:ac:
7c:a4:39:bd:0f:5c:6e:56:eb:f2:db:1a:9b:20:a2:
fd:50:da:65:3c:61:01:15:36:c6:ef:09:96:c7:4d:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:38:C5:DC:AB:37:17:F5:5F:AA:69:F6:97:86:B6:8D:78:F6:E7:79
X509v3 Authority Key Identifier:
keyid:CA:8C:FE:27:D8:22:7A:31:75:8D:EB:C3:C8:CF:B4:9A:68:BD:9C:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/yoz-J9giejF1jevDyM-0mmi9nBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoz-J9giejF1jevDyM-0mmi9nBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181C22/516C79787FF611F19F03B68591A30FBC/79FCD514862B11F19F545A5A85A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
203.17.73.0/24
203.18.19.0/24
203.26.36.0/24
203.57.156.0/24
Signature Algorithm: sha256WithRSAEncryption
72:48:bc:a9:d3:f8:dc:05:45:cc:d3:21:42:45:dd:82:5a:2d:
18:64:16:73:72:e0:5f:3e:db:00:a3:36:0d:d4:8f:9e:a0:00:
f7:ec:63:20:44:2c:76:c7:dd:16:db:4a:4b:c9:e4:08:85:76:
1f:d9:5a:07:5b:99:d1:29:0c:c1:9d:9c:7b:77:1d:80:09:05:
d9:b9:bf:b3:7e:76:17:34:f4:4a:06:95:51:c7:3c:3e:22:ff:
e0:51:62:93:cd:65:44:10:53:e7:b9:97:5f:ff:e3:41:3a:13:
c5:81:80:2f:7f:66:06:fa:05:8c:d0:55:fc:a6:cb:1a:db:6a:
2f:c0:19:f2:69:e8:2d:47:cf:a8:de:29:ff:ee:49:78:76:ce:
07:07:15:f7:c7:74:64:cc:55:34:70:4b:16:8e:b3:80:e5:d4:
48:59:69:22:5b:2d:e6:3a:1f:5e:77:e9:fa:d0:5b:1f:31:ff:
0c:1d:5b:21:2b:2f:de:c3:29:a7:eb:cd:0f:c0:92:5e:41:1c:
12:a8:ad:fd:45:00:ae:f7:9e:35:1d:79:d4:4b:66:75:cd:46:
51:f8:50:88:8f:e4:b5:10:e9:68:b9:81:d8:ed:ad:6d:bb:75:
6e:16:4c:bf:28:7e:16:ae:44:88:ff:d2:76:07:87:4e:27:9c:
ca:c9:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:45 2026 by rpki-client