
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/4000EEAADDF011F1A6F8444E2B66CEF9.roa
File: 4000EEAADDF011F1A6F8444E2B66CEF9.roa (raw, json)
Hash identifier: 8TI8l0L/MmUA4njsQoszEzCTFLE4kTgOMn4hXl/BsVU=
Subject key identifier: 0A:30:64:E5:74:E3:2A:34:08:EA:5E:CE:EE:34:34:EE:3D:76:62:88
Certificate issuer: /CN=A9197CBD/serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Certificate serial: 0228
Authority key identifier: B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/4000EEAADDF011F1A6F8444E2B66CEF9.roa
Signing time: Wed 11 Nov 2026 16:52:16 +0000
ROA not before: Wed 11 Nov 2026 16:52:16 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 56264
IP address blocks: 157.10.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 03:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 552 (0x228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9197CBD, serialNumber=B4865E3BE9C569D2B93F2C351CAB24D1506AAC0D
Validity
Not Before: Nov 11 16:52:16 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6af49d40-608c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:32:77:f1:04:5b:d1:e7:2a:a7:d2:00:d2:
09:ca:fd:f6:a2:b4:e6:8f:4e:f3:3a:8f:70:f8:e3:
33:82:dd:d2:d8:dc:52:58:3d:4c:a5:23:1d:e1:cd:
a5:96:23:a2:95:ea:f1:ef:a6:15:b2:75:6b:64:cd:
fc:19:9c:e0:c2:46:21:b2:3e:13:ed:98:4e:7a:4a:
90:b2:29:8b:c1:34:55:cf:83:31:d6:19:fe:a4:86:
83:2c:00:68:17:ae:34:ad:01:54:30:30:71:e4:cc:
54:1e:18:78:8a:09:1a:c2:01:f3:63:d4:0e:3b:27:
db:72:f6:dd:15:da:17:e7:0a:5e:61:a4:d2:52:10:
e3:e6:88:b4:1d:b6:e3:7b:c6:74:df:e4:6d:4a:4f:
ce:f4:c9:23:4e:99:52:a1:df:6f:37:92:8b:6d:b1:
5a:f6:d6:05:dd:9f:ae:e2:61:bf:5f:ce:a4:3a:e9:
21:bc:62:b0:0e:fc:92:5e:a2:15:82:a3:24:a3:dd:
9a:2e:6b:c8:be:db:ca:d4:bb:e9:9d:b6:d2:58:96:
7d:7c:d0:26:f1:b0:62:b7:a9:c0:83:a0:30:c8:7f:
aa:b1:08:9b:98:5c:4d:b8:5a:25:26:69:31:d7:4c:
61:c9:00:3c:22:8e:84:7f:90:6d:f1:1e:74:1e:ae:
2f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:30:64:E5:74:E3:2A:34:08:EA:5E:CE:EE:34:34:EE:3D:76:62:88
X509v3 Authority Key Identifier:
keyid:B4:86:5E:3B:E9:C5:69:D2:B9:3F:2C:35:1C:AB:24:D1:50:6A:AC:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/tIZeO-nFadK5Pyw1HKsk0VBqrA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIZeO-nFadK5Pyw1HKsk0VBqrA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197CBD/3570DF2EB11411EE95E74365C4F9AE02/4000EEAADDF011F1A6F8444E2B66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
157.10.174.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e2:8a:49:46:a1:15:87:a1:e4:3f:1a:de:b5:5a:41:b7:1b:
5c:3a:82:50:44:9d:ac:c8:9e:94:6d:b8:f7:41:10:31:58:fe:
a9:16:a5:f9:4b:1d:fe:49:ec:e1:ba:15:c7:ea:a1:bd:6f:5b:
43:09:a7:29:22:bf:e2:5d:a6:90:fe:2b:e1:17:55:ba:76:74:
9c:7f:79:0f:31:ee:57:d1:2c:09:35:f7:6b:20:04:83:d9:3e:
7b:6a:45:0b:ea:b6:91:32:85:9e:4a:e8:1d:d7:25:5d:a8:0d:
3c:2d:0a:ea:da:58:92:07:54:a9:b7:c1:22:66:cd:91:37:15:
c5:53:63:4e:68:ea:18:fd:57:7c:c2:39:08:d0:79:7f:6f:ab:
e6:ea:9d:c8:64:f6:14:3b:93:73:4f:30:68:33:88:87:d1:6f:
f0:ce:82:dc:17:c5:2d:28:57:90:be:37:46:4a:04:75:38:7c:
ea:3d:36:2d:e3:de:75:be:37:f3:29:e1:d6:bd:59:ba:75:85:
4f:41:cf:40:27:49:25:56:9d:d7:0e:a3:43:6e:0e:d9:20:6b:
f2:4d:33:67:43:93:80:8e:22:89:58:a1:e2:76:b4:b8:10:72:
38:fd:a5:43:8b:7f:fb:7d:75:2a:3d:e9:4d:a8:7f:33:63:42:
b3:18:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:12:45 2026 by rpki-client