
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/24AC43889DE011EDA182F455C4F9AE02.roa
File: 24AC43889DE011EDA182F455C4F9AE02.roa (raw, json)
Hash identifier: I6jmeK85QWhNrAIYYs7dw4q23XGihItLNS21A6NTDVo=
Subject key identifier: 72:5F:FF:21:D0:60:FF:0F:24:73:E7:80:AC:F0:70:9B:52:F0:AB:CD
Certificate issuer: /CN=A917BED0/serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Certificate serial: 024F
Authority key identifier: 69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/24AC43889DE011EDA182F455C4F9AE02.roa
Signing time: Thu 29 Jan 2026 01:21:57 +0000
ROA not before: Thu 29 Jan 2026 01:21:57 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 7600
IP address blocks: 203.5.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 01:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BED0, serialNumber=692EBD3D03F258746E6843B6128DD209C51222E6
Validity
Not Before: Jan 29 01:21:57 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=697ab635-0a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6a:77:92:48:9f:f9:7f:53:d3:ea:34:5c:95:
a7:e9:f7:68:2a:5c:c1:a9:6a:35:62:36:fe:04:98:
82:77:1f:53:58:03:e4:f7:d6:66:0d:79:d0:09:46:
5c:66:26:ab:10:da:bb:1f:18:ca:35:e5:9c:f4:da:
f2:e4:07:0a:92:4b:e0:60:75:e3:fc:f7:aa:ec:7f:
63:ef:ff:c1:ec:bf:4b:c3:0b:3c:78:a9:b2:f6:52:
e4:64:6b:91:44:d0:00:aa:1e:36:99:4e:ee:81:d8:
11:b3:fa:e4:15:bd:3f:54:61:ba:09:49:96:2d:fc:
42:e8:f7:85:39:a9:93:8c:39:f2:83:c3:79:68:7a:
ef:d9:85:6d:1a:bd:8a:9d:2f:f9:3c:5a:d6:19:e8:
59:ae:06:1f:26:e9:3d:ce:65:bb:61:1d:3a:13:d3:
7e:37:aa:4c:17:60:45:00:9d:80:f6:11:8d:5e:a0:
35:d0:87:8e:fb:2c:d9:2d:1e:15:21:17:cc:9b:06:
0e:2d:74:91:c8:cb:f0:ef:4a:28:6a:e7:d2:39:d1:
5a:02:5b:bb:2c:a1:dc:b0:77:f3:09:be:43:79:d5:
52:0c:13:56:69:3c:6c:35:76:8d:76:9e:1f:47:32:
15:bf:c3:9e:bb:c9:72:6c:bc:76:95:35:7e:d8:93:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5F:FF:21:D0:60:FF:0F:24:73:E7:80:AC:F0:70:9B:52:F0:AB:CD
X509v3 Authority Key Identifier:
keyid:69:2E:BD:3D:03:F2:58:74:6E:68:43:B6:12:8D:D2:09:C5:12:22:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/aS69PQPyWHRuaEO2Eo3SCcUSIuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aS69PQPyWHRuaEO2Eo3SCcUSIuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BED0/DDB589A0801911EDBBBE306EC4F9AE02/24AC43889DE011EDA182F455C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.5.13.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:57:d1:51:6c:82:0a:cb:fa:d5:b2:63:71:39:2f:06:9f:c6:
ec:3a:b2:35:bc:ce:f0:87:03:48:6a:a5:d9:df:f1:de:93:8d:
c2:36:d5:e2:c6:d6:26:99:97:a1:29:3a:45:22:73:69:2f:f9:
d6:b1:04:96:c9:a5:d5:a7:c5:02:02:b8:aa:d6:96:03:e2:2b:
d9:28:1c:1e:15:e7:48:ff:7a:61:42:57:f7:b5:29:2f:c4:64:
f1:37:a6:7e:f7:5f:99:51:6f:8b:0d:bd:6f:7e:9a:3d:54:63:
88:47:a7:90:26:1e:4b:58:9f:7a:89:bb:f6:2a:dd:52:22:e9:
8c:d2:d0:8e:00:93:39:fa:b0:74:db:bc:e0:38:5c:18:d1:0f:
87:5c:66:f8:8a:39:28:c5:30:45:8d:24:a3:32:ba:d0:09:d1:
67:28:8b:f1:8f:2f:f8:37:e9:1b:48:6d:56:7d:c3:73:da:f3:
46:f6:07:cb:7a:30:3f:d9:21:1f:f0:31:22:f5:f5:e7:37:4b:
8d:5b:15:f4:43:69:21:00:78:64:e9:ea:3c:00:34:33:ef:e7:
8f:fb:fb:0b:97:20:5d:7f:1e:10:d6:26:cb:07:32:f2:c9:2c:
01:04:38:bc:62:52:04:c2:d2:d3:fc:af:80:cb:2f:a8:35:70:
f0:57:ef:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:27:32 2026 by rpki-client