
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/06C575F8A5B911F198D1D1366C11F970.roa
File: 06C575F8A5B911F198D1D1366C11F970.roa (raw, json)
Hash identifier: NokoFevfvQskoHnxohVLzCM9L0IYhUXDVwoiqSoRVHQ=
Subject key identifier: 4B:67:9E:1A:62:3D:7F:3E:7F:0B:91:8C:89:62:CB:C9:34:07:9E:41
Certificate issuer: /CN=A9199197/serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
Certificate serial: 07
Authority key identifier: 49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/06C575F8A5B911F198D1D1366C11F970.roa
Signing time: Tue 01 Sep 2026 03:55:53 +0000
ROA not before: Tue 01 Sep 2026 03:55:53 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 24560
IP address blocks: 177.7.160.0/20 maxlen: 24
177.7.224.0/20 maxlen: 24
179.197.112.0/20 maxlen: 24
179.197.128.0/20 maxlen: 24
179.199.160.0/20 maxlen: 24
179.252.0.0/20 maxlen: 24
179.252.160.0/20 maxlen: 24
179.254.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl
rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=49C351D54CC48FA1A6FE9A1F4CFC4BE8C036B4A0
Validity
Not Before: Sep 1 03:55:53 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a964cc8-b6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:f4:16:3d:7b:35:d5:8e:cb:ad:4a:74:5f:
f0:7f:37:e2:db:af:3b:22:a0:df:91:7b:dc:00:24:
c9:f5:69:5b:70:b2:0d:0c:d2:08:b0:27:99:92:9f:
f0:07:30:f6:78:ef:a6:6c:87:d8:b3:c9:f6:c9:a8:
4e:f4:68:02:3b:f5:70:38:5f:af:0f:6b:32:80:4b:
da:e5:eb:ae:d3:09:00:78:03:c5:62:b2:8d:d3:11:
f6:ab:37:ee:1e:4b:9f:79:a4:aa:77:54:33:11:64:
89:52:81:4a:93:f1:53:51:ff:c6:93:44:f6:9d:a4:
33:f4:d7:a6:d4:70:bc:84:90:09:51:f2:dd:e6:ea:
2c:49:ae:e0:3a:3e:ad:28:71:e9:e2:db:f9:4e:4e:
4f:0a:5e:23:10:86:97:1b:84:1d:5e:75:34:80:83:
05:bb:9a:9b:95:a6:f8:69:e1:e5:06:fa:02:b8:71:
07:e5:59:cc:28:1e:a9:42:32:6a:a9:f6:a8:00:3a:
19:9c:28:c9:28:03:11:9e:2d:c4:3a:88:f5:79:51:
5a:9e:7a:4a:2c:a1:42:df:19:ad:96:46:91:8b:cd:
ba:31:f2:f8:d6:e3:2f:d8:25:07:f0:05:bd:27:14:
87:a7:ef:f7:88:52:87:5e:87:cd:07:15:6e:fe:e1:
81:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:67:9E:1A:62:3D:7F:3E:7F:0B:91:8C:89:62:CB:C9:34:07:9E:41
X509v3 Authority Key Identifier:
keyid:49:C3:51:D5:4C:C4:8F:A1:A6:FE:9A:1F:4C:FC:4B:E8:C0:36:B4:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/ScNR1UzEj6Gm_pofTPxL6MA2tKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/ScNR1UzEj6Gm_pofTPxL6MA2tKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/AB002300A1DD11F1A25A35417EEE528E/06C575F8A5B911F198D1D1366C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
177.7.160.0/20
177.7.224.0/20
179.197.112.0-179.197.143.255
179.199.160.0/20
179.252.0.0/20
179.252.160.0/20
179.254.224.0/20
Signature Algorithm: sha256WithRSAEncryption
27:5c:64:8e:0b:77:48:e4:16:c4:e8:ed:4f:0c:d1:d7:c1:c3:
73:1c:df:01:98:b9:8d:02:f0:6a:18:6e:30:5f:6a:fc:45:43:
06:ac:27:53:24:3f:a9:03:bb:86:7a:ae:4a:07:1c:cd:0d:40:
a0:2f:8b:55:20:03:04:fa:b5:43:4c:a7:c7:81:7f:5b:75:69:
8f:08:d9:af:2a:17:87:07:da:2d:a8:49:9e:d2:a0:34:1e:ab:
47:ea:e3:51:2a:cf:74:e0:09:dc:22:c6:3d:7b:9c:4e:f4:8a:
c6:44:69:41:84:91:92:5f:7c:92:84:64:33:d3:99:a3:fc:bf:
a6:90:89:f4:5b:91:06:07:32:9d:a6:c2:1b:c6:4e:bb:09:72:
54:65:7c:f7:71:61:0e:96:17:15:09:65:ea:9f:fb:e0:3d:cd:
8f:0f:ec:37:50:1e:12:0c:23:73:7a:42:be:25:81:be:6f:7d:
32:05:e8:43:67:0f:95:bf:e7:d4:98:f4:f4:c2:1a:d7:9e:f8:
63:89:73:e3:64:69:a5:89:fd:29:8c:3e:b5:3f:69:e7:6e:6d:
76:6e:1a:4d:45:53:f6:a7:1a:71:6a:05:5e:17:ea:e0:29:b8:
80:6c:e6:0e:71:2e:a0:56:1a:ee:6a:5a:47:16:e1:2e:91:fc:
69:5c:95:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:14:57 2026 by rpki-client