
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa
File: DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa (raw, json)
Hash identifier: qcm4bhKklr+IJNMPbJX3n/r6U90WP+nr7cnlGxBQ5+o=
Subject key identifier: E3:37:ED:A2:41:C7:63:DE:FC:81:26:12:B1:8F:C4:60:6D:74:44:EA
Certificate issuer: /CN=A9110009/serialNumber=787D29540E588237E85D1607960008291189FA22
Certificate serial: 06FF
Authority key identifier: 78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa
Signing time: Sun 04 Oct 2026 22:42:51 +0000
ROA not before: Sun 04 Oct 2026 22:42:51 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 4764
IP address blocks: 203.30.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl
rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 22:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1791 (0x6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110009, serialNumber=787D29540E588237E85D1607960008291189FA22
Validity
Not Before: Oct 4 22:42:51 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6ac2d66a-7b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:76:2c:34:d2:a9:62:3e:cc:c5:48:4f:a4:
71:f9:4a:67:6e:5b:d0:f6:e0:cf:eb:d8:b3:40:48:
c6:d6:b4:e6:37:7c:60:f1:2b:09:49:4e:23:d5:4e:
de:b9:e0:f6:1f:f5:2d:d5:70:7c:20:7c:40:14:fc:
d8:60:fc:93:27:d6:df:f8:3b:64:28:04:4b:46:48:
e2:6d:b8:6c:90:8a:49:00:fb:b8:19:fd:91:4b:8c:
ac:1d:5b:47:62:b0:28:2c:12:fa:1b:76:2c:7d:70:
ad:95:90:f2:0c:75:3d:73:c2:19:54:f0:42:ec:af:
77:ea:6a:5e:06:3e:43:5f:d7:0a:a7:be:3a:4e:06:
ff:d0:ad:a6:e0:10:d3:64:73:25:c2:b8:4b:71:25:
1c:b2:97:81:a4:74:9c:57:30:99:99:e6:6f:47:8b:
a6:52:a1:85:f4:a1:ff:70:cc:d3:1c:7b:35:61:55:
a6:ec:28:2a:aa:e4:a9:18:a5:ed:63:f0:08:b6:01:
fc:8a:88:ac:ad:e8:80:af:e8:8c:f4:1f:b4:3f:27:
99:4a:dc:23:79:8f:03:e4:a1:6c:e1:17:a8:10:dc:
b1:79:ba:37:36:c7:f7:3c:d4:22:91:e1:4a:ee:7c:
c6:bb:29:3a:c7:f4:2e:36:b5:35:d5:35:24:e3:e6:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:37:ED:A2:41:C7:63:DE:FC:81:26:12:B1:8F:C4:60:6D:74:44:EA
X509v3 Authority Key Identifier:
keyid:78:7D:29:54:0E:58:82:37:E8:5D:16:07:96:00:08:29:11:89:FA:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eH0pVA5YgjfoXRYHlgAIKRGJ-iI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110009/CC810120AC6A11EBA54AF87AC4F9AE02/DDEF7534AC6C11EBB6B1E17DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
203.30.24.0/24
Signature Algorithm: sha256WithRSAEncryption
69:07:63:57:65:6d:ae:51:00:20:02:94:8f:a5:2b:f5:e8:04:
9a:8e:75:f0:3a:db:85:cf:a6:ee:d6:55:c8:6a:0a:13:41:b3:
f2:68:b6:dd:86:8d:ce:fd:93:74:f4:97:0c:4a:c0:24:e1:00:
d0:4a:a7:db:d6:f1:70:b7:0a:e2:28:53:fc:20:62:80:91:4a:
29:f8:e6:ce:0c:20:a5:44:00:7e:1e:2a:ad:5d:f7:ea:cc:ba:
8a:d3:e5:bd:d4:d8:48:53:f3:30:83:f3:c3:3c:13:7e:b5:33:
04:d1:ad:43:ec:95:25:73:17:27:b2:5c:15:a2:7c:d2:dc:80:
4f:54:f3:f9:a8:bf:68:d5:b8:bf:36:a2:49:65:7f:0e:be:b0:
c9:dc:b8:6d:3c:9b:72:85:d6:93:04:e3:b6:8e:53:64:54:00:
5b:6a:a7:ea:9a:da:a7:2b:a3:dc:30:fc:0c:b5:fa:72:3a:ef:
c2:e8:e8:2b:07:f3:58:eb:06:7e:3b:4f:f5:ae:35:5b:d9:6f:
1c:ca:65:e1:77:33:86:1c:1d:f1:8d:8d:86:95:5b:aa:86:2d:
04:6b:76:8a:61:f0:62:8c:4e:23:fa:79:01:76:63:e9:da:8b:
60:cf:ee:c7:22:ac:db:fa:01:84:97:2b:ea:35:83:4c:42:f5:
e7:91:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:52 2026 by rpki-client